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Voll Page 31 , 1.10 Exceptions 

Change heading of exception table to say # instead of TRAP 

Voll Page 196, The Kernel Semaphore (KSEM) 

Add an additional comment about Event KSEMs. 

Voll Page 338 ,Vol2 Page 274, Glossary 
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Voll Page 350 ,Vol2 Page 287, Glossary 

Added references to Vol 4 in VMKPI entry. 

Voll Page 350 ,Vol2 Page 287, Glossary 
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DCOMP added to DF user guide. 
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Clarify description of how to locate idle and free PFs. 

Page 251 , 3.4.21 .PB - Display Blocked Thread Information 

Add an additional comment about Event KSEMs. 

Page 261, 3.4.24 Display User's Registers 

.R command El flag should read Dl flag when bit 9 is 0 for Flag register bit mnemonics. 

Page 266, 3.4.26 .S - Set or Display Default Thread Slot 
.S, command S option edited. 

Pages 27 and 32, 2.8.4 LogGetEntries 

Removed references to LogGetEntries. This API is not supported. 

Page 49, 3.2.2 System Anchor Segment (SAS) 

Correct offsets in SAS base section and inserted length field for SAS_lnfo_Data. 

Page 52 VMBFI BMP Pleader Structure 

Structure added to miscellaneous section 
Pages 80, 82, 83, and 88 

Amended VMAR, VMAL, PF and VP structures to show correct layout of bit fields. Added pf_block to PF structure. 

Pages 88 

Kernel Pleap Structures added. 

Page 184, 3.7.3 System File Table Entry for OS/2 Warp 3.0 

Corrected SFT length of sft_sfi and offsets of fields following. 

Page 210, 3.8.3 PDD IRQ Information Blocks 

Corrected title of PDD IQR to PDD IRQ 
Page 245, 4.4 Standard GDT Assignments 

Deleted note at end of table. Added new note before table. 

Page 280, 4.9 OS/2 FixPak to Build Level Cross-Reference. 

Corrected build levels for Warp GA, Connect and title of 8.200 
Page 210, 3.8.3 PDD IRQ Information Blocks 

Corrected VMOwner info for DIRQ and IRQI. 


Interim update 0.2 

Voll Page 101, Predefined Dynamic Trace Events 
MONCALLS added 

Voll Page 103, TRCUST, The Dynamic Trace Customizer 
Change title 

Voll page 130, DosEnterCriticalSection .... 

'crt' state is incorrectly described. 

Voll page 134, The Dispatcher, Priorities and Dispatching Classes 

Added note at end of section on running in the kernel and device drivers. 

Voll Page 135, The Status of a Thread 

'crt' state is corrected. 

Voll Page 137, A Form for Unwinding Stacks 

Removed from INF version. 

Voll page 202, Involuntary Suspension 

Critical Section: typo, helped should read held. 

Voll page 202, Involuntary Suspension 

Pre-emption: added note about kernel mode. 

Voll page 308, Flow to find the MQ of any Thread 

AAB at TLMA offset +0x8 (not +0xc) 

Voll page 308, Flow to find the MQ of any Thread 

Expanded note at the bottom of the page. 

Voll page 317, Finding the System Queue 

Current read pointer should be offset +0x0c (not +0x0e). 

Vol2 Page 126, Q Command 

Typos: cases->causes, memu-> menu 

Vol2 Page 129, 3.4.24 Display User's Registers 

R command NV flag value should be 0. 

Vol2 Page 255, .PQ Scheduler Priority Queues 

._ptcbPriQRunner should say ’run' state 

Vol2 Page 261, 3.4.24 Display User's Registers 

.R command NV flag value should be 0. 

Vol3 Page 45, Major Code Assignments 

MONCALLS separately listed 

Vol3 Page 218-245, PMSHAPI 

Obsolete tracepoints removed. 

Vol4 Page 188, Record Lock Record for OS/2 Warp V3.0 
GDT_FSC should read GDT_RLR 

Vol4 Page 88, Virtual Page Structure 

vpf_s type should be S and vp_flink type should be D. 


Interim update 0.3 

Voll Pages 245 14.1.2.1 Who Owns Virtual Memory and Who Allocated it? 

Correct typographic error: pseud-objects -> pseudo-object (on-line version only) 
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Vol4 
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Page 80, List of Internal Commands 

.L should read L (printed edition only) 

Page 52 Dump Formatter Installation 

In printed copy only, Note: DF&US.RET.EXE and DF&US.DEB.EXE should read df_ret.exe and df_deb.exe 
Page 214 3.4.16.2 Pseudo-Object Records 

Correct typographic error in Notes: (psuedo) 

Pages 226 3.4.17.1 Free Page Frame Structures 

Correct typographic error in Notes: (psuedo) 

Pages 227 3.4.17.2 Idle Page Frame Structures 

Correct typographic error in Notes: (psuedo) 

Page 17 RETEP 

Note added about modern C compilers. 


Page 5 


Note added following first paragraph. 

Page 45 3.4 Trace Major and Minor Code Assignments 

Table extended to include major codes reserved for other components. 

Pages 9 and 10, 2.1.2 DevFllp_SysRAS 

References to DevPllp_SysTrace and DevFllp_SysRAS should read DevPllp_RAS. 
Page 14 2.2.1 Trace Buffer Structures 

CPIECK KEY: filed->field, Exclusively starts with Upper case E. 


Interim update 0.4 

Voll Page xx Acknowledgments 

Add Joanna Plodgson. 

Voll Page 9 1.3. 5. 2 Descriptor Flags 

Correct definitions of bit 53 and 54 
Voll Page 10 1.3. 5. 3 Descriptor Table Summary 

Correct VDM considerations for IDT and LDT 
Voll Page 196 The Kernel Semaphore 

Clarify use of KSEM blockids 
Voll Page 295 14.1.3.5 

Added more useful PM message queue and window symbols 
Voll Page 342 Interrupt Descriptor Table 

Added information on VDM use of IDTs. 

Voll Page 343 Local Descriptor Table 

Added information on VDM use of LDTs. 

Vol2 Page 14 Forcing a System Dump from the Kernel Debugger 

Add .SYSDUMP command to first paragraph. 

Vol2 Page 17-18 Forcing a System Dump from the Kernel Debugger 
Add RegSA for Pentium processor support. 

Vol2 Page 41 1.5 Kernel Debugger Breakpoints 

Update XCPTBuildR3DispatcherStack 
Vol2 Page 41 1.5 Kernel Debugger Breakpoints 

Add DOS32R3EXCEPTIONDISPATCHER 
Vol2 Page 45-46 1 .6 Exception Logic 

Correct information about local exception handlers used by the system and the exception handling logic. Add details 
of Dos32R3ExceptionDispatcher and Dos32ExceptionCallBack. 

Vol2 Page 48 1 .6.2 Excepton FHandling - Overview diagram 

DosRaiseException flow corrected. Dos32ExceptionDispatcher 
Vol2 Page 86-87 3.3.6 BL command 

Update for I/O breakpoints. 

Vol2 Page 89 3.8.8 BR 

Add I/O breakpoint. 

Vol2 Page 99 3.3.17.1 Descriptor formats Table 4 
Clarify BIG C32 definitions 
Vol2 Page 105 3.3.20.1 DP command 

Add note about invalidity of PDEs under DF. 

Vol2 Page 127 3.3.35.1 R command 

Add note about addressing mode. 

Vol2 Page 127 - 129 3.3.35.1 R command 

Remove reference to 24-bit registers and move GDTB and IDTB to 32-bit registers. 

Vol2 Page 128 3.3.35.1 R command 

Add CR4 to 32-bit reg syntax diagram 
Vol2 Page 131 3.3.35.1 R command 

Add note on CR4 and correct 32-bit register 
Vol2 Page 137 3.3.38 U command 

Add note about V8086 mode addressing. 

Vol2 Page 147 External Commands 

.0 command added. 

Vol2 Page 147 External Commands 

.SYSDUMP command added. 

Vol2 Page 148 3.4.1 .? command 
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Updated note. 

161 3.4.5.11 .D 

typo in warning formate->format 
161 3.4.5 .D 

Note added about <512 byte segments 

167 3.4.5.5 figure 33 

Add remark about fscrit 

168 3. 4. 5. 5 figure 33 

Add note about KSEM blockids 
174 3.4.5.8 .D MFT 

Note added about ALLSTRICT kernel 

196 .M 


Added note about defaults for FP29 and V4 
182 3.4.5.11 .D SEM32 etc.. 

pNname typo corrected no->not 


Added I option. Updated Note. Update Results and Notes. 
Added DF icon 

Added additonal note about early versions of DF 

Updated warning about freed memory, 
esu Its and Notes 

Updated note about the need for kernel symbols 
esults and Notes 

Added note about hmte use and interpretation. 

/ntax 

Added I option and clarified syntax, 
and L option Warnings. 

Updated warnings for use of R and L 
and L option Warnings. 

Updated warnings for use of R and L 
inland 

.0 command added, 
a 

Note about fix 


Updated note on ChildWait. 

258 3.3.35.1 .R command 

Add note about addressing mode. 


190 

3.4.1 

204 

.MC 

205 

.MC 

207 

.MK 

210 

.ML f 

213 

.MO 

225 

.MP i 

226 

.MP 

230 

.MV 

237 

.0 cc 

247 

.PB f 
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266 .SYSDUMP 

.SYSDUMP command added. 

41 and 89, 3.0 and 3.5 Scheduler control blocks 

Ijmp structure added to list of scheduler structures. 

96 3.5.1 .7 Excepton Handling - Overview diagram 

DosRaiseException flow corrected. Dos32ExceptionDispatcher replaced _xcptException Dispatcher. 
125 long-jump buffer 

Ijmp structure added 


Interim update 0.5 

Introduction to the current edition 

Updated and fixed typos. 

Voll Page 103 Chapter 8 TRCUST The Dynmaic Trace Customizer 
Remove duplicate chapter from volume 1 
Voll Page 81 5.6.1 .1 How to find the TSS 

Add additional fields to the TSS 
Voll Page 129 1 1 .1 .2 Multiprocessor Methods - Spin Locks 

Correct formatting error in note about LOCK prefix. 

Voll Page 142, 13.1 .1.1 Address Space Arenas and Regions 

Add note about Protected Region post FP19 Warp 3.0 
Voll Page 143, 13.1 .1.1 Address Space Arenas and Regions 

Add note about Packed Region post FP19 Warp 3.0 
Voll Page 255,256 Exploring Memory Management, Private Arena private data 
Voll Page 260, Exploring Memory Managenent, Finding Who Owns Memory 
Note about .mam after 3.0 FP29 and 4.0 GA 
Voll Page 322, 14.1.4.1 Ring 0 Loop Dump Analysis Example 

Add note about fsd and dd system owners after 3.0 FP29 and 4.0 GA 
Vol2 Page 1 , Kernel Debugger User Guide 

Added up to date URL and FTP information. 

Vol2 Page 46, 1 .6 Trap and Exceptions Processing 

Added information about VSU and clarified DelayHardError. 



Vol2 Page 46, 1 .6 Trap and Exceptions Processing 

Added exception handler return code values. 

Vol2 Page 50, 1.6.4 Intercepting Exceptions and Traps 
Added information about VSU. 

Vol2 Page 139. 3.3.39 Exception/Trap/Fault Vector Commands 
Added information about VSU. 

Vol2 Page 140. 3.3.39 Exception/Trap/Fault Vector Commands 
Added information about VSU. 

Vol2 Page 140. 3.3.39 Exception/Trap/Fault Vector Commands 
Added note about SMP. 

Vol2 Page 217-219 .MO command 

Clarification of own and hmte fields. Remove 'main' from expression 'main executable' in the 'description' section. 
Add note about System Owner Ojects on page 219 for 3.0 FP29 and 4.0 GA. 

Vol2 Page 219 System Object Ids. 

Clarification of use of system object Ids. 

Vol3 Page 5 TRCUST reference 

Update notes on restrictions. 

Vol3 Page 13 2.2.2 TSF Header 

Add note about modname requirements 
Vol3 Page 14 2.2.2 TSF Header 

Add node on major code range. 

Vol3 Page 14 2.2.2 TSF Header 

Add node on maxdatalength default and range. 

Vol3 Page 20 2.2. 5. 7 FMT Keyword 

Clarify use of %P 

Vol3 Page 21 2. 2. 5. 7 FMT Keyword 

Clarify use of %B 

Vol3 Page 21 2. 2. 5. 7 FMT Keyword 

Add %C formatting control 
Vol3 Page 21 2. 2. 5. 7 FMT Keyword 

Clarify use of %R 

Vol3 Page 22 2. 2. 5. 7 FMT Keyword 

Update use of %U and dump format 
Vol3 Page 31 2.3 Formatting Trace Data 

Clarify use of %P and %R 

Vol3 Page 45 3.4 Trace Event Major and Minor Code Assignment 
Add new major codes 

Vol3 Page 163 Resource Manager Tracepoints 
New section 

Vol3 Page 217 Multi-Media Extensions Tracepoints 
New section 

Vol4 Page 70 Virtual Address Space Regions. 

Add diagrams for OS/2 V2.1 1 and OS/2 Warp V4.0 
Vol4 Page 98 Thread Control Block for OS/2 Warp V4.0 
Add OS/2 Warp V4.0 tab 

Vol4 Page 125 Per-Task Data Area for OS/2 Warp V4.0 ALLSTRICT kernel 
Add OS/2 Warp V4.0 ALLSTRICT kernel ptda 
Vol4 Page 131 Per-Task Data Area for OS/2 Warp V4.0 RETAIL kernel 
Add OS/2 Warp V4.0 RETAIL kernel ptda 
Vol4 Page 167 Swappable Module Table Entry for OS/2 Warp V4.0 
Add OS/2 Warp V4.0 smte 

Vol4 Page 1 1 7 3.7.1 .5 Anonymous and Named Pipes 

Update diagram to show instances of named pipes. 

Vol4 Page 199 3.7.10 Named Pipe Structures for OS/2 Warp V3.0 

Add pointer information about instances of named pipes. 

Vol4 Page 237 System exceptions. 

Add note about XCPT_PROCESS_TERMINATE 
Vol4 Page 243 4.3 Trap Screen Reference - System Internal Processing Error. 

Clarified line number info in an IPE. 

Vol4 Page 244 4.3 Trap Screen Reference 

Correct typo formatter -> formatted. 

Vol4 Page 244 4.3 Trap Screen Reference 

Added NMI Error Codes. 

Vol4 Page 249 VM System Object Owber Ids. 

Clarification of use of system object Ids. 

Vol4 Page 255 4.7 DevHIp Function Cross-Reference. 

Remove duplicate DevHlp_DevDone 
Vol4 Page 256 4.7 DevHIp Function Cross-Reference. 

Add new DevHIps for SMP and the Security feature. 

Vol4 Page 280 4.8 Fix Pack to Build Level Cross-Reference. 

Updated for more recent fix packs and OS/2 Warp V4.0 


Interim update 0.6 



Voll Page 27 1.8.6 System Flags 

Add reference to the EFLAGS register. 

Voll Page 99 7.2 TRACE and TRACE Processing 

Add note about dynmaic tracepoints 
Voll Page 210 13.1.2.3 Priority Inverion 

Reword last 5 paragraphs. 

Voll Page 344 Glossary 

Updated PAI entry. 

Vol2 Page 17-18 Forcing a System Dump from the Kernel Debugger 
Correct offset on RegSA for CR4. 

Vol2 Page 89 3.8.8 BR 

Add note about I/O breakpoint address specification. 

Vol2 Page 89 3.8.8 BR 

Add note about I/O breakpoint bug. 

Vol2 Page 206 3.4.14 .MK Display Memory Lock Information Records 
Add note about PISTRICT kernel. 

Vol2 Page 208 3.4.14 .MK Display Memory Lock Information Records 

Add note about the use of cs and eip for 1 6-bit callers. 

Vol2 Page 231 3.4.18.1 Free Virtual Page Structures 
Correct typos in notes. 

Vol2 Page 267 2.4.27 .T Dump the System Trace Buffer 

Add note about suspending the trace from the kernel debugger console. 

Vol4 Pages 69 & 80 Memory Management Control Block Reference 
Added Physical Arena Information structures. 

Vol4 Page 98 Thread Control Block for OS/2 Warp V4.0 

OS/2 Warp V4.0 tcb was not added correct by #0.5 
Vol4 Page Page 238 4.2 OS/2 System Exception Codes 

Add XCPT_UNKNOWN_ACCESS to P2 = -1 for XCPT_ACCESS_VIOLATION. 


Interim update 0.7 

Voll page 127 10.2 Steps to Diagnose a Loop 

Typo in online version: threas-> threads 
Voll page 129 11.1.2 Multiprocessor Methods - Spin Locks 

Typo in online version: .Exchange -> Exchange 
Voll page 130 11.1.3 DosEnterCriticalSection and DosExitCriticalSection 
Reword second sentence for better understanding. 

Voll page 147 13.1 .1 .2 Virtual Address Space Management 

Add _ahvmhShr and correct label typos for _ahvmShr and _ahvmSys 
Vol2 Page 45-46 1 .6 Exception Logic 

Add parameter information for _XCPTBuildR3DispatcherStack. 

Vol2 Page 190s and 192 3.4.10 .LM - Format Loader Structures 
Add references to RASKDATA. 

Vol2 Page 206 3.4.14 .MK - Display Memory Lock Information Records 
Add references to RASKDATA. 

Vol2 Page 247 .PB Blockld 

Clarify DosSem 

Vol3 page 5 TRCUST Reference 

Added information on latest system trace tools. 

Vol3 page 5 TRCUST Reference 

Updated note on dynamic trace restrictions 
Vol3 page 7-8 1.2.1 Invoking the Trace Customizer 

Updated syntax diagram and description for TRCUST 3.06 

Added /D, / L, /NODE, /NOLN, /RM, /RS, /I, IP, /PREINV, /RAS 
Vol3 page 8 2.1 .3.1 Source Level Symbolic Support 

Updated information on supported compilers and added reference to VisulAge and DEDEL. 
Vol3 page 9 2.1 .3.2 MAP File Support 

Added reference to / 1 
Vol3 page 9 2.1 .3.3 Building a Module 

Added reference to DEBDEL 
Vol3 page 1 1 2.1 .2 TDF and TFF File Usage 

Added references to latest tools (DTRACE, TRACEGET, TRSPOOL, TRACE IQ) 

Vol3 page 1 3 2.2.2 TSF Header 

Added TDFID and changed MAJOR to be optional. 

Vol3 page 13 2.2.2 TSF Header 

Updated major code range for RAS Enhancements 
Vol3 page 14 2.2.3 Typelist Definition 

Clarified use of TYPELIST 
Vol3 page 14 2.2.4 Grouplist Definition 

Clarified use of GROUPLIST 
Vol3 page 15 2.2.5 Tracepoint Definition 



Added new RETEP options to syntax. 

Vol3 page 16 2.2.5. 1 MINOR Keyword 

Added reference to / D 
Vol3 page 16 2. 2. 5. 2 TP Keyword 

Clarified use of @STATIC. Referenced MAKETSF. Refereced /PREINV. Updated RETEP description for new 
sub-keywords. Corrected invalid opcode list. 

Vol3 pages 20-22 2.2.57 FMT Keyword 

Clarified use of %P, %C, %U. Added note on TRACEFMT dump format. Clarified not for CMVC users. 

Vol3 page 28 2.2.5.15 Address Specification 

Added note about / 1 and name length limitations. 

Vol3 page 28 2.2.5.15 Address Specification - Flat Register Form 
Updated 32-bit register lists. 

Vol3 page 29 2.2.5.15 Address Specification - Segmented Register Form 
Updated 16-bit register lists. Clarify use or R prefix. 

Vol3 page 31 2.3 Formatting Trace Data 

Clarify use of %P and %R. Add details of pefix format. 

Vol3 pages 38 2.5.1 External Messages 

Remove this section. These messages are not generated. 

Vol3 pages 39-42 2.5.2 Internal Messages 

Rename section and add new messages for TRCUST 3.06 
Vol3 page 44 3.2 Group Qualifiers 

Added new groups. 

Vol3 page 44 3.3a DosXxxx API Pre-invocation Tracepoints 

Added section describing return addresses. 

Vol3 page 45 3.4 Major Code Cross-Reference 
Added new assignments. 

Vol3 page 55 3.4.7 Kernel Services Trace Events 
Add indirected APIs 

Vol3 page 96 3.4.9 Kernel Services Trace Events 

Add tracepoints for the following APIs: 

Dos32CancelLockRequest 

Dos32SetFileLocks 

Dos32ProtectSetFileLocks 

DosCreateSpinLock 

DosAcquireSpinLock 

DosReleaseSpinLock 

DosFreeSpinLock 

Dos32IProtectRead 

Dos32IProtectWrite 

Correct the following tracepoints: 

Dos32PMPostEventSem 
Dos32PMWaitMuxWaitSem 
Dos32PMWaitEventSem 
Vol3 page 97 3.4.7 OS2KRNLD Trace Events 

Remove this section since identical with OS2KRNLR 
Vol3 page 164 3.4.21 DOSCALL1.DLL Trace Events 
Add indirected APIs 

Vol3 page 168 3.4.21 DOSCALL1.DLL Trace Events 

Added parameters to Dos32RaiseException, DosFsSemClear and DosFsSemRequest. 

Vol3 page 1 68 and 1 70 3.4.21 DOSCALL1 . DLL Trace Events 

Added Dos32R3ExceptionDispatcher, Dos32ExceptionCallBack, xcptExecuteExeceptionFlandler, UT16_RETURN 
and UT32_RETURN tracepoints. 

Vol3 page 209 3.4.30 QUECALLS.DLL Trace Events 
Add indirected APIs 

Vol3 page 209 3.4.33 SESMGR.DLL Trace Events 
Add indirected APIs 

Vol3 page 203 3.4.28 OS2CHAR.DLL Trace Events 

Added CharBufferto KbdStringln Post-Invocation. 

Vol3 page 345 3.4.51 PMGPIR Trace Events 

Remove this section since identical with PMGPI 
Vol3 page 345 3.4.51 PMGPIR Trace Events 

Remove this section since identical with PMGPI 
Vol3 page 382 3.4.54 PMGPID Trace Events 

Remove this section since identical with PMGPI 
Vol4 page 1 Chapter 1 CONFIG.SYS RAS Commands 

Change title to CONFIG.SYS RAS Statements 
Vol4 page 1 Chapter 1 CONFIG.SYS RAS Commands 

Added SCKILLFEATUREENABLED. 

Vol4 page 1 Chapter 1 CONFIG.SYS RAS Commands 
Added RASKDATA 
Vol4 page 2 1 ,2a RASKDATA 

Inserted RASKDATA section. 



Vol4 page 2 1 ,3a SCKILLFEATUREENABLED 

Inserted SCKILLFEATUREENABLED. 

Vol4 page 4 1 .6 SUPPRESSPOPUPS 

Updated for SUPPRESSPOPUPS=0 
Vol4 page 6 1 .10 TRAPDUMP 

Added PD parameter and Ctrl-Alt-FI 0-F1 0 key sequence. 

Vol4 page 6 1.10 TRAPDUMP 

Added reference to the TRAPDUMP command. 

Vol4 page 7 la Miscellaneous RAS Command Command Utilities 

Added new chapter to describe TRAPLOG, TRAPDUMP and SYSDUMP 
Vol4 Page 52 VMBH BMP Pleader Structure 

Structure added more examples of BMP use. 

Vol4 page 69 & 80 Memory Management Control Block Reference 

Added Per Arena Page Table Data (PGDATA) 

Vol4 Page 88 VMKSPI Structures 

Fix swappable heap header offsets. 

Vol4 page 172 3.7 File System Block Reference 
Correct title 

Vol4 page 242 4.3 Trap Screen Reference 

Correct wording of xSLIM descripton. 

Vol4 Page 255 4.7 DevPIlp Function Cross-Reference. 

Correct typo in DevPllp_RegisterDeviceClass 
Vol4 Page 255 4.7 DevPIlp Function Corss-Reference. 

Added: helper functions 0x7f - 0x83 
Vol4 page 257 4.7a Device Driver Strategy Commands 

Added table to system cross-reference. 


Preface 


Debugging problems is essentially an iterative process of hypothesis, test and conclusion that aims to eliminate the irrelevant and therefore 
focus on the probable causal area. 

To engage this process successfully one needs to be equipped with an innate ability to think laterally coupled with sufficient knowledge of 
the environment in which the problem persists and above all else to be able to use the tools that extract information from the system under 
diagnosis. 

This scenario applies as much to first level problem determination (PD) as it does to the software developer who is engaged in detailed 
analysis of his programs' behaviour. 

Information and tools to aid first level problem determination is relatively accessible. Technical literature is available from IBM and books 
stores that will fulfil the needs of the first level PD analyst. For example, the reader is invited to consult the following IBM Red-book 
publications to achieve an all-round high-level technical appreciation of the OS/2 environment: 

The Technical Compendium Volume 1 - Control Program 

The Technical Compendium Volume 2 - DOS and Windows Environment 

The Technical Compendium Volume 3 - Presentation Manager and Workplace Shell 

The Technical Compendium Volume 4 - Application Development 

The Technical Compendium Volume 5 - The Print Sub-system 

The problem analysis level that is less well provided for is that which involves internal knowledge of the OS/2 operating system and its 
diagnostic tools. This is the level at which Service personnel, System Programmers and Software Developers work. It is this audience to 
which the OS/2 Debugging Handbooks are directed. 

An inevitable consequence of working at a deep technical level is that the amount of information one could amass is vast. Given time 
constraints and the need to publish useable material before it became obsolete we had to make certain compromises for the first edition. 
The following principles guided us in making decisions about which material to include: 

Material that is adequately documented elsewhere is referenced but not included. 

Accurate reference documentation for the diagnostic tools and facilities available for OS/2 has been given priority over worked 
examples and OS/2 Internals reference material. 



Internals information has centred around the base operating system - that is, the kernel. 

We hope to remedy some of these short-comings in future revisions of this book and in companion volumes. Updates to the on-line version 
of this book will be made available via the Developer Connection CDROM. 

The current printed edition contains full reference material for the following OS/2 System diagnostic facilities: 

System Trace 
System Dump 
Kernel Debugger 

In addition to these topics we have included an introductory guide to problem determination. This provides a resume of the hardware and 
software environment and an introduction to using the dump formatter and kernel debugger. 

Throughout this book we assume the availability of and familiarity with two co-requisite publications: 

The Intel Pentium Family User's Manual, Volume 3: Architecture and programming manual, ISBN 1-55512-227-2, Intel order number 
241430-003. 

This should be consulted as the authoritative source for hardware architectural information. 

The Design of OS/2 by FI.M. Deitel and M.S. Kogan. 

This should be consulted for an overview of the internal operation and architecture of OS/2. 

This book is supplied with a CDROM whose contents are: 

• Sample exercises to accompany Volume 1 , Introduction to Debugging. These take the form of system dumps of typical problems 
in application programs. 

• On-line version of this book. This is slightly more up-to-date than the printed version and includes more worked examples. This is 
an .INF file and should be viewed using the OS/2 VIEW.EXE program. Much use has been made of hypertext links, which direct 
the user to the glossary. From the glossary it is possible to link to related material in other sections of the book. 

• The OS/2 Problem Determination Package (OS2PDP), which includes the dump formatter, symbol files, and trace customiser 

(TRCUST). 

Unless otherwise stated the material in this book may be assumed to be applicable to OS/2 Warp version 3.0 (ALLSTRICT Kernel). 

As indicated above, work on this subject matter can never be complete. We intend build on and update the material in this edition. In order 
to address the areas in most need of attention we invite the reader to fill in the Reader's Comment Form with their suggestions. 
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A complete list of International Technical Support Organization publications, known as redbooks, with a brief description of each, may be 
found in: 

International Technical Support Organization Bibliography of Redbooks, GG24-3070. 

To get a catalog of ITSO redbooks, VNET users may type: 

TOOLS SENDTO WTSCPOK TOOLS REDBOOKS GET REDBOOKS CATALOG 


A listing of all redbooks, sorted by category, may also be found on MKTTOOLS as ITSOCAT TXT. This package is updated monthly. 

How to Order ITSO Redbooks 

IBM employees in the USA may order ITSO books and CD-ROMs using PUBORDER. 

Customers in the USA may order by calling 1-800-879-2755 or by faxing 
1-800-445-9269. Most major credit cards are accepted. Outside the USA, 
customers should contact their local IBM office. Guidance may be obtained by 
sending a PROFS note to BOOKSHOP at DKIBMVM1 or E-mail to bookshop@dk.ibm.com. 

Customers may order hardcopy ITSO books individually or in customized sets, 
called BOFs, which relate to specific functions of interest. IBM employees 
and customers may also order ITSO books in online format on CD-ROM 
collections, which contain redbooks on a variety of products. 


ITSO Redbooks on the World Wide Web (WWW) 


Internet users may find information about redbooks on the ITSO World Wide Web home page. To access the ITSO Web pages, point your 
Web browser (such as WebExplorer from the OS/2 3.0 Warp BonusPak) to the following URL: 


http : //www . redbooks . ibm . com/ redbooks 


IBM employees may access LIST3820s of redbooks as well. Point your web browser to the IBM Redbooks home page: 

http : //w3 . it sc . pok . ibm . com/ redbooks /redbooks . html 
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Introduction to the current edition 


Recent releases of OS/2 have introduced an number of so called HAS enhancements and fixes to the System Debugging facilities. These 
enhancements have been released mainly in two major fix packs: 

Fix Pack 29 for Warp 3.0 and base Warp 4.0 

Fix Pack 35 for Warp 3.0 and Fix Pack 10 for Warp 4.0 

All RAS enhancements are available with the base release of OS/2 Warp E-Server 



This edition of the The OS/2 Debugging Handbook has been updated to include information on some of these new debugging facilities. For 
interim update 0.5 I have concentrated on updating the system structres and trace information for OS/2 Warp V4.0. Notes have been added 
throughout where the internal implementation differs from earlier releases. 

Interim update 0.7 contains major updates to TRCUST, RASKDATA, SYSDUMP, TRAPDUMP, TRAPLOG and the System Trace Reference 
that reflect the latest RAS enhancements. It also includes additional information on the SYS317x exception popup message. 

Other facilities that were introduced with these releases of OS/2, but are not yet covered, include: 

DTRACE - the low-level dynamic trace utility 

System trace enhancements 

Software trace 

PROCDUMP, PDUMPSYS and PDUMPUSR utilities. 

PMDF enhancements 
TRACEFMT enhancements 
FFST/2 

Error Logging V2 
New REXX EXECs 
System Anchor Block 

Future updates to the The OS/2 Debugging Handbook will include information on these topics together with updates on Warp SMP. 

For further information on these new facilities the reader is referred to the README. DBG file, which is distributed with all fix packs that 
include the debugging enhancements. 


Approach to Problem Solving 


In order to succeed at low-level program problem diagnosis, one must have several skills. None of these is particularly difficult, but many are 
foreign to today's programmers. 

At first, it will appear that each problem is solved with a different technique. Study of the methods used to solve problems yields the fact that 
the several skills are used as appropriate, virtually as subroutines, and without thought, by experienced analysts. 

The intent of this material is to provide the basic knowlege and to illustrate each of the skills separately, to aid understanding. Trying to solve 
problems without the basic skills can be extremely frustrating, at best. 

The fundamentals include knowlege of hardware operation, software conventions, and basic use of tools to display the data sought. Once 
the fundamentals are understood, it is time to begin using them to solve problems, because one can then concentrate on building the 
problem solving skill. 

Application traps are perhaps the easiest problems to approach, so they are explained after the basic skills. Similarly, traps in privileged 
code are only incrementally more difficult. 

Once some experience in solving traps has been gained, it is reasonable to extend one's skills by exploring reasons for waits and loops, 
collectively known as hangs, or to learn the additional functions provided by Symmetric Multi-Processor (SMP) systems, as well as the 
challenges in properly serializing them when needed. 


List of Necessary Skills 


The fundamental skills are: 


A good knowlege of how the hardware protection mechanisms work. 



A good knowlege of what any instruction actually does. 

A good knowlege of a few primary software conventions: 

How a stack is used and what information is in it. 

How to use the stack data for debugging. 

How to use optional program documentation to get from a failing 
instruction to the actual line of the program which contains it. 

How to find the program's variables in storage. 

How to obtain the above documentation for some IBM languages. 

How to collect a dump of a system at the point of failure. 

How to use the available analysis tools. 

How to determine the owner of a part of storage, 
and which processes have access to that storage. 

And that’s what this material is designed to teach! 


Collecting Documentation 


If the problem can be reliably reproduced in a development environment, do it. This is the fastest way to get the problem fixed. When you 
cannot, try to get a good set of starting documentation. 

It is possible to acquire and install a replacement for the OS/2 kernel which is the same as the one being replaced, except that it has 
debugging facilities and a debug interface to a serial port, COM2. If you install the wrong debug kernel, no one can predict the results. If you 
install the correct version, you will need to have a terminal emulation program (or ASCII terminal) to access the debug interface. The 
capabilities of this debug tool are essentially unlimited, and there is no protection from accidental entry errors. Its use is not a trivial task, nor 
one to be lightly undertaken. 

It is often possible to collect enough information about a problem to diagnose its cause by creating customized trace entries specifically for 
that particular problem. For this to work well, the problem must be reproducable, and the trace buffer must be captured while the data 
gathered is still present. 

Most people who have worked in a technical support role will agree that often the largest obstacle to solving a problem is collecting enough 
useful information about it. We will briefly discuss how to get enough useful data that problem solving can start in most cases. Be aware that 
frequently there will be some additional useful information, which can be gathered when the need for it is discovered, and that what is 
outlined here is not a complete list, by any means. 

It is important to collect as complete a set of volatile data as possible from a single failure. If it is not gathered, it will be lost, perhaps 
requiring another occurrance of the problem in order to get needed information. 

It is generally possible to use either an interactive debugger or a dump to diagnose either traps or hangs in an application. 

For application problems, particularly traps, a good set of documentation includes the following: 

• A statement of what sequence of events leads to the problem 

• The trap screen, if a trap is involved 

• A storage dump, with system trace data 

• All the executable modules involved in the failure 

• Optional application documentation, including: 

all source files 

.map files, produced by the linker 


.1st and .cod or .asm files, produced by the compiler 



The storage dump is the only thing which is volatile. The rest can be collected whenever the need is discovered. To collect the first item, 
perform the following steps: 

Note: THIS WILL DRASTICALLY CHANGE OS/2 BEHAVIOUR WHEN A TRAP OCCURS. OS/2 WILL not CONTROL THE FAILURE, BUT 
WILL INSTANTLY AND IRREVOKABLY STOP THE SYSTEM, AND INITIATE A STORAGE DUMP. THERE WILL BE NO SHUTDOWN OF 
THE WORKPLACE SHELL, DATABASES, FILE SYSTEMS, (or lazy-write buffers,) OR ANYTHING ELSE. IT CAN BE AS DISRUPTIVE AS 
A POWER FAILURE. IT IS POSSIBLE TO LOSE FILES, OR PARTS OF FILES, but unlikely. 

Prior to WARP: execute the command CREATEDD A: This will prepare a diskette for taking a dump. The diskette will work only once. This is 
not required for WARP, nor for later levels of 2.1 1 . A quick way to discover if it is required is to read the prompt which asks for the diskette at 
the beginning of the process. If CREATEDD is required, the prompt asks for the diskette prepared by CREATEDD, otherwise it asks for a 
formatted diskette. 

Preparation: 

1 . Save the current CONFIG.SYS 

2. Edit CONFIG.SYS 

a. If the line is not already present, add a line which reads TRAPDUMP=ON 

b. add a line which reads TRACEBUF=63 to enable the system trace 

c. add a line which reads TRACE=ON to turn on the system trace 

d. optionally, add a line which reads TRACE=OFF,4,6,7 

e. optionally, turn LAZYWRITE off, so data goes directly to disk. 

3. Locate some formatted diskettes to use for a storage dump. 

Estimate about 2 Megabytes of RAM per diskette; usually one diskette more than that number is needed. For very large systems, estimate 
1 .5 meg per diskette. The dump process WILL NOT format. 

4. Reboot the system so that the changes take effect. 

5. Restore the original CONFIG.SYS, so you do not have to reboot an extra time to put things back to normal, after collecting the 
dump. 

Acquiring the storage dump: 

1 . Cause the application to trap, that is, reproduce the problem. 

2. Insert the CREATEDD diskette, if created, otherwise insert the first formatted diskette. 

3. If you can read the screen, follow directions every time you hear one or more beeps. 

4. If you cannot read the screen, you can still successfully get a dump, by listening for a beep. Insert the next diskette every time 
you hear a single short beep. When the dump is almost complete, there will be a very distinctively different series of beeps. At 
this point, reinsert the first diskette. 

5. Very soon after the first diskette is reinserted, the dump will complete. Remove the diskette. 

6. OS/2 will reboot automatically in most cases. Expect autocheck to run on HPFS drives during the boot. 

7. Run CHKDSK on the drives as soon as convenient. 


Hardware Architecture 


This section explains how the hardware operates in protected mode, what forms of protection exist, how they operate, and what happens 
when a program attempts to violate one or more of the protection mechanisms. 

The three protection mechanisms in 32-bit OS/2 are: 


1 . 


Privilege 



2. Description 

3. Address mapping 

Note: All three are active at all times when 32-bit OS/2 is running protected mode programs. Only address mapping is active when 32-bit 
OS/2 is running a VDM in V86 mode. 


Address Components 


All addresses in x86 processors are composed of two parts: 

Note: Addresses are usually written with a colon separating the two parts, for example, selector:offset. 

1. A segment or selector 

2. An offset 

The offset part will be covered during the review of typical machine instructions, because it is straightforward, and the same in real and 
protected modes. 

Note: These two parts are implicitly or explicitly specified by every instruction that references memory for either or both 
operands. Generally, the selector is implied and the offset is specified but there are exceptions to this. 


NEAR & FAR Addresses 


Because there are two parts of an address and an item may or may not be in a current segment, there are two ways to specify the address 
of a data item. 

A NEAR ADDRESS is an offset without specifying a selector. This is a very efficient way to address data because the overhead of loading a 
selector register and fetching the descriptor is avoided. The selector to use is implied, and is normally already loaded. 

A FAR ADDRESS contains both a selector and an offset in protect mode. This is slower and more cumbersome because both address 
components must be specified as well as causing the overhead of altering a selector register. When a far address is displayed from storage 
(as two words), the offset will be seen in the left word, and the segment or selector in the right word. 

A FAR ADDRESS contains a segment and an offset in real or V86 mode. The overhead is not so bad as in protect mode, because there are 
no descriptors to fetch when a segment register is loaded. 


Real Mode and V86 Mode 


Real and V86 Modes 


CS = Code Segment 
DS = Data Segment 


SS = Stack Segment 
ES = Extra Segment 


for 386 and later, 


FS = another data segment 


GS = another data segment 


In REAL or V86 modes, say 'segment registers' 
In PROTECT MODE, say 'selector registers' 



Note: In real mode each segment register has a 16-bit number. The segment number is shifted left 4 bits, then added to the offset value. 
There is no checking of any kind. 

DS=1234, offset=5678 

12340 

5678 

179B8 

Note: This is equivalent to any of the following: 
segment 179B, offset 8; 
segment 1790, offset B8; 
segment 1267, offset 5348; 
or many other possibilities. 


Protected Mode 


In protected mode, all storage is described by the hardware, using tables maintained by the software. The description includes the location, 
and size of the storage segment, as well as the type of storage. The storage type further constrains how it may be used. 

This section concentrates on the selector part of the address because the offset is handled in a very simple and consistent fashion once the 
memory segment has been located and the validity of the access has been verified. 


Descriptors 


A selector specifies a descriptor, which describes a memory segment. The attributes described include the base or starting address of the 
memory segment, the size of the segment and what accesses are allowed. 

Protected mode addressing in a 386 or later begins with Descriptor Tables which are described by hardware registers. There are three 
Descriptor Tables, each of which is discussed below after supplying the format of individual descriptors. The tables contain the descriptors 
and the descriptors are selected by an interrupt number or by the content of a selector register. 

An application descriptor is required for all accesses to instructions and to data. For most segments, the limit is the largest valid offset. If the 
offset is larger than the limit, a general protection exception occurs. The exception to this rule occurs for data segments which are 'expand 
down'. In this case, the offset must be greater than the content of the limit field. The system stack ( ring 0 ) is an example of an Expand 
Down segment. 

To find the linear address of the data element, the processor adds the offset ( obtained from the instruction ) to the base address of the 
segment. That’s the end of the discussion for offsets! 

There are three distinct kinds of data recognized by the processor: 

Stack, which holds temporary data, parameters and return addresses 

Code, which is instructions for the processor to execute 

Data, which is used to hold data which is available for longer than the lifetime of any one function or routine. 

The primary distinction between stack and data is that data segments begin at offset zero and expand upward ( to the limit ) while stack 
segments begin at the highest offset and expand downward ( to just greater than the limit ). Many language implementations use data 
segments for their stack, which is perfectly acceptable, but it makes it impossible to ’grow' the stack. 


The descriptor for a memory reference is found by using the appropriate selector as the index to a table or, if you ignore the 3 lower bits, as 
an offset to the table, since descriptors are 8 bytes long. 



Selector Format 


In protect mode, a Selector has 3 fields: 

1 . Index, the left 1 3 bits, bits numbered 1 5-3 

This is an index into a descriptor table 

2. Table indicator, one bit, bit number 2 

0 means GDT 

1 means LDT 

3. RPL, the right 2 bits, numbered 1 & 0. 

Requested Privilege Level. 

perceived as a two bit value, range 0 to 3 00=most privileged, or ring 0; 1 1 =least privileged, or ring 3. 

Note: The position of the bits makes a selector (with its 3 low order bits turned off) the offset into the table. 

+ + — + + 

I INDEX TI RPL | fields 

+ — + — + — + — + — + — + — + — + — + — + — + — + — + — + — + — + 

15 14 13 12 11 10 09 08 07 06 05 04 03 02 01 00 bit numbers 


Privilege Levels 


The point of privilege levels is to prevent a program from accessing a storage object that is more privileged than the program itself. 
Generally, this means that application programs are not able to access storage used by supervisory programs in any way. This also means 
it is safe to keep descriptions of storage used by the system in a descriptor table that can be accessed by applications, because the 
application cannot use those descriptors. 

There are actually 3 distinct privilege levels associated with every storage access, and testing privilege level is a two-step process. The 
privilege level used to access a storage operand is the less privileged of CPL and RPL. The first step is to determine the actual privilege 
level with which to attempt the access. The second step is to compare the privilege level of the storage object (from the descriptor) to the 
result of the first step. 


DPL Descriptor 
Privilege 
Level . 

RPL Requested 
Privilege 
Level . 

CPL Current 

Privilege 
Level . 


Bits 45 & 46 of descriptor. 


2 low order bits of 


selector . 


2 


low order bits 


of CS. 


A more privileged (lower numbered) program may access the storage objects of a less privileged program. This is how the operating system 
returns structures and fills in data areas for an application. 

Any attempt by a less privileged (higher numbered) program to access in any way a storage object which is more privileged generates a 
general protection exception. 



RING 3 


RING 2 


RING 0 


appl 1 


shared appl 2 


Descriptor Tables 


There are three tables which hold descriptors. 

The three tables are: 

1 . The Global Descriptor Table or GDT, describes memory objects which are accessible to all processes. 

The GDT is located by means of a hardware register called the GDTR which contains the linear address and length of the GDT. 

2. The Local Descriptor Table or LDT, describes memory objects which are unique to one process or are shared among a few 
processes by design. 

The LDT is located by means of a hardware register called the LDTR which contains a selector. The descriptor referenced by this selector 
must be a system descriptor which describes an LDT. 

3. The Interrupt Descriptor Table or IDT, has gates that specify interrupt handler entry points. 

The IDT is located by means of a hardware register called the IDTR which contains the linear address and length of the IDT. The interrupt 
number is used to index into this table when an interrupt occurs. 


Descriptor Fields 


Type 


Application types: 
System types: 


Tells what kind of object is described 
Code, Data 

LDT, TSS, Call Gate, Irpt Gate 



Base 


Linear address of object 


Limit Defines the size of a storage object 

DPL Privilege level defines which ring(s) can access the described object 


LIMIT 00-15 BASE 0-23 
0 12 3 4 


TYPE S DPL P LIMIT 16-19 FLAGS BASE 24-31 
5 6 7 


byte offsets 

Display a descriptor with ' DB ' to see it in this form. 


Notes : 
TYPE is 
S is 
PL is 
P is 


what kind of object is described 

descriptor category; 0=system, l=code or data 

privilege level of object described 

the present bit; l=present, 0=not present 


Descriptor Flags 

Bit 55 Granularity: (G) 0=limit is in bytes, 1 =limit is in 4K pages 

Bit 54 Default address and operand (D/B) size: 0=16 bit, 1=32 bit 

Note: 

In code segment this bit (called the D bit) governs the default address and operand size. 

In a data segment this bit is ignored. 

In a stack segment this bit (called the B bit) determines whether SP (B=0) or ESP (B=1 ) is used by 
instructions that implicitly reference the stack, for example PUSH, POP, CALL and RET. 

Bit 53 Reserved, must be zero. 

Bit 52 Unused by hardware, used by OS/2 to indicate UVirt 

Bit 47 Present: (P) 1=segment is present, 0=segment is not present 

Bits 46 & 45 Privilege Level: 00=most, 1 1=least 

Bit 44 Segment type: 0=system segment, 1 =application segment 

Bit 40 Accessed: (A) 0=not accessed, 1 =accessed 

Note: If application segment, ( Bit 44 = 1 ), used to store program code and data. 

Bit 43=0 is Data Segment 

Bit 42: Expansion: 0=Expand Up, 1=Expand Down 
Bit 41 : Writeable: 0=Read Only, 1=Read/Write 
Bit 43=1 is Code Segment 

Bit 42: Conforming: 0=Non-conforming, 1=Conforming 
Bit 41 : Readable: 0=Execute Only, 1 =Read/Execute 
Note: If system segment, ( Bit 44 = 0 ) 


Bits 39-42 


Type of segment 


00 

RESERVED 

01 

Available 286 TSS ( 16-bit ) 

02 

LDT 

03 

Busy 286 TSS (16-bit) 

04 

286 Call Gate ( 1 6-bit ) ( Parm Count is words ) 

05 

Task Gate 

06 

286 Interrupt Gate ( 16-bit ) 

07 

286 Trap Gate ( 16-bit ) 

08 

RESERVED 

09 

Available 386 TSS ( 32-bit ) 

10 

RESERVED 

11 

Busy 386 TSS ( 32-bit ) 

12 

386 Call Gate ( 32-bit ) ( Parm count is doublewords ) 

13 

RESERVED 

14 

386 Interrupt Gate (32-bit ) 

15 

386 Task Gate ( 32-bit ) 


Descriptor Table Summary 

There are three descriptor tables at any instant. 

1. Global Descriptor Table 

located via GDTR 
1 per system 

accessible to all processes 

describes objects common to all processes 

2. Local Descriptor Table 

LDTR is selector 

GDT Descriptor Locates LDT 

1 per process except for VDMs in which multiple LDTs are possible, 
describes data unique to one process 

3. Interrupt Descriptor Table 

located via IDTR 

1 per system except for VDMs in which multiple IDTs are possible. 


describes interrupt routine entry points 


The Selector Registers 


Each selector register appears to be 16 bits long. The six application selector registers and a brief description of the use for each follow: 

SS: Stack Selector, specifies the descriptor used for stack references. 

CS: Code Selector, specifies the descriptor used for instruction references. 

DS: Data Selector, specifies the descriptor used for most data references. 

ES: Extra Selector, specifies another descriptor used for data references. 

FS: This is a selector which can be used for data references if explicitly specified. 

GS: This is a selector which can be used for data references if explicitly specified. 

The two system selector registers and a brief description of the use for each follow: 

LDTR: The LDT register selects the LDT descriptor from the GDT. 

TR: The Task Register selects the descriptor used for the TSS. 


When Checking Is Done 


When a program moves data into a selector register, that data becomes a selector and the processor fetches the content of the appropriate 
entry from the specified table into onboard registers which are not accessible to the programmer. The processor verifies the validity of the 
attempted access to the memory whenever a selector register is updated. This makes the protection overhead occur as part of the 
instruction which modifies a selector register, but eliminates it for further use of the selector. 

Note: If the RPL of the SS register is not the same as CPL, or if an attempt is made to move the null selector into SS, a general protection 
exception occurs. 



30 

etc 

i 

i 

etc 

i 

36 

(pl=2) 

limit 

LDTR 

= 28 | 


i- 

i 


i 

2F 

1 



20 I 


i 

i i 



27 

1 



18 


i 

1 DS | 


i 

IF- 



TR 

= 10 


i 

i i 


i 

17 

III 1 

1 1 offset 

III 1 

i 


08 | 


i 

i 



OF 

i 


00 I 

useless 

i 

1 base | 


i 

07 

Ibase | | 




GDT 



LDT 






Note: The first descriptor in the GDT is reserved, by definition, and cannot be used. Any selector which would reference it is called the NULL 
SELECTOR; possible values are 0000, 0001 , 0002, and 0003. 

By definition, the null selector may be placed in DS, ES, FS, or GS, but any attempt to form an address with it is a general protection fault. 

Note: The LDTR is a register that contains a selector. It can be accessed only by privilege level 0 instructions. It must contain a selector that 
references the GDT, and a descriptor whose "type" is LDT. 

Note: It is not unusual for a GDT selector to describe the same storage as an LDT selector does. In OS2 2.x, application selectors in the 
GDT happen to describe one 448 Meg segment, not just a 64K segment like the LDT selectors describe. The linear address assigned to 
each LDT descriptor is extremely convenient for changing one form of an address to another, called thunking, which will be discussed later. 



Descriptor Examples 


These 

examples 

come from DUMP1 , which is used for several exercises. 





DL 7 

37 











0007 

Data 

Bas=ac6d7000 

Lim=0000f f f f 

DPL=3 

P 

RO 






OOOf 

Code 

Bas=00010000 

Lim=00002e77 

DPL=3 

P 

RE 


A 




0017 

Data 

Bas=00020000 

Lim=00002 90f 

DPL=3 

P 

RW 


A 




OOlf 

Data 

Bas=00030000 

Lim=000018af 

DPL=3 

P 

RW 


A 




0027 

Data 

Bas=00040000 

Lim=0000030a 

DPL=3 

P 

RW 


A 




002f 

Data 

Bas=00050000 

Lim=00000f f f 

DPL=3 

P 

RW 






0036 

Data 

Bas=00060000 

Lim=00000f f f 

DPL=2 

P 

RW 


A 




DL BECF 











bece 

Code 

Bas=17d90000 

Lim=00000010 

DPL=2 

P 

RE 


A 




DL BFD7 BFEF 











bfd7 

Data 

Bas=17fa0000 

Lim=0000ffff 

DPL=3 

P 

RW 


A 




bfdf 

Data 

Bas=17fb0000 

Lim=0000ffff 

DPL=3 

P 

RW 


A 




bfee 

Code 

Bas=l 7 f dOOOO 

Lim=00000aa2 

DPL=2 

P 

RE 


A 




DG 2 0 

78 











0020 

Data 

Bas=f fe5b000 

Lim=000003f f 

DPL=0 

P 

RW 



UV 



0028 

LDT 

Bas=ac6d7000 

Lim=0000f f f f 

DPL=0 

P 







0030 

Data 

Bas=f fe09de4 

Lim=0000421b 

DPL=0 

P 

RW 

ED 

A 

UV 



003b 

Data 

Bas=f f 4cbe2c 

Lim=00000073 

DPL=3 

P 

RW 






0040 

Data 

Bas=f fe5a400 

Lim=000003bf 

DPL=0 

P 

RW 



UV 



004a 

Data 

Bas=00000000 

Lim=lbffffff 

DPL=2 

P 

RW 


A 

G4k 

BIG 

UV 

0053 

Data 

Bas=00000000 

Lim=lbf f f f f f 

DPL=3 

P 

RW 


A 

G4k 

BIG 

UV 

005a 

Code 

Bas=00000000 

Lim=lbffffff 

DPL=2 

P 

RE 

C 

A 

G4k 

C32 

UV 

0063 

Data 

Bas=00000000 

Lim=lf f f f f f f 

DPL=3 

P 

RW 



G4k 

BIG 

UV 

006b 

Data 

Bas=00000000 

Lim=lbf f f f f f 

DPL=3 

P 

RW 


A 

G4k 

BIG 

UV 

0070 

Data 

Bas=f fe22000 

Lim=000074e4 

DPL=0 

P 

RO 


A 




0078 

Data 

Bas=f fe22000 

Lim=000074e4 

DPL=0 

P 

RW 






DG 148 L 4 











0148 

Code 

Bas=fff39000 

Lim=0000 92 62 

DPL=0 

P 

RE 


A 




0150 

Code 

Bas=fff 43000 

Lim=0000el37 

DPL=0 

P 

RE 


A 




0158 

Data 

Bas=00000000 

Lim=f f f f f f f f 

DPL=0 

P 

RW 


A 

G4k 

BIG 


0160 

Code 

Bas=00000000 

Lim=f f f f f f f f 

DPL=0 

P 

RE 


A 

G4k 

C32 


The top section of the above output was created by entering the command 

DL 7 37 



By inspecting the type, base, and limit fields in the above output, we can see the following about the descriptor referenced by 002F: 

The storage is described as data having a base, or linear, address of 00050000. The linear address is not normally written with leading 
zeros. If there were any chance that the address might be mistaken for physical, a percent sign would be used, for example, %50000. The 
limit is FFF, which means that the segment is 4K, or 1000(hex) long. The privilege level is 3, the segment is present, and the flags indicate 
Read/Write storage. It has NOT been accessed, because the 'A' flag is not present, and OS/2 no longer uses this flag; once set by the 
hardware, it remains set. 

Examples related to privilege level protection follow below: 


CS : IP 

CPL 

DS : xxxx 

RPL 

lesser 

DPL 

Access 





privilege 

(from 

allowed? 





CPL & RPL 

descriptor) 

OOOF : xxxx 

3 

1 7 : xxxx 

3 

3 

3 

Yes 

OOOF : xxxx 

3 

1 6 : xxxx 

2 

3 

3 

Yes 

OOOF: xxxx 

3 

1 4 : xxxx 

0 

3 

3 

Yes 

OOOF: xxxx 

3 

37 : xxxx 

3 

3 

2 

No 

OOOF: xxxx 

3 

3 6 : xxxx 

2 

3 

2 

No 

OOOF: xxxx 

3 

34 : xxxx 

0 

3 

2 

No 

OOOF: xxxx 

3 

43 : xxxx 

3 

3 

0 

No 

OOOF: xxxx 

3 

42 : xxxx 

2 

3 

0 

No 

OOOF: xxxx 

3 

4 0 : xxxx 

0 

3 

0 

No 

BECE : xxxx 

2 

1 7 : xxxx 

3 

3 

3 

Yes 

BECE : xxxx 

2 

1 6 : xxxx 

2 

2 

3 

Yes 



BECE : xxxx 

2 

1 4 : xxxx 

0 

2 

3 

Yes 

BECE : xxxx 

2 

37 : xxxx 

3 

3 

2 

No 

BECE : xxxx 

2 

3 6 : xxxx 

2 

2 

2 

Yes 

BECE : xxxx 

2 

34 : xxxx 

0 

2 

2 

Yes 

BECE : xxxx 

2 

43 : xxxx 

3 

3 

0 

No 

BECE : xxxx 

2 

42 : xxxx 

2 

2 

0 

No 

BECE : xxxx 

2 

4 0 : xxxx 

0 

2 

0 

No 

0150 : xxxx 

0 

1 7 : xxxx 

3 

3 

3 

Yes 

0150 : xxxx 

0 

1 6 : xxxx 

2 

2 

3 

Yes 

0150 : xxxx 

0 

1 4 : xxxx 

0 

0 

3 

Yes 

0150 : xxxx 

0 

37 : xxxx 

3 

3 

2 

No 

0150 : xxxx 

0 

3 6 : xxxx 

2 

2 

2 

Yes 

0150 : xxxx 

0 

34 : xxxx 

0 

0 

2 

Yes 

0150 : xxxx 

0 

43 : xxxx 

3 

3 

0 

No 

0150 : xxxx 

0 

42 : xxxx 

2 

2 

0 

No 

0150 : xxxx 

0 

4 0 : xxxx 

0 

0 

0 

Yes 


In each case, as you read across you will see that CPL comes from the value of the CS register, RPL comes from the two low-order bits of 
the selector, and DPL comes from the descriptor. The column titled 'lesser privilege' is calculated remembering that higher numbers are 
lower privilege. The final column is obtained by following the access rules, a short way back. 


Exercise 1 : Selectors and Descriptors 


Objectives: 

1 . Learn how to load a dump for analysis 

2. Introduction to the dump formatter 

3. Learn how to display descriptors 

Start the lab at a full-screen or windowed command prompt. 

A full-screen session is faster, but a windowed session can be made 1 00 lines high by entering 

MODE CO80,1 00 This can be very useful, because you can look back quite a ways by using the scroll bar. 

Change to directory CLASSES\UTIL 

Make diskette one by typing OS2IMAGE .AIMAGES.1 62\LAB01 .001 A: 

Make diskette two by typing OS2IMAGE .AIMAGES.1 62\LAB01 .002 A: 

Load the dump into a new file which will be named DUMP1 .DMP by typing 
DCOMP A: X:\DUMP01 .DMP and pressing enter, then following the prompts. 

When the dump is loaded, it should have a file size of 41 9481 6. 

Start the dump formatter by typing DF_RET X:\DUMP01 .DMP, 
or by DF_RET ..\DUMPS.162\DUMP01 .DMP 

You should see 6 or 7 informational lines at the top, followed by a pair of lines which start "Slot", and "*0023#", followed by a set of registers. 
*** We are not yet concerned with any of these. *** 

You should get a prompt, which is the character "#". 

Note: You can always document what you are thinking by simply typing it in as an evaluation for the dump formatter to perform. 
You can access the evaluation function by typing ?' followed by whatever you want echoed to the screen and to the log. You can 
also type in ? and any expression to have it evaluated and output in hex, decimal, octal(l), binary, character, and boolean forms. 

Note: ? by itself is a simple request for what commands are recognized. 

Use the dump formatter to look at descriptors and answer these questions. 


The dump formatter is NOT case sensitive. 



Descriptors may be displayed using "DG" or "DL", followed by the selector. Try it both ways for several selectors, such as F, 160, DFFF, 
158. 

Use the miniature command reference in the back of the student guide, if necessary. 

There are a great many things we will NOT do in this exercise. We are using only a tiny part of the dump formatter's capabilities for this 
class. For example, we will ignore the IDT in this class; one can enter "Dl” followed by the interrupt number to see the descriptor from the 
IDT. 

Questions to answer: 

1 . Which table contains the descriptor data for selector 000F? 

2. Which command is preferred to display only the descriptor for OOOF? 

3. What alternative command will also display only the descriptor for OOOF? 

4. What type of memory is described by selector OOOF? 

Flint: It is one of the first things displayed in the output for each descriptor. 

5. What is the largest valid offset within segment OOOF? 

6. What is the size of segment OOOF? 

Flint: Not quite the same as the previous answer. 

7. What is the linear ( virtual) address of segment OOOF? 

8. What privilege level is segment OOOF? 

9. What is the Requested Privilege Level of selector OOOF? 

Flint: RPL is not in the descriptor. 

1 0. What is the type and limit of segment 001 7? 

1 1 . What is the linear (virtual) address of segment 001 7? 

1 2. Which table contains descriptor 001 7? 

13. Will the aplication program be able to access the segment selected by OOOF? 

Explain. 

14. Will the program be able to store into segment OOOF? 

Explain. 

15. Will the application program be able to access storage using selector 0037? 

Explain. 

16. Will the program be able to write into storage using selector 38? 

Explain. 

17. Will the program be able to write into storage using selector 0007? 

Explain. 

1 8. Enter the following command: DG 70 L 2 

Compare and contrast the base, limit, privilege level and flags for each. 

1 9. Enter the following command: DG 5A;DG 5B 

Compare and contrast the base, limit, privilege level and flags for each. 

20. Enter the following command: DG 28;DL 7 

Compare and contrast the base, limit, privilege level and flags for each. 



The dump formatter will exit in response to the command 'Q'. 


Address Mapping 


This section describes the method used to transform addresses from linear addresses to physical addresses. 


Paging Overview 


OS/2 V2 uses paging in addition to the above logical addressing. Paging is a mechanism which converts linear addresses to physical 
addresses and allows a consistent size ( 4k ) to be moved back and forth to auxiliary storage ( SWAPPER.DAT ) when the demand for 
virtual memory exceeds the physical memory installed on the machine. Another hardware register, Control Register 3 or CR3, is used to 
locate a page directory which contains table entries that locate page tables. The page tables are used to locate the physical memory where 
the data really resides. Physical memory is sometimes referred to by page number. A page number is simply the twenty high-order bits of an 
address. The twelve low-order bits of a page address are all zero. One can convert a page number to an address by simply appending three 
hex zeros to it. 

THE RESULT OF COMBINING A SEGMENT NUMBER AND AN OFFSET, OR THE ADDITION OF AN OFFSET TO THE BASE ADDRESS 
FROM A DESCRIPTOR, IS A LINEAR ADDRESS. Under OS/2 1 .x, these would be physical addresses. Under OS/2 2.0 and following, 
these are linear, or virtual addresses. 

The picture below shows how linear addresses are converted to physical addresses. Only the top line in the picture below is a linear address 
- the rest are physical. 

The ten high order bits of the linear address are used to index into the Page Directory which has the twenty high order bits of the page 
table's physical address (page number). The next ten bits of the linear address are used to index into the page table. The twenty high order 
bits of the page frame's physical address (page number) are retrieved. The twelve low order bits of the linear address are also the twelve 
low order bits of the physical address. Therefore, the physical address is the twenty bits from the page table entry, followed by the 12 
low-order bits from the linear address. 


LINEAR ADDRESS 


bits 31-22 | bits 21-12 | bits 11-00 

I I I 


page 

directory 


page 

table 


page 

frame 


data 






I 


CR3 CR3 and the table entries all have PHYSICAL addresses! 


Page Table Entries 


The page directory entries are identical to the page table entries. 



Each entry is 4 bytes, making 1 K entries in each page table. 


Bits 31-12 
Bits 1 1 -09 
Bits 08-07 
Bit 6 
Bit 5 
Bit 4 
Bit 3 
Bit 2 
Bit 1 
BitO 


Physical Address of page, or Page Frame Address 
Ignored by hardware, used by OS2. See Note. 

Reserved, must be zero 

Dirty (D) 0=not changed (clean), 1=changed (dirty) 

Accessed (A) 0=not accessed, 1=accessed 
Page Cache Disable 0=allow cache use, 1=bypass cache 
Page Write-Through 0=cache write-into, 1=write through to RAM 
Supervisor (S/U) 0=Supervisor (PL=0,1,2), 1=user (PL=3) 

Write enable (RO/RW) 0=Read Only, 1=Read/Write 
Present (P) 0=not present, 1=present 


Note: The left 5 hex digits of the entry are the left 5 hex digits of the physical page; while the right 3 hex digits are mostly flags. 

Note: If Bit 0 is zero, ( page invalid ) the remaining bits are NOT inspected by the hardware. OS/2 uses them to identify the virtual page 
associated with this address. 

Note: Bits 09 and 10 are used to track the state of the page frame. Three of the possible four combinations are used: 

0 - Pageable 

1 - UVirt 

2 - Resident 


Page Table Contents 


To look at the contents of the page directory and page table(s), use the command DP, followed by the address of interest. 


DP F : 0 


linaddr 

frame 

ptef rame 

state 

res 

Dc 

Au 

CD 

WT 

Us 

rW 

Pn 

state 

%00010000* 

OOleO 

frame=0009e 

0 

0 

c 

A 



U 

r 

P 

pageable 

%00010000 

0009e 

frame=0009e 

0 

0 

c 

A 



U 

r 

P 

pageable 

%00011000 


vp id=012ae 

0 

0 

c 

u 



U 

r 

n 

pageable 

%00012000 

00292 

f rame=002 92 

0 

0 

c 

A 



U 

r 

P 

pageable 

DP 17:0 













linaddr 

frame 

ptef rame 

state 

res 

Dc 

Au 

CD 

WT 

Us 

rW 

Pn 

state 

%00020000* 

OOleO 

f rame=00181 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00020000 

00181 

f rame=00181 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00021000 

003d4 

f rame=003d4 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00022000 

0005a 

f rame=0005a 

0 

0 

D 

A 



U 

W 

P 

pageable 

DP IF : 0 













linaddr 

frame 

ptef rame 

state 

res 

Dc 

Au 

CD 

WT 

Us 

rW 

Pn 

state 

%00030000* 

OOleO 

f rame=003ae 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00030000 

003ae 

f rame=003ae 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00031000 

001b5 

f rame=001b5 

0 

0 

D 

A 



U 

W 

P 

pageable 

DP 27:0 













linaddr 

frame 

ptef rame 

state 

res 

Dc 

Au 

CD 

WT 

Us 

rW 

Pn 

state 

%00040000* 

OOleO 

f rame=00052 

0 

0 

c 

A 



U 

W 

P 

pageable 

%00040000 

00052 

f rame=00052 

0 

0 

c 

A 



U 

W 

P 

pageable 

DP 2F : 0 













linaddr 

frame 

ptef rame 

state 

res 

Dc 

Au 

CD 

WT 

Us 

rW 

Pn 

state 

%00050000* 

OOleO 

f rame=00075 

0 

0 

D 

A 



U 

W 

P 

pageable 

%00050000 

00075 

f rame=00075 

0 

0 

D 

A 



U 

W 

P 

pageable 


DP 37:0 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00060000* OOleO frame=002ae 0 0 D A U W P pageable 

%00060000 002ae frame=002ae 0 0 D A U W P pageable 

In each case, the first line of output is the data from the page directory. 

The field labelled 'frame' is the physical page frame which holds the data at the referenced address. 
The 'vp id' is the virtual page identifier for the entry %1 1 000. 

'Dc' is Dirty or Clean. 'Au' is Accessed or unaccessed. 

'Us' is User (Ring 3) or supervisor (Rings 0 & 2). 

'r W' indicates read-only or Writeable. 'Pn' indicates Present or not-present. 


Data Format in Storage 


Data format is least significant byte at lowest address! 


This arrangement is not intuitive for many people, because when you read bytes, the data placement seems reversed. The tools will let you 
display storage as bytes, words, and doublewords; the data will be re-arranged to suit the format requested. This can be good or bad. 

For example : 

DB IF : 1608 L 20 

OOlf :00001608 42 4f 4f 4b 53 48 45 4c-46 3d 43 3a 5c 4f 53 32 BOOKSHELF=C : \OS2 
OOlf :00001618 5c 42 4f 4f 4b 3b 00 43-4f 4d 53 50 45 43 3d 43 \BOOK; . COMSPEC=C 

DA IF : 1608 

OOlf: 00001608 BOOKSHELF=C : \OS2\BOOK; 

DB 17:0 L40 


0017:00000000 

02 00 

03 00 

05 

00 07 

00-Ob 

00 

Od 00 

11 00 

13 

00 

0017:00000010 

17 00 

Id 00 

If 

00 25 

00-29 

00 

2b 00 

2 f 00 

35 

00 %.). + . 

0017:00000020 

3b 00 

3d 00 

43 

00 47 

00-49 

00 

4 f 00 

53 00 

59 

00 ; . = . C . G . I . 0 . 

0017:00000030 

61 00 

65 00 

67 

00 6b 

00-6d 

. 00 

71 00 

7 f 00 

83 

00 a.e.g.k.m.q. 

DW 17:0 L20 
0017:00000000 

0002 

0003 

0005 

0007 

000b 

OOOd 

0011 

0013 



0017:00000010 

0017 

OOld 

OOlf 

0025 

0029 

002b 

002f 

0035 



0017:00000020 

003b 

003d 

0043 

0047 

0049 

004f 

0053 

0059 



0017:00000030 

0061 

0065 

0067 

006b 

006d 

0071 

007f 

0083 



DW 17:1 L 20 
0017:00000001 

0300 

0500 

0700 

ObOO 

OdOO 

1100 

1300 

1700 



0017 : 00000011 

ldOO 

lfOO 

2500 

2900 

2b00 

2f 00 

3500 

3b00 



0017:00000021 

3d00 

4300 

4700 

4900 

4f 00 

5300 

5900 

6100 



0017:00000031 

6500 

6700 

6b00 

6d00 

7100 

7f 00 

8300 

8900 




DD 17:0 L 10 

0017:00000000 

0017:00000010 

0017:00000020 

0017:00000030 


00030002 00070005 
001d0017 0025001f 
003d003b 00470043 
00650061 006b0067 


OOOdOOOb 00130011 
002b002 9 0035002f 
004f 0049 00590053 
0071006d 0083007f 


DD 17:1 L 10 
0017:00000001 
0017 : 00000011 
0017:00000021 
0017:00000031 


05000300 
If OOldOO 
43003d00 
67006500 


0b000700 

29002500 

49004700 

6d006b00 


HOOOdOO 
2f002b00 
53004f 00 
7f007100 


17001300 

3b003500 

61005900 

89008300 


DD 17:2 LI 0 
0017:00000002 
0017:00000012 
0017 : 00000022 
0017:00000032 


00050003 000b0007 
OOlf OOld 00290025 
0043003d 00490047 
00670065 006d006b 


OOllOOOd 00170013 
002f 002b 003b0035 
0053004f 00610059 
007f0071 00890083 



You need to know what you are looking at! 


Exercise 2: Paging, Addresses, Data 

Objectives: 

1 . Reinforce the knowlege from exercise 1 

2. Learn how to display page table data 

3. Learn how to convert a logical address to a linear address 

4. Learn how to convert a linear address to a physical address 

5. Learn how to display storage as ASCII, bytes, words, and doublewords. 

Startup directions: 

1. Start the dump formatter by typing DF_RET ..\DUMPS.162\DUI\/IP01 .DMP 

2. You should see the standard startup messages. 

3. The initial register display is what the application registers were at the time the application (ring 3) program trapped. 

4. You can see these at any time by entering the ".R" command. 

5. Use the dump formatter to look at the dump and answer these questions. 

The dump formatter is NOT case sensitive. 

Note: Paging data may be displayed using the "DP" command, followed by the address. 

Note: The dump process DESTROYS the first entry of the page directory. You will get quite confused if you try to follow the hardware 
method to look at paging information for addresses 0 - 3FFFFF. 

If you must, use the '.N' command to find "savepage", which will tell you the physical address of the page table for that address range. 

This may well be the last time you use a physical address in an OS/2 debugging session. With the notable exceptions of physical memory 
management and physical device drivers, OS/2 is almost completely unaware of physical addresses. The 32-bit virtual address, also called 
a linear address, and a 'flat' address, is what is used in general throughout OS/2. 

Assuming these registers, answer the following questions: 

eax=0000c8cf ebx=00002910 ecx=000000df edx=00000000 esi=00000030 edi=00000060 
eip=000000be esp=000014be ebp=000014e6 iopl=2 rf — — nv up ei pi zr na pe nc 
cs=000f ss=001f ds=001f es=0017 fs=150b gs=0000 cr2=00000000 cr3=001a7000 


1 . What are the base and limit fields for selector 000F? (the base is the linear address...) 

2. Flow many 4k pages are in this segment? Hint: Look closely at the limit field. 

3. How many physical pages are allocated for the virtual memory segment starting at F:0? 
Hint: DP 0F:0 or DP %1 0000 

4. Why are the above two answers different? 

5. What is the physical address of the data at F:0? 

Observation: You now have three ways to address the data. 

a. Real or V86 (&selector:offset) 

b. Logical (#selector:offset) 

c. Linear (%address) 



d. 


Physical (%%address) 


We will now display the same storage many ways, to confirm we know how. 

6. What is the command to display the storage at SS:BP in words using a logical address? 

7. What is the command to display the storage at SS:BP in words using a linear address? 

8. What is the command to display the storage at SS:BP in words using a physical address? 

For each of the following, study the results until you understand. 

9. Display the data at 7:0 as bytes, and words. 

10. Display the data at 7:1 as bytes and words. 

1 1 . Display the data at 7:0 and 7:1 as words. 

12. Display the data at 7:0 as words and doublewords. 

13. Display the data at 1 F:15C6 as bytes and ASCII. Also look at 1 F:15DA as bytes and ASCII. 


Instruction Set 


This section discusses the '86 registers & some common instructions from the instruction set. 


Register Review 


Registers discussed so far: 


CR3 32-bit physical address of the Page Directory 

IDTR 32-bit linear address of IDT, 1 6-bit size of IDT 

GDTR 32-bit linear address of GDT, 16-bit size of GDT 

LDTR 1 6-bit selector for an entry ( type 2 ) in the GDT 

SS 1 6-bit selector, used for stack operations 

CS 16-bit selector, used to locate instructions 

DS 16-bit selector, used to locate data, generally the default 

ES 16-bit selector, used to locate data, string destination 

FS 1 6-bit selector, used to locate data explicitly 

GS 1 6-bit selector, used to locate data explicitly 


Execution 


386 execution consists of the classic pattern of fetching an instruction from memory and executing it, then repeating the process. The 
instructions are always found in a code segment accessed via the descriptor designated by the selector in the CS register. The current 
privilege level of the program is contained by the two low order bits in the CS register. The offset of the next instruction is contained in the 



instruction pointer, (IP or EIP) which is incremented as each instruction is fetched. The 386 and following generations recognize a great 
number of instructions, but compilers generate a very small subset of the whole instruction set. Much of that subset will be discussed here. If 
you cannot ascertain what an instruction does when you encounter it, look it up in the appropriate reference manual. Instructions are 
generally executed sequentially, and the processor attempts to fetch instructions well in advance, to increase execution speed. The flow of 
control departs from sequential when a jump, call, return, interrupt or interrupt return is encountered. Jumps are conditional or unconditional. 
Conditional jumps are used to implement decisions and contain a relative offset which is combined with IP by signed addition to cause a 
different instruction in the same segment to be executed next. Calls, returns and unconditional jumps come in two varieties: NEAR and FAR. 
The NEAR variety update only IP and leave CS untouched. The FAR variety update both CS and IP and are potentially quite complex. 

CALL, RETurn and interrupts require a stack. Most instructions reference the registers. 


General Registers 


EAX | ALL 32 BITS 


part of EAX ) 


AX 


| LOW 16 BITS 

part of AX ) 

| AH 

i 


HIGH 8 BITS 

part of AX ) 


i 

AL 

| LOW 8 BITS 


Registers EBX, ECX, and EDX also subset in the same way. 
There are two byte-sized pieces, which can be collectively 
referenced as a word-sized item. 


1 

EIP 


ALL 32 BITS 

( part of EIP ) 

i 

IP 

LOW 16 BITS 


IP and EIP are always offsets into CS . 

They always contain the address of the next instruction to execute. 


1 

ESP 


| ALL 32 BITS 

( part of ESP ) 


SP 

LOW 16 BITS 


SP and ESP are always offsets into SS. 

They contain the address of the last item pushed into the stack. 


REGISTERS EBP, ESI, and EDI also subset in this way. 

They have no 8 bit parts. 


Machine Instructions 


There are several fields which may be present in an instruction. Additionally, there are a few easy-to-learn generalities which will make 
understanding what an instruction does much easier. Data definitions will not be covered here. There are many fields possibly present in an 
instruction. 


1 . 


The label. 



The label is optional, but must be first. It is followed by a colon. It is used so the programmer can refer to the instruction symbolically. A label 
does not require an instruction. 

Labels which are 'Public' become symbols at link time. 

2. The mnemonic operation code, or opcode, is next. 

It defines what operation will be attempted, and therefore what operands need to be specified. Instructions have zero to three specified 
operands; many instructions also imply operands. 

3. The operands are next, separated by commas. 

The first operand is always the result, or target, of the operation. 

An operand may be a value, a register, or storage. When the operand is a value, it is called 'immediate', because the operand is immediately 
available if the instruction has been fetched. When a register is named, it is the operand. If an expression is contained in brackets, it is 
evaluated and the result is used as a offset into some segment. 

A storage operand is in some segment by default. Data references default to the data segment, or DS, unless (E)BP or (E)SP are present in 
the address expression. In this case, the default segment is the stack segment (SS). (E)IP is ALWAYS in the CODE segment (instructions). 
(E)SP is ALWAYS in the STACK segment (data). (E)BP is USUALLY in the STACK segment (data). 

The default segment can usually be overridden by specifying the selector as part of the address, for example, DS:[BP+8], 

You will come across helper words within operands, such as "byte", "word”, and "dword" which are there to remind you of the size of the 
data item referenced. You will also come across the helper word "ptr", which is to remind you that the addressed data is in storage, and that 
the offset, in brackets, is a pointer to the data. 

4. The last item you may find is an optional comment. 

A comment is preceeded by a semicolon. Anything following is a comment. Comments are sparse in the output of the 'Unassemble' 
command. 

The debug kernel will use a comment to identify a breakpoint. 

Both the debug kernel and the dump formatter will supply a symbol anytime a number matches the symbol in an active file. 


Typical Instructions 


MOV CL.DH 

The opcode is 'MOV', the first operand is the CL register, and the second operand is the DH register. This instruction 
will copy (MOVe) all 8 bits from the DH register to the CL register. 

MOV DX,8 

The opcode is 'MOV', the first operand is the DX register, the second operand is the immediate value of 8. This 
instruction puts the value 8 into the DX register. 

MOV EBP, ESP 

Again, the opcode is 'MOV', and the instruction will copy all 32 bits of ESP into EBP. 

MOV AX,BX 

You should be able to tell by now that this instruction will copy 1 6 bits from BX to AX. Note that instructions which 
reference only registers are extremely unlikely to cause an exception. 

MOV AX, word ptr [BX] 

This instruction is different from the one above because there are brackets around the second operand. This means 
that the operand, BX in this case, is in storage, and the BX register holds the offset into the DS segment. If BX is 
outside the limit of the DS segment, a general protection fault will occur. 

MOV word ptr [BX],AX 



This instruction is similar to the preceeding one, but moves data into storage, rather than from storage. The same 
exceptions might occur, and if the DS segment is read-only, this instruction would also fail. 

MOV word ptr ES:[BX],DI 

This is an example of overriding the default segment, DS, by explicitly specifying that the offset in the BX register 
applies to the ES segment. 

ADD word ptr DS:[BP],AX 

This would add the 16 bits from AX into storage at DS:BP, developing the sum directly in storage. The override is 
needed because the use of BP means that the default segment is SS. 

DEC word ptr [BP-2] 

Some instructions have only one operand. In this case it is in storage at an offset calculated by subtracting 2 from the 
BP value, in the segment defined by the SS register, because BP is used. 

Also SUB, CMP, AND, OR, XOR, XCHG, INC, SHL, etc. 

It is extremely common for 16-bit code to use FAR addresses. When they are in storage, it would require several instructions to get a FAR 
address into the registers, if it were not for several instructions whose purpose is specifically to fetch a FAR address from storage into a 
selector and another register. These instructions may be recognized by the opcode, which is the letter 'L' followed by a selector register 
name other than CS. The apparent first operand is the general, base, or index register which will hold the offset part of the far address. Both 
registers will be loaded, with the first operand coming from the address specified, and the selector coming from the following word. 

LES BX,dword ptr [BP+6] 

This instruction loads BOTH BX and ES. BX comes from BP+6 and ES comes from BP+8, both in the stack segment. 

LDS Sl.dword ptr [BP-12] 

This instruction loads BOTH SI and DS, SI is loaded from BP-12 and DS is loaded from BP-10. 

LEA EDI,[EBP+ECX*4-12] 

Load Effective Address DOES NOT actually reference storage. Instead, once the offset has been calculated, it is put 
into the target register, EDI in this case. Address expressions like this are possible, but not often seen while actually 
debugging. The scale factor can be 1 , 2, 4, or 8; not any arbitrary value 


The System Flags (EFLAGS Register) 


The flags, which are contained in the EFLAGS register, not only control system operation, but also hold the result of instructions such as 
CMP (compare). At times, you will find the flags have been copied to a register, or to memory. The following figure gives the format of the 
flags in such cases: 


Bit 

Hex 

Flag name 

Comments 

18 

00040000 

AC 

Alignment Check, if the alignment mask is 1 (CR0) . 

17 

00020000 

VM 

V86 mode. Turned on for Virtual DOS Machines. 

16 

00010000 

RF 

Resume Flag. Suppress debug exceptions for 1 instruction. 

14 

00004000 

NT 

Nested Task. Involved with hardware task switching. 

13/12 

3000 

IOPL 

The least privileged code which has unrestricted I/O access. 

11 

0800 

OF 

Overflow. An arithmetic result does not fit. 

10 

0400 

DF 

Direction of string instructions. 0=up, l=down. 

09 

0200 

IF 

Interrupt flag. l=enabled, 0=disabled. 

08 

0100 

TF 

Trap flag. Generate a debug exception after each instruction 

07 

0080 

SF 

Sign. l=minus, 0=plus . 

06 

0040 

ZF 

Zero or Equal. l=zero result, 0=non-zero result. 

04 

0010 

AF 

Auxilary flag. Used in BCD arithmetic. 

02 

0004 

PF 

Parity flag. 0=even, l=odd. 

00 

0001 

CF 

Carry flag. 0=no carry, l=carry. 



Unassembled Instructions 


U CS : IP-22 IP- 

-18 





OOOf :0000009c 

fl 

db 

fl 



OOOf :0000009d 

8 94 6f c 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8 94 6f 4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3 94 6f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-23 IP- 

-18 





OOOf :0000009b 

f 7 f 1 

div 

cx 



OOOf :0000009d 

8 94 6f c 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8 94 6f 4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3946f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-24 IP- 

-18 





OOOf :0000009a 

ee 

out 

dx, al 



OOOf :0000009b 

f 7 f 1 

div 

cx 



OOOf :0000009d 

8946fc 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8 94 6f 4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3946f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-25 IP- 

-18 





OOOf :00000099 

56 

push 

si 



OOOf :0000009a 

ee 

out 

dx, al 



OOOf :0000009b 

f 7 f 1 

div 

cx 



OOOf :0000009d 

8946fc 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8946f4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3 94 6f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-2 6 IP- 

-18 





OOOf :00000098 

8b56ee 

mov 

dx,word ptr [bp- 

12] 

OOOf :0000009b 

f 7 f 1 

div 

cx 



OOOf :0000009d 

8946fc 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8946f4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3 94 6f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-27 IP- 

-18 





OOOf :00000097 

ec 

in 

al, dx 



OOOf :00000098 

8b56ee 

mov 

dx,word ptr [bp- 

12] 

OOOf :0000009b 

f 7f 1 

div 

cx 



OOOf :0000009d 

8 94 6f c 

mov 

word ptr 

[bp-04] 

, ax 

OOOf :000000a0 

f 7el 

mul 

cx 



OOOf :000000a2 

8 94 6f 4 

mov 

word ptr 

[bp-Oc] 

, ax 

OOOf :000000a5 

3946f 6 

cmp 

word ptr 

[bp-Oa] 

, ax 

U CS : IP-10 IP 






OOOf :000000ae 

3 97 6f 0 

cmp 

word ptr 

[bp-10] 

, si 

OOOf :000000bl 

77df 

ja 

0092 



OOOf :000000b3 

3 97 6f 0 

cmp 

word ptr 

[bp-10] 

, si 

OOOf :000000b6 

7510 

jnz 

00c8 



OOOf :000000b8 

c45ede 

les 

bx, dword 

ptr [bp 

-22 

OOOf :000000bb 

8b46f 6 

mov 

ax, word ptr [bp- 

0a] 

OOOf :000000be 

268907 

mov 

word ptr 

es : [bx] 

, ax 


Observations About Unassembling From an Unknown Starting 
Place 


Instructions are of variable length, from one to fifteen bytes long. 



This means the address you provided may not actually be the start of an instruction. This also means, therefore, that the first few 
instructions you see may not actually be what the machine saw. 

If you look at the output of several unassemblies starting at sequential addresses, you will see that after typically 3 to 5 tries, the unassembly 
will agree with previous ones, for some point after the unassembly started. 

This is typically within four or five lines, but not always. Be cautious, and see if the sequence looks reasonable. If it does, you have most 
likely found an instruction boundary. Experience will help this process. 

Some common sense will help as well. Obviously, an application in ring 3 cannot perform I/O directly. Likewise, the 'db' means that the 
unassembler did not have a way to interpret this as an instruction. 

The last command entered looks at a few of the instructions which actually preceeded a failure. 

Can you discover which instruction put the data into the ES and BX registers? 


Exercise 3: Unassembling and Reading Instructions 


Objectives: 

1 . Reinforce the preceeding lab exercises 

2. Learn how to unassemble instructions 

3. Learn how to read instructions 

4. Learn about variable length instructions 
We will now look at instructions. 

1 . In what type of segment are instructions found? 

2. Are instructions EVER executed in any other segment type? 

3. Unassemble the instructions which would have been next to execute ( if the application hadn't trapped ) by entering "U". The 
default address is CS:IP initially. You can unassemble further with repeated use of "U". To unassemble at a particular place, 
specify the address; for example CS:IP. 

4. What was the next instruction which would have executed? 

5. Unassemble using an address range to see some previous instructions. Type "U CS:IP-20 IP-10". This will unassemble from 
ip-20 to ip-10. Now type "U CS:IP-21 IP-10" and ”U CS:IP-22 IP-10. Observe what is happening by closely observing the 
address at which each instruction begins. 

6. Now type "U CS:IP-1 8 IP" to see the TWO instructions immediately before the failing instruction 
( at CS:IP! ). What are they? 

7. Which one loaded the address used in the next (failing) instruction? 

8. Did the address come from this routine's private data, or was it a parameter passed by the caller? 

This is presented in detail later. 

9. Circumstantially at least, what seems to be wrong? 

Also presented later. 

This page left mostly blank so that the next pair of pages will face each other. 


Exceptions 



Events sometimes occur which disrupt the normal sequence of instruction. These are called exceptions and interrupts. Intel defines 
exceptions in relation to an unsuccessful attempt to execute an instruction. Interrupts are defined as a hardware response to a event 
unrelated to program execution. 


# 

HEX 

TYPE 

B/C 

ERR 

CODE 

SOURCE CAUSE 

0 

Fault 

C 

No 

Divide Overflow ( perhaps by zero ) 

1 

DR6 

B 

No 

Debug Exception 

2 

Int 

B 

No 

NMI ( Non-Maskable Interrupt ) , normally 
hardware fault 

3 

Trap 

B 

No 

Breakpoint ( INT 3 instruction ) 

4 

Trap 

B 

No 

Overflow ( INTO instruction ) 

5 

Fault 

B 

No 

Bounds Check ( BOUND instruction ) 

6 

Fault 

B 

No 

Invalid Opcode 

7 

Fault 

B 

No 

Coprocessor not available, see note 

8 

Abort 

Abort 

Always 

Zero 

Double Fault, any instruction 

9 

Fault 

C 

Yes 

Coprocessor Segment Overrun (286,386 
only) (Fault D in 486+) 

A 

Fault 

C 

Yes 

Invalid TSS 

B 

Fault 

C 

Yes 

Segment Not Present ( swapped out ) 

C 

Fault 

C 

Yes 

Stack Exception 

D 

Fault 

C 

Yes 

General Protection 

E 

Fault 

PF 

Yes 

Page Fault ( paged out ) 

F 




( reserved ) 

10 

Fault 

B 

No 

Coprocessor Error 

11 

Fault 

? 

Always 

Zero 

Alignment Check 

12 

Abort 

? ? 

Machine 

Check 


13-1F 




( reserved ) 

20-FF 

Trap 

N/A 

No 

Available for Hardware Interrupts Via 
' INTR ' Pin 

00-FF 

Trap 

N/A 

No 

The INT instruction is actually a trap. 


Note: Co-processor not available may be due to not having one, or because the content of the co-processor belongs to another thread. The 
co-processor data needs to be saved and restored only when more than one thread is using it. Bit 3 in CRO indicates that a thread switch 
has occurred and will cause a trap 7 when a co-processor instruction is decoded. 

Explanation of B/C column 

B - Benign, means it is ok with any other exception 
C - Contributary, means it will contribute to a double fault 
PF - Page Fault, means a referenced address is not present 


Definition of Fault, Trap, Etc. 



1 . 


Faults 


CS & EIP point to the instruction which generated the fault. 

2. Traps 

CS & EIP point to the instruction to be executed after the instruction which caused the trap. 

INT3, INTO, BOUND, and INT nn are examples of traps. 

3. Aborts 

In general, these exceptions do not permit locating the failing instruction, nor restart of the thread which caused the abort. Aborts are used to 
report inconsistent or illegal values in system tables, and hardware errors. 

4. Interrupts 

Unlike the preceeding exceptions, interrupts are not related to the program being executed, but to an external condition. 


Hardware Error Codes 


Selector Related Error Code 


Bits 

31-15 : 

Reserved . 

Bits 

15-03: 

The index part of the selector involved 

Bit 

02 : 

The table indicator bit, 
if neither bit 01 nor bit 00 are 1. 

Bit 

01 : 

IDT selector bit, 

if on, the selector is in the IDT. 

Bit 

00: 

External bit, 

if on, not caused by the program 


Page Fault Error Code 
Bits 31-04: Reserved. 

Bit 03: RSV. A 1 bit was detected in a reserved 

bit of a page directory or page table entry. 

Bit 02: U/S. 

0: The program was in supervisor mode. 

1: The program was in user mode. 

Bit 01: W/R. 

0: The access was a read. 

1: The access was a write. 

Bit 00: Level. 

0: The fault is because of a not-present page. 

1: The fault is because of page-level protection. 


Simultaneous Exceptions 


It is possible for more than one exception to occur while attempting to execute an instruction. In order to determine what will 
happen if two simultaneous exceptions occur on the same instruction, use the following table: 



First 

Exception 

Benign 

Benign 

Benign 

Contributory 
Contributory 
Contributory 
Page Fault 
Page Fault 
Page Fault 


Second 

Exception 

Benign 

Contributory 
Page Fault 
Benign 

Contributory 
Page Fault 
Benign 

Contributory 
Page Fault 


Resulting 

Action 

OK 

OK 

OK 

OK 

Double Fault 

OK 

OK 

Double Fault 
Double Fault 


Note: OK means the faults are processed consecutively. 

Note: Double Fault means the faults are reported together. 

Note: If any other exception occurs trying to enter the DoubleFault handler, the processor shuts down until RESET; although, if 
the NMI handler has not been entered, NMI will be recognized and accepted. 

Note: A trap C in Ring 0 is usually a double fault. 

When the processor detects a Stack Exception it needs to push an error code and a return address onto the stack of the 
exception handler. If this happens in Ring 0, there will be no privilege level transition, which includes switching to a new, 
protected stack. If the exception is due to stack growth, there is no place to push the error code or return address. 

RESULT: TRAP 8 


The Address Space Picture 


This is a picture of what the address space looks like for several processes. 


FFFFFFFF 


20000000 

1FFFFFFF 

13000000 

04000000 

03FFFFFF 

PRIVATE 

REGION 



KERNEL 

OS2 SYSTEM CONTROL BLOCKS 



SYSTEM REGION 



SHARED REGION 



EXPANSION REGION 
( SHARED and PRIVATE ) 



PID 1 


PID IS 


PID 2 


PID 3 


PID 12 



00010000 

INVALID ADDRESS RANGE 

00000000 


Note: Within the private region you must know the Process ID, as well as the linear address to define a piece of virtual storage. All regions 
except the private region are shared among all processes. Above the private region in the shared regions, there is only one version of a 
given address, so you DO NOT need the Process ID. 

Note: The boundary at 03FFFFFF is an initial value. If some application allocates over 03FFFFFF of private space, this boundary will move 
upward. It moves in steps of 00400000, because another page table is allocated. 

Note: DLL's are initially loaded beginning at the 1 BFFFFFF boundary, and to successively lower addresses. This 'water mark' moves 
downward in steps of 00400000, too. 

Note: Addresses not assigned to a memory object are invalid. Any attempt to use them will generate an exception. 

Note: The address space picture discussed here is a simplified overview. A more detailed description may be found in the Advanced Guide 
to Flang Analysis chapter, under Memory Management and Ownership Topics. 


OS/2 Implementation Details 

This section discusses some of the implementation details of OS/2 which particularly involve debugging. 


Shared Memory 


This highlights how memory is shared among a few processes. 

The same selector is allocated in each process that shares the storage. Each process therefore uses the same offset in the LDT, and the 
LDT entries are the same, so the same linear address is also used. 

Note: The page table entries used for the shared storage are the same for both processes, too. 

LDT 1 LDT 2 


SHARED 

DATA 

> < 


DLL's are a good example of shared storage. 

DLLs are loaded into the shared address range. The boundary is dynamic, and moves downward as DLL's are loaded. 


The boundary of private addresses move upward as private storage is allocated. There is a guarantee of 64 Meg for private, and 64 Meg for 


shared. 


Address Tiling 


Address tiling refers to the practice of creating a mathematical or algorithmic relationship between an LDT selector and the base, or virtual 
address in the descriptor. 

By using address tiling, OS2 avoids the need to move memory blocks because of reallocation, and also makes it very fast to convert an LDT 
Selector:Offset to a flat, or Linear Address. The implementation is simply to allocate 64K of virtual address space to each selector, starting 
with selector '000F', at virtual address 64K, or '%10000'. 

Note: Selector '0007' is used to map the LDT as read-only data. 


Why Thunk? 


It is still common to have applications which have some 32-bit parts, and some 16-bit parts. The 32-bit parts try to avoid using 16-bit 
selector:offset addressing, because of the overhead of loading the selector registers, as well as to avoid the challenge of correctly dealing 
with storage references in both modes. 

A typical example is a 32-bit application calling a 1 6-bit DLL. 

Since storage is (must be) the same for all parts of a process, there has to be a way to convert one form of an address to the other. 

Only 1 6-bit application selectors from the LDT are eligible for this quick form of the conversion, and only linear addresses less than 
%20000000 can be converted to 16:16 format. 

Additionally, addresses in the packed region may NOT be converted by this quick method, but by a search of the LDT descriptor base 
(linear) addresses, followed by a calculation. 

The top of normal application space, at %1 BFFFFFF, is mapped to selector DFFF. The top of protected shared addresses at %1 FFFFFFF 
maps to selector FFFF, if used. 


Address Transformations (Thunks) 


This section tells you how to change from 1 6:1 6 to 0:32-bit mode, or vice versa. 

There are two parts to thunking, the address transformation, and properly aligning the stack, if necessary. The stack alignment is usually 
done by a subroutine which detects the need to do this, and builds an 'extra' frame in the new mode, properly aligned by making a copy of 
the incoming parms, transforming the addresses as part of this process. 

This works only because the specific implementation within OS/2 which was designed to use address tiling for LDT selectors. 


16:16 to 0:32 Thunk 


The selectors which are eligible for this thunk are LDT selectors which are PL=3. 

In this case, all three low-order bits are 1 . Because of this, one can shift the selector three bits to the right, or divide by 8, without loss of 
information. The resulting number is the high-order word of the 32-bit address because of address tiling. 

For example, address 000F:00BA can be thunked from 16:16 to 0:32 as follows: 


0 0 0 F : 00BA < Hex Sel:Offset 

0000 0000 0000 1111 0000 0000 1011 1010 < Binary 

shift the selector 3 bits to the right, which gives 



0000 0000 0000 0001 0000 0000 1011 1010 < Binary 

0001 00BA < Linear Address 

Note that the lower 16 bits, or offset, are unchanged. 


A stack may require alignment, because a 32-bit stack is built on double-word boundaries, with two low order zero bits in the address of 
each element, whereas a 16-bit stack is aligned only on a word boundary. 


0:32 to 16:16 Thunk 


Because the range of LDT selectors is only 512 Meg, addresses less than this can be transformed to use an LDT selector, with restrictions. 
The transformation is to append three low-order 1 bits to the value, and to discard three high order zero bits. An alternative way of stating 
this is to multiply by 8, then add 7. The three low order one bits are LDT (table indicator^), and PL=3. The restrictions are that the storage 
must be PL=3 application storage, must not span a 64K boundary in the linear address space, and the value must be less than hex 2000 
0000 . 


0002 14B0 < Linear Address 

0000 0000 0000 0010 0001 0100 1011 0000 < Binary 

shift the left half 3 bits to the left, which gives 

0000 0000 0001 0000 0001 0100 1011 0000 < Binary 

add 7 to the left half ( 0111 binary ) 

0000 0000 0001 0111 0001 0100 1011 0000 < Binary 

0017: 14B0 < Hex Sel:Offset 

Note that the lower 16 bits, or offset, are unchanged. 


Simultaneous 16-bit and 32-bit Descriptions of Virtual Storage 


GDT RAM LDT 


53=es-> | 

50 

— 

A0000 | 

| < 

1 

50 | 



48 


90000 | 

| < 

— i 

48| 



40 


80000 | 

| < 

— i 

40| 



38 


70000 | 

| < 

— i 

38 | <- 

ds=3F 


30 


60000 | 

| < 

— i 

30 | <- 

ss=37 

ldtr -> | 

28 1 


50000 | 

| < 

— i 

28 1 



20 


40000 | 

| < 

— - 1 

20 | 


1 

18 


30000 | 

| < 

— i 

18 | 


tr -> | 

10 


20000 | 

| < 

— i 

10 | 



08 | 

1 

10000 | 

| < 

— i 

08 | <- 

cs=0F 

1 * * 

00 | 


> | invalid | 


00 | 



gdtr-> | > 




useless, null selector 



Note: The digits within the tables are the offsets to each descriptor. The selector values ( CS=0F ) indicate which selector normally 
accesses the descriptor. 


Note: Any selector containing the value 0-3 is the NULL selector which DOES NOT specify the first entry in the GDT. It is a place holder 
when a selector does not specify a descriptor. Any attempt to use the null selector results in a general protection exception. 

Note: The descriptors in the LDT are 16-bit descriptors. This is one of the reasons that 16-bit programs still execute and fail in exactly the 
same manner as on previous versions of OS/2. 


Stacks 


This section describes how most OS/2 programs use the stack. 

Understanding the stack is generally straightforward. The stack is defined by the descriptor selected by the Stack Selector register or SS, 
and the stack pointer or SP. Stacks are always read/write. There are two basic operations on a stack, PUSH and POP. PUSH decrements 
the stack pointer and then stores the operand at the offset provided by SP in the stack segment. POP moves the data item at the offset 
provided by SP to the operand and then increments SP. SP ALWAYS POINTS TO THE LAST ITEM PUSHED. Stacks grow downward from 
higher addresses to lower addresses. 


Near CALL & RETurn 


The near CALL instruction is used to invoke a subroutine. The instruction first pushes IP into the stack and then updates IP so that it 
contains the offset of the first instruction in the subroutine. 

The near form of the RETurn instruction is really just a POP IP, which restores the saved content of IP. Execution continues at the 
instruction following the CALL. 


Far CALL & RETurn 


The far CALL instruction is used to invoke a subroutine. The instruction first pushes CS into the stack, and then pushes IP. Next, it updates 
CS & IP so that they contain the selector:offset of the first instruction in the subroutine. 

The far form of the RETurn instruction first pops IP, which restores the saved content of IP, and then pops CS, restoring it as well. Execution 
continues at the instruction following the CALL. 


Passing Parameters 


Parameters are generally passed to a subroutine by putting them on the stack with PUSH instructions prior to the CALL. Parameters are 
removed from the stack in one of two ways: 

By the caller ( 'C' convention ), generally by adding a constant to SP. 

By the subroutine ( PASCAL convention ), by specifying the operand for the RETurn which is added to SP after the return 
address is POP'ed. 

Note: 'C' convention PUSHes parameters from right to left. 

Note: PASCAL convention PUSHes parameters left to right. 

Because the NEAR versions of jump ( JMP ), CALL and RETurn DO NOT touch CS, there can be no change of privilege level during 
execution of any of them. The FAR versions of them do provide a new value for CS. If the new CS is the same privilege level as the current 



level, the only change from above is that CALL PUSHes CS before PUSHing IP. RETurn POPs IP before POPing CS. 


Receiving Parameters 


There is a register which can be used by a subroutine to access parameters very efficiently. This register is the Base Pointer. When it is 
used to obtain an offset, the default segment is the STACK SEGMENT. If the entry to a subroutine begins with these instructions the stack 
will look like the picture on the next page. 


PUSH 

BP 

MOV 

BP,SP 

SUB 

SP,sizeof( LOCAL DATA ITEMS ) 


This sequence is so common that there is a single instruction equivalent: 

ENTER sizeof( LOCAL DATA ITEMS ), 0 

This allows all parameters to be accessed as BP plus the appropriate offset and local data elements to be accessed as BP minus the 
appropriate offset. 

The instructions to exit are either: 


MOV 

SP.BP 

POP 

BP 

RET 


or: 


LEAVE 


RET 



Why Do We Care About the Pascal Convention? 


The Pascal convention was used by OS/2 1 .x for those calls which access system functions which are implemented in a higher privilege 
level (ring) than the application. It is also used to call 16 bit Window Procedures. 

Two examples are DosAllocSeg and DosRead. The decision was made to use the Pascal convention because of the way the hardware 
protects access to instructions and storage which is more privileged. This type of interface, including hardware operation, is discussed in 
detail after basic stack operation has been discussed. 


Single Stack Frame 


STACK 

( higher addresses ) 


1- 

previous bp 

I < — up here 


1 - 

parameter 

i 



parameter 

i 



return 





bp > 


sp 


> 


caller's bp 


local data 


local data 


local data 


( caller's bp points) 


( lower addresses ) 


Note: A stack grows downward ( expand down ). 

When this convention is followed the stack can be viewed as a series of 'stack frames'. Each stack frame has parameters and local data for 
some routine and linkage to the 'stack frames' used by the caller of that routine, etc... The saved BP values create a linked list in the stack 
segment which has all the information about each call including the return address. The process of following the chain back is referred to as 
’unwinding the stack’ and is an important aid to diagnosis when working on a problem. 


An Example of Using the Stack 


This is a trivial example of how to pass and receive parameters, which is used to document where the stack pointer and base pointer are at 
the end of each instruction. 

The example is 32-bit non-optimized code. 

The subroutine, SUB, is designed to return the difference obtained by subtracting the second parameter from the first. 

First, the relevant C code: 

( main ) ( sub ) 

z=sub(A,B); int sub(int x, int y) 

{ 

. return x-y; 

} 


Next, the assembler code 


PUSH 

B ; 

< i > 
(01) 

initial condition 
SUB: 

PUSH 

EBP 

PUSH 

A ; 

(02) 


MOV 

EBP, ESP 

CALL 

SUB ; 

(03) 


SUB 

ESP, nn 

ADD 

MOV 

ESP, 8 ; 
Z , EAX ; 

(12) 

( f ) 

final condition 


( NOTE 


MOV 

EAX, [EBP+8 ] ; 

(07) 

SUB 

EAX, [EBP+12 ] 

; (08) 

MOV 

ESP, EBP 

(09) 

POP 

EBP 

(10) 

RET 


(11) 


Note: At this point, the stack frame is established. If another, lower-level routine is called, the code to do so will look like the code seen in 
main, and a new stack frame will be established by that routine as soon as it receives control. 

The new frame will be just below the current one. 


Stack Example 


This example shows a stack, with ESP on the left, and EBP on the right. 


ESP 


( higher addresses ) 


EBP 

( 1,10 ) 



( i,12 ) 


( 1 ) 

1 

B 

1 

( 2,11 ) 


A 

1 

( 3,10 ) 


address of ADD 

1 

( 4,9 ) 

1 

EBP ( used by main 

1 


1 

automatic 

1 

nn bytes 

1 

data 

1 


1 

for 'sub' 

1 

( 6 ) 

1 

( if used ) 

1 


1 


1 



( lower addresses ) 



( 5 ) 


< — where parameters for the 
next subroutine are put 


Note: The numbers in parentheses indicate where the register points immediately after the numbered instruction on the previous page 
completes. 


Multiple Stack Frames 


STACK SEGMENT 


SP — > 


PARMS FROM AS TART 

RETURN TO ASTART 

-ASTART'S BASE POINTER- 


PARMS FROM MAIN 

RETURN TO MAIN 

MAIN'S BASE POINTER- 


PARMS FROM SUB 1 

RETURN TO SUB 1 

SUB 1 BASE POINTER — 


PARMS FROM SUB 2 

RETURN TO SUB 2 

SUB 2 BASE POINTER — 


high addresses 


MAIN'S FRAME 


SUB 1 FRAME 


SUB 2 FRAME 


SUB 3 FRAME 


low addresses 


A Stack From a Dump 



DW SS : BP LI 0 

OOlf :000014e6 1550 OOfl OOOf 02e8 18ae 0000 0000 0000 
OOlf :000014f6 0000 0000 0000 0000 0000 0000 0000 0000 


The first word, which is addressed by the current value in the 
BP register, is the near address of the next stack frame, 1550. 

The next two words are a far return address, with the offset to 

the left of the selector. The return is to address F:F1. 

The words following the return address are the parameters, if any 
were passed. There is no direct way to tell from the stack how 
many parameters were passed, or expected. To see the next frame, 

DW 1550 L 10 

OOlf :00001550 0000 0300 OOOf 0001 1560 OOlf 156e OOlf 

OOlf : 00001560 1568 OOlf 0000 0000 4544 4f4d 0000 15c6 

In this stack frame, the BP chain pointer is zero. This usually 
means that you have found all of the frames on this stack. 

The return address for this frame is F:300. The parameters 

seem to be an integer, 1, and three far addresses, IF: 1560, 

lF:156e, and IF: 1568. A little further inspection shows that 

the third address IF: 1568 is pointed to by the first, which is 

highly unusual. Actually, this is the stack frame received by 'main'. 

Main's parameters are as follows: 

1. an integer, which tells it how many strings were found on the command line 

2. the far address of a list of addresses, each of which points to one of 
the strings 

3. the far address of a second list of addresses, each of which points to 

an environment variable. This list is terminated with a NULL POINTER, a far 
address in which both the selector and offset are zero. 


Let's look at them. 

IF: 1560 has the address If: 1568. Near addresses default to the 
last selector used, so we are not required to supply it every time. 

DA 1568 

#001f :00001568 DEMO 

Right, the name of the program was the first string on the command line. 
The first parameter indicates that there is only one string. 


Let's look at a few of the environment variables. 

DW 156E L8 

OOlf : 0000156e 15c6 OOlf 15da OOlf 1608 OOlf 161f OOlf 

This gets us four far addresses. To see them all with only one 
input line, use the semicolon as a command delimiter and type away. 

DA 15C6 ; DA 15DA; DAI 608 ; DA 161F 
OOlf : 000015c6 WP_OBJHANDLE=132739 

OOlf : 000015da AUTOSTART=PROGRAMS , TASKLIST, FOLDERS , LAUNCHPAD 
OOlf : 00001608 BOOKS HELF=C : \ OS 2 \ BOOK; 

001f:0000161f COMSPEC=C : \OS2 \CMD . EXE 

Notice that the tools are not very particular about spaces in the commands. 

Lastly, to see the local data for the failing routine, 

DW SS : SP BP-2 

OOlf :000014be 02e8 18ae 00e3 2910 0017 0060 0017 0000 
OOlf :000014ce 0004 0017 c8cf 0000 0030 c949 c85a c8cf 
OOlf :000014de 0002 0000 00e6 1488 

and now you have it, displayed above. 



Application Documentation 


We will briefly discuss what files are optionally generated by most compilers, and how to tell the linker to create the map file. After an 
explanation of the contents, and why some of the numbers are what they are, we will answer some questions using various parts of the 
optional application documentation. 


The .MAP File 


When you look at a 1 6-bit map file, you will discover that it may have at least three sections. A 32-bit map file can have at least 4. 

1 . The first section is built in the same sequence as the executable. 

2. The second section contains a list of all external symbols, sorted by the name of the symbol. 

This is particularly useful when a programmer wants to find where some particular variable or routine is located. 

3. The third section contains a list of the same symbols, sorted by the location of the symbol. 

This is particularly useful when you know where something is, and want to find out if it has an external name, or what routine encompasses 
the address of interest. 

4. The fourth section of a 32-bit map file contains a list of locations where the compiled code for each input line begins. This can tell 
you almost immediately which line of code failed, once you know which program, and where within the program the failing 
instruction was located. 


The .COD File 


Many 1 6-bit compilers will produce a file similar to a .COD file, although it may have a different file extension. For example, MicroFocus 
Cobol can produce a .GRP file, which has the same organization as the .COD file. 

The format of this file is that of a mixed listing. 

The listing generally contains an input line, identified by line number, followed by the machine instructions generated by the compiler, with 
the address to the left, the hex instruction in the middle, and an assembler form of the instruction on the right. Some of these files will 
actually be accepted as is by an assembler, but most compilers document the fact that this is not a supported feature of the compiler. 

Obviously, if you know the offset of some instruction, perhaps one that caused a failure, you can use this listing to identify which line of the 
input program caused the generation of the failing instruction. 


Exercise 4: Application Documentation 


Some typical files associated with 16- and 32-bit applications 


A 16-bit Map File 



Part 1 : Same sequence as executable. 


DEMO 


Start 

Length 

Name 

Class 

0001:0000 

00292H 

DEMO_TEXT 

CODE 

0001 : 0292 

02BE6H 

_TEXT 

CODE 

0001 :2E78 

00000H 

C_ETEXT 

ENDCODE 

0002:0000 

02910H 

FAR_BSS 

FAR_BSS 

0003:0000 

00042H 

NULL 

BEGDATA 

0003:0042 

007D8H 

_DATA 

DATA 

0003 : 081A 

0000EH 

CDATA 

DATA 

0003:0828 

00000H 

XIFB 

DATA 

0003:0828 

00000H 

XIF 

DATA 

0003:0828 

00000H 

XIFE 

DATA 

0003:0828 

00000H 

XIB 

DATA 

0003:0828 

00000H 

XI 

DATA 

0003:0828 

00000H 

XIE 

DATA 

0003:0828 

00000H 

XPB 

DATA 

0003:0828 

00004H 

XP 

DATA 

0003:082C 

00000H 

XPE 

DATA 

0003 : 082C 

00000H 

XCB 

DATA 

0003 : 082C 

00000H 

XC 

DATA 

0003 : 082C 

00000H 

XCE 

DATA 

0003 : 082C 

00000H 

XCFB 

DATA 

0003 : 082C 

00000H 

XCF 

DATA 

0003 : 082C 

00000H 

XCFE 

DATA 

0003 : 082C 

00006H 

CONST 

CONST 

0003:0832 

00008H 

HDR 

MSG 

0003:083A 

000FAH 

MSG 

MSG 

0003:0934 

00002H 

PAD 

MSG 

0003:0936 

00001H 

EPAD 

MSG 

0003:0938 

00226H 

_BSS 

BSS 

0003 : 0B5E 

00000H 

XOB 

BSS 

0003 : 0B5E 

00000H 

XO 

BSS 

0003 : 0B5E 

00000H 

XOE 

BSS 

0003 : 0B60 

00000H 

c_common 

BSS 

0003 : 0B60 

00A00H 

STACK 

STACK 


Origin Group 
0003:0 DGROUP 


Note: The numbers to the left of the colon look like the selector part of a far address, because that is what they will become. The linker has 
no idea what selectors will be assigned by the loader, so it simply calls the first segment 1 , the next segment 2, and so on. 

Note: The loader actually builds a table that shows the relationship between the selector assigned and the segment number from the map. 

Part 2: Sorted by the name of the symbol 


Address Publics by Name 


0000:0000 

Imp 

DOSALLOCSEG 

(DOSCALLS . 34 ) 

0000:0000 

Imp 

DOSCHGFILEPTR 

(DOSCALLS . 58) 

0000:0000 

Imp 

DOSEXIT 

(DOSCALLS. 5) 

0000:0000 

Imp 

DOSGETDBCSEV 

(NLS.4) 

0000:0000 

Imp 

DOSGETMACHINEMODE 

(DOSCALLS. 4 9) 

0000:0000 

Imp 

DOSGETVERSION 

(DOSCALLS . 92) 

0000:0000 

Imp 

DOSQHANDTYPE 

(DOSCALLS. 77) 

0000:0000 

Imp 

DOS READ 

(DOSCALLS . 137) 

0000:0000 

Imp 

DOSREALLOCSEG 

(DOSCALLS. 38) 

0000:0000 

Imp 

DOSSETVEC 

(DOSCALLS .89) 

0000:0000 

Imp 

DOSWRITE 

(DOSCALLS . 138) 

0003 : 06E6 


STKHQQ 


0001 :2D3E 


_brkctl 


0003:0938 


_edata 


0003 : 0B60 


_end 


0003 : 069B 


_environ 


0003:0662 


_errno 


0001 : 057A 


_exit 


0001 :24E6 


_f flush 


0001 : 03F0 


_fgets 


0001 :295C 


_f lushall 


0001 :275C 


_f ree 


0001:0000 


_gen 




0001:2836 

_isatty 

0001 :29A0 

_lseek 

0001 : 00E2 

_main 

0001:2771 

_malloc 

0001 :285A 

_memset 

0002:0000 

_prime 

0001:0394 

_printf 

0001:2618 

_read 

0001 : 0492 

_sscanf 

0001 :2E64 

_stackavail 

0001:2024 

_strlen 

0001:282c 

_ultoa 

0001:2576 

_ungetc 

0001 : 2 9DE 

_write 

0003 : 06E2 

aaltstkovr 

0003 : 04D6 

abrkp 

0003 : 00D6 

abrktb 

0003 : 04D6 

abrktbe 

0003 : 04D8 

acf inf o 

0003 : 00CC 

acmdln 


0000:9876 Abs 
0000:9876 Abs 
0000 : D6D6 Abs 
0003 : 06A6 
0000 : D6D6 Abs 
0003 : 00CE 
0003:0004 
0001 :2E58 
0001 :28A2 
0000:0000 Imp 
0001 : 2BDD 
0001 :2D1C 
0003:0816 
0001 :2CC0 
0001 : 2CFA 
0001:0310 
0003:0042 
0003:0810 
0003:0806 
0003 : 04E6 
0003 : 04E8 
0003:0812 
0003:0814 
0003:0000 
0003:0702 
0003:0703 
0001 : 02A2 
0003 : 00D2 
0002:2710 
0003 : 06EA 
0003 : 06E8 
0003 : 06 A3 
0001:2244 
0001 : 04F0 
0001:0306 
0001 : 2DF4 
0001 : 05CA 
0003:0704 
0003:0704 
0001 :2E01 
0003:0669 
0003:0668 
0001 :291F 
0001:2910 
0003:0666 
0003:0667 


0001 : 0591 
0003 : 065A 
0001 :275C 
0001 : 05EC 
0001 : 0702 
0001 :22D0 


acrtmsg 

acrtused 

aDBdoswp 

adbgmsg 

aDBused 

aenvseg 

aexit_rtn 

aFlshl 

aFNalshl 

AHINCR 

amalloc 

amallocbrk 

amblksiz 

amexpand 

amlink 

amsg_exit 

anullsize 

asegl 

asegds 

aseghi 

aseglo 

asegn 

asegr 

asizds 

asizeC 

asizeD 

astart 

atopsp 

buf in 

c f 1 1 c vt_t ab 

cf lush 

child 

chkstk 

cinit 

cintDIV 

cltoasub 

ctermsub 

ctype 

ctype_ 

cxtoa 

doserrno 

dosmode 

dosret 

dosretf 

dosverma jor 

dosverminor 


exit 

fac 

f f ree 

FF_MSGBANNER 

filbuf 

flsbuf 


(DOSCALLS . 136) 



0001:2771 

fmalloc 

0003 : 081C 

fpinit 

0001 :223E 

fptrap 

0001 : 08E0 

ftbuf 

0001:2458 

getbuf 

0001 : 0 98C 

input 

0003 : 04EE 

iob 

0003 : 05DE 

iob2 

0003:0656 

lastiob 

0003 : 066B 

nf ile 

0001 :2B82 

nf ree 

0001 :2B94 

nmalloc 

0001 : 069C 

NMSG_TEXT 

0001 : 06CC 

NMSG_WRITE 

0001:2268 

nullcheck 

0003:0669 

oserr 

0003:0660 

osf ile 

0003:0666 

osma jor 

0003:0667 

osminor 

0003:0668 

osmode 

0003:0666 

osversion 

0001 : 156A 

output 

0003 : 069F 

pgmptr 

0003:0681 

pipe 

0001 :203C 

setargv 

0001:0610 

setenvp 

0003:0700 

sigintof f 

0003 : 06FE 

sigintseg 

0001 : 07FE 

stbuf 

0001 :228E 

stdalloc 

0003 : 06AE 

stdbuf 

0003:0664 

umaskval 

0003 : 04EC 

aDBrterr 

0003 : 04EA 

aDBswpf lg 

0003:0695 

argc 

0003:0697 

argv 


Part 3: Sorted by location in storage 


Address 


Publics by Value 


0000:0000 

Imp 

DOSGETMACHINEMODE 

(DOSCALLS .4 9) 

0000:0000 

Imp 

DOSGETVERSION 

(DOSCALLS . 92) 

0000:0000 

Imp 

DOS READ 

(DOSCALLS . 137) 

0000:0000 

Imp 

AHINCR 

(DOSCALLS . 136) 

0000:0000 

Imp 

DOSEXIT 

(DOSCALLS. 5) 

0000:0000 

Imp 

DOSALLOCSEG 

(DOSCALLS. 34) 

0000:0000 

Imp 

DOSREALLOCSEG 

(DOSCALLS. 38) 

0000:0000 

Imp 

DOSCHGFILEPTR 

(DOSCALLS. 58) 

0000:0000 

Imp 

DOSWRITE 

(DOSCALLS . 138) 

0000:0000 

Imp 

DOSSETVEC 

(DOSCALLS .89) 

0000:0000 

Imp 

DOSQHANDTYPE 

(DOSCALLS. 77) 

0000:0000 

Imp 

DOSGETDBCSEV 

(NLS.4) 

0000:9876 

Abs 

acrtmsg 


0000:9876 

Abs 

acrtused 


0000 :D6D6 

Abs 

aDBdoswp 


0000 :D6D6 

Abs 

aDBused 


0001:0000 


_gen 


0001 : 00E2 


_main 


0001 : 02A2 


astart 


0001:0306 


cintDIV 


0001:0310 


amsg_exit 


0001:0394 


_printf 


0001 : 03F0 


_fgets 


0001 : 0492 


_sscanf 


0001 : 04F0 


cinit 


0001 : 057A 


_exit 


0001 : 0591 


exit 


0001 : 05CA 


ctermsub 


0001 : 05EC 


FF_MSGBANNER 


0001 : 0610 


setenvp 


0001 : 069C 


NMSG_TEXT 


0001 : 06CC 


NMSG_WRITE 


0001 : 0702 


filbuf 


0001 : 07FE 


stbuf 


0001 : 08E0 


ftbuf 


0001 : 0 98C 


input 




0001 : 156A 

output 

0001:2024 

_strlen 

0001 :203C 

setargv 

0001 :223E 

fptrap 

0001:2244 

chkstk 

0001:2268 

nullcheck 

0001 :228E 

stdalloc 

0001 :22D0 

flsbuf 

0001:2458 

getbuf 

0001 :24E6 

_f flush 

0001:2576 

_ungetc 

0001:2618 

_read 

0001 :275C 

_f ree 

0001 :275C 

f f ree 


0001:2771 

fmalloc 

0001:2771 

_malloc 

0001 :282C 

_ultoa 

0001:2836 

_isatty 

0001 :285A 

_memset 

0001 :28A2 

aFNalshl 

0001:2910 

dosretf 

0001 :291F 

dosret 

0001 :295C 

_f lushall 

0001 :29A0 

_lseek 

0001 : 2 9DE 

_write 

0001 :2B82 

nf ree 

0001 :2B94 

nmalloc 

0001 : 2BDD 

amalloc 

0001 :2CC0 

amexpand 

0001 : 2CFA 

amlink 

0001 :2D1C 

amallocbrk 

0001 :2D3E 

_brkctl 

0001 : 2DF4 

cltoasub 

0001 :2E01 

cxtoa 

0001 :2E58 

aFlshl 

0001 :2E64 

_stackavail 

0002:0000 

_prime 

0002:2710 

buf in 

0003:0042 

anullsize 

0003 : 00CC 

acmdln 

0003 : 00CE 

aenvseg 

0003:0000 

asizds 

0003 : 00D2 

atopsp 

0003:0004 

aexit_rtn 

0003:0006 

abrktb 

0003 : 04D6 

abrktbe 

0003 : 04D6 

abrkp 

0003 : 04D8 

acf inf o 

0003 : 04E6 

aseghi 

0003 : 04E8 

aseglo 

0003 : 04EA 

aDBswpf lg 

0003 : 04EC 

aDBrterr 


0003 : 04EE 

iob 

0003 : 05DE 

iob 2 

0003:0656 

lastiob 

0003 : 065A 

fac 

0003:0662 

_errno 

0003:0664 

umaskval 

0003:0666 

osma jor 

0003:0666 

dosverma jor 

0003:0666 

osversion 

0003:0667 

osminor 

0003:0667 

dosverminor 

0003:0668 

osmode 

0003:0668 

dosmode 

0003:0669 

doserrno 

0003:0669 

oserr 

0003 : 066B 

nf ile 

0003 : 066D 

osf ile 

0003:0681 

pipe 

0003:0695 

argc 

0003:0697 

argv 



0003 : 069B 

_environ 

0003 : 069F 

pgmptr 

0003 : 06 A3 

child 

0003 : 06A6 

adbgmsg 

0003 : 06AE 

stdbuf 

0003 : 06E2 

aaltstkovr 

0003 : 06E6 

STKHQQ 

0003 : 06E8 

cf lush 

0003 : 06EA 

cf ltcvt_ta] 

0003 : 06FE 

sigintseg 

0003:0700 

sigintof f 

0003:0702 

asizeC 

0003:0703 

asizeD 

0003:0704 

ctype 

0003:0704 

ctype_ 

0003:0806 

asegds 

0003:0810 

asegl 

0003:0812 

asegn 

0003:0814 

asegr 

0003:0816 

amblksiz 

0003 : 081C 

fpinit 

0003:0938 

_edata 

0003 : 0B60 

_end 


Program entry point at 0001:02A2 


A 16-Bit Code File 


; Static Name Aliases 

; $S180_inbuf EQU inbuf 

TITLE DEMO . C 

. 28 6p 

.287 

DEMO_TEXT SEGMENT WORD PUBLIC 'CODE' 

DEMO_TEXT ENDS 

_DATA SEGMENT WORD PUBLIC 'DATA' 

_DATA ENDS 

CONST SEGMENT WORD PUBLIC 'CONST' 

CONST ENDS 

_BSS SEGMENT WORD PUBLIC 'BSS' 

_BSS ENDS 

DGROUP GROUP CONST, _BSS, _DATA 

ASSUME CS: DEMO_TEXT, DS : DGROUP, SS : DGROUP 

EXTRN acrtused: ABS 

EXTRN _print f : FAR 

EXTRN _sscanf : FAR 

EXTRN _f get s : FAR 

_BSS SEGMENT 

COMM NEAR _prime : 2: 5000 

_BSS ENDS 

EXTRN iob : BYTE 

_DATA SEGMENT 

$SG188 DB 'there are %u primes less than 65536', OaH, 00H 

$SG1 91 DB '%u', 00H 

$SG195 DB 'Enter number to factor: ', 00H 

$SG1 97 DB '%u', 00H 

$SG198 DB 'Unable to convert number. Please try again', OaH, 00H 

$SG2 07 DB ' %u is prime', OaH, 00H 

$SG208 DB ' %u = %u ' , 00H 

$SG2 12 DB '*%u', 00H 

$SG2 13 DB OaH, 00H 

_DATA ENDS 

_BSS SEGMENT 

$S180_inbuf DW 028H DUP (?) 

_BSS ENDS 

CONST SEGMENT 

$T20004 DW SEG _prime 



CONST ENDS 

DEMO_TEXT SEGMENT 

ASSUME CS: DEMO_TEXT 

. | * * * 

; | * * * #include <stdio.h> 


; Line 2 

; | *** #def ine INBUFSIZE 80 
; | *** #def ine NPRIME 5000 
; | *** unsigned short prime [NPRIME] ; 
. | * * * 

; | *** int gen (void) 

. | *** { 

; Line 8 


PUBLIC _gen 
.gen PROC FAR 

*** 000000 c8 24 00 00 

*** 000004 57 

*** 000005 56 

ix = -6 

1 = -16 

11 = -14 

npr = -2 

q = -4 

t = -10 

tp = -8 

tt = -12 


enter WORD PTR 36,0 
push di 

push si 


k k k 

unsigned short ix, 1 

=2, 

n= 

=25, 

. npr 

=3, 

■q,t, 

. tp=2 , tt ; 





Line 

9 















k k k 

000006 

cl 

4 6 

f0 

02 

00 



mov 

WORD 

PTR 

[bp-16] , 2 

; 1 


k k k 

00000b 

cl 

4 6 

f 2 

19 

00 



mov 

WORD 

PTR 

[bp-14] , 25 

; li 


k k k 

000010 

cl 

4 6 

fe 

03 

00 



mov 

WORD 

PTR 

[bp-2] , 3 

; npr 


k k k 

000015 

cl 

4 6 

f 8 

02 

00 



mov 

WORD 

PTR 

[bp-8] , 2 

; tp 

k k k 

prime [ 0] =2 ; 













Line 

10 















k k k 

00001a 

8e 

06 

00 

00 




mov 

es, $T20004 



k k k 

OOOOle 

26 

cl 

06 

00 

00 

02 

00 

mov 

WORD 

PTR 

es :_prime, 2 


k k k 

prime [ 1 ] =3 ; 













Line 

11 















k k k 

000025 

26 

cl 

06 

02 

00 

03 

00 

mov 

WORD 

PTR 

es :_prime+2 , 3 


k k k 

prime [2 ] =5; 













Line 

12 















k k k 

00002c 

26 

cl 

06 

04 

00 

05 

00 

mov 

WORD 

PTR 

es :_prime+4 , 5 


k k k 

for 

( t=7 ; 

t<65530 ; 

t+= 

=tp 

) 








Line 

13 















k k k 

000033 

cl 

4 6 

f 6 

07 

00 



mov 

WORD 

PTR 

[bp-10] , 7 

; t 


k k k 

000038 

cl 

4 6 

e2 

04 

00 



mov 

WORD 

PTR 

[bp-30] , OFFSET 

_prime+4 


k k k 

00003d 

cl 

4 6 

e4 

00 

00 



mov 

WORD 

PTR 

[bp-28], SEG _prime 


k k k 

000042 

cl 

4 6 

de 

06 

00 



mov 

WORD 

PTR 

[bp-34] , OFFSET 

_prime+6 


k k k 

000047 

cl 

4 6 

eO 

00 

00 



mov 

WORD 

PTR 

[bp-32] , SEG _prime 


$L20002 : 


. | *** { 

; Line 14 

; | *** tp=6-tp; 

; Line 15 


*** 00004c 

b8 06 00 

mov 

ax, 6 


*** 00004f 

2b 46 f 8 

sub 

ax, WORD PTR [bp-8] 

; tp 

*** 000052 

89 46 f 8 

mov 

WORD PTR [bp-8], ax 

; tp 


. | *** 

; Line 


. | *** 

; Line 
. | *** 

; Line 


. | *** 

; Line 


if ( ll<=t ) 

16 

*** 000055 8b 46 f6 

*** 000058 39 46 f2 

*** 00005b 77 15 

{ 

17 

1 ++ ; 

18 


mov ax, WORD PTR [bp-10] 
cmp WORD PTR [bp-14], ax 
ja $1170 


00005d 

83 46 e2 02 

add 

WORD PTR [bp-30], 2 

000061 

ff 46 fO 

inc 

WORD PTR [bp-16] 

ll=prime [ 1 ] 

*prime [ 1 ] ; 



000064 

c4 5e e2 

les 

bx, DWORD PTR [bp-30 

000067 

26 8b 07 

mov 

ax, WORD PTR es: [bx] 


; t 
; 11 


; 1 




k k k 

00006a 

89 

46 

dc 



mov 

WORD PTR 

[bp-36] 

, ax 



k k k 

00006d 

f 7 

eO 




mul 

ax 





k k k 

00006f 

89 

46 

f 2 



mov 

WORD PTR 

[bp-14] 

, ax 

; li 

k k k 


1 











Line 

20 












k k k 

for ( ix=2 ; 

: ix<l ; 

ix++ ) 







Line 

21 






$1170 : 







k k k 

000072 

be 

02 

00 



mov 

si, 2 





k k k 

000075 

39 

76 

fO 



cmp 

WORD PTR 

[bp-16] 

, si 

; 1 


k k k 

000078 

76 

39 




jbe 

$FB173 





k k k 

00007a 

8b 

46 

f 6 



mov 

ax, WORD PTR [bp- 

o 

i — i 

; t 


k k k 

00007d 

89 

46 

ec 



mov 

WORD PTR 

[bp-20] 

, ax 



k k k 

000080 

cl 

46 

ee 

00 

00 

mov 

WORD PTR 

[bp-18] 

, o 



k k k 

000085 

cl 

46 

e8 

04 

00 

mov 

WORD PTR 

[bp-24] 

, OFFSET _prime + 4 


k k k 

00008a 

cl 

46 

ea 

00 

00 

mov 

WORD PTR 

[bp-22] 

, SEG 

_prime 


k k k 

00008f 

c4 

7e 

e8 



les 

di , DWORD 

PTR [bp 

-24] 



I *** 

Line 22 

I *** 

Line 23 


$L20000 : 


q=t/prime [ix] ; 


k k k 

000092 

26 

8b 

0d 

mov 

cx,WORD : 

PTR es: [di] 


k k k 

000095 

8b 

46 

ec 

mov 

ax, WORD : 

PTR [bp-20] 


k k k 

000098 

8b 

56 

ee 

mov 

dx, WORD : 

PTR [bp-18] 


k k k 

00009b 

f 7 

fl 


div 

cx 



k k k 

00009d 

89 

46 

fc 

mov 

WORD PTR 

[bp-4 ] , ax 

;q 


tt=q*prime I 

] ix] ; 







24 









k k k 

OOOOaO 

f 7 

el 


mul 

CX 



k k k 

0000a2 

89 

46 

f 4 

mov 

WORD PTR 

[bp-12 ] , ax 

; tt 


if ( t==tt 

) break; 





25 









k k k 

0000a5 

39 

46 

f 6 

cmp 

WORD PTR 

[bp-10] , ax 

; t 

k k k 

0000a8 

74 

09 


je 

$FB173 



k k k 

OOOOaa 

83 

cl 

02 

add 

di, 2 



k k k 

OOOOad 

46 



inc 

si 



k k k 

OOOOae 

39 

76 

fO 

cmp 

WORD PTR 

[bp-16] , si 

; 1 

k k k 

0000b! 

77 

df 


ja 

$L20000 




$FB1 7 3 : 


| *** 
Line 


I *** 

Line 


I *** 

Line 


if ( l==ix ) prime [npr++] =t; 
27 


k k k 

0000b3 

39 

76 

f0 

cmp 

WORD PTR [bp-16] 

, si 

; 1 

k k k 

0000b6 

75 

10 


jne 

$1175 



k k k 

0000b8 

c4 

5e 

de 

les 

bx, DWORD PTR [bp 

-34] 


k k k 

OOOObb 

8b 

4 6 

f 6 

mov 

ax, WORD PTR [bp- 

10] 

; t 

k k k 

OOOObe 

26 

89 

07 

mov 

WORD PTR es : [bx] 

, ax 


k k k 

OOOOcl 

83 

4 6 

de 02 

add 

WORD PTR [bp-34] 

, 2 


k k k 

0000c5 

ff 

4 6 

fe 

inc 

WORD PTR [bp-2] 

; npr 



} 

28 







$1175: 




k k k 

0000c8 

8b 

4 6 

f 8 

mov 

ax, WORD : 

PTR [bp-8] 

; tp 

k k k 

OOOOcb 

01 

4 6 

f 6 

add 

WORD PTR 

[bp-10] , ax 

• r t 

k k k 

OOOOce 

83 

7e 

f 6 fa 

cmp 

WORD PTR 

[bp-10] , -6 

• r t 

k k k 

0000d2 

73 

03 


jae 

$ JCC210 



k k k 

0000d4 

e9 

75 

ff 

jmp 

$L20002 








$ JCC210 : 




k k k 

0000d7 

89 

76 

fa 

mov 

WORD PTR 

[bp- 6] , si 

; ix 

return npr; 








29 









k k k 

OOOOda 

8b 

4 6 

fe 

mov 

ax, WORD : 

PTR [bp-2] 

;np: 

k k k 

OOOOdd 

5e 



pop 

si 



k k k 

OOOOde 

5f 



pop 

di 



k k k 

OOOOdf 

c9 



leave 




k k k 

OOOOeO 

cb 



ret 




k k k 

OOOOel 

90 



nop 





.gen ENDP 

| *** j 

| * * * 

|*** int main(int argc, char *argv[] ) 

I *** { 

Line 33 



PUBLIC _main 
main PROC FAR 

*** 0000e2 c8 60 00 00 

*** 0000e6 57 

*** 0000e7 56 


; argc = 6 

; argv = 8 

; ix = -6 

; last = -10 

; nf = -8 

; fact = -76 

; input = -2 

; is = -12 

; q = -4 

; | *** static char inbuf [ INBUFSIZE] ; 

; | *** int ix,last,nf; 

;|*** unsigned short fact [32 ] , input=0, is, q; 
; Line 36 

*** 0000e8 c7 46 fe 00 00 


enter WORD PTR 96,0 
push di 

push si 


mov WORD PTR [bp-2],0 


k k k 

last 

:=gen ( ) ; 








Line 

37 










k k k 

OOOOed 

Oe 





push 

cs 


k k k 

OOOOee 

e8 

00 

00 



call 

NEAR PTR _gen 


k k k 

OOOOfl 

89 

4 6 

f 6 



mov 

WORD PTR [bp-10], ax ; 

k k k 

print f ( "there are %u primes 

less than 

65536\n " , 

. last) ; 

Line 

38 










k k k 

OOOOf 4 

50 





push 

ax 


k k k 

OOOOf 5 

le 





push 

ds 


k k k 

OOOOf 6 

68 

00 

00 



push 

OFFSET DGROUP : $SG188 


k k k 

OOOOf 9 

9a 

00 

00 

00 

00 

call 

FAR PTR _printf 


k k k 

OOOOfe 

83 

c4 

06 



add 

sp, 6 

k k k 

if ( 

! l<argc ) 








Line 

39 










k k k 

000101 

83 

le 

06 

01 


cmp 

WORD PTR [bp+6] , 1 ; 


k k k 

000105 

7e 

25 




jle 

$1190 

k k k 

if ( 0==sscanf (argv 

[1] , 

"%u 

l" , & input) 

) argc=l; 


Line 

40 










k k k 

000107 

8d 

4 6 

fe 



lea 

ax, WORD PTR [bp-2] ; 


k k k 

00010a 

16 





push 

ss 


k k k 

00010b 

50 





push 

ax 


k k k 

00010c 

le 





push 

ds 


k k k 

OOOlOd 

68 

25 

00 



push 

OFFSET DGROUP : $SG191 


k k k 

000110 

c4 

5e 

08 



les 

bx, DWORD PTR [bp+8] ; 


k k k 

000113 

26 

ff 

77 

06 


push 

WORD PTR es : [bx+6] 


k k k 

000117 

26 

ff 

77 

04 


push 

WORD PTR es : [bx+4] 


k k k 

00011b 

9a 

00 

00 

00 

00 

call 

FAR PTR _sscanf 


k k k 

000120 

83 

c4 

0c 



add 

sp, 12 


k k k 

000123 

0b 

cO 




or 

ax, ax 


k k k 

000125 

75 

05 




jne 

$1190 


k k k 

000127 

c7 

4 6 

06 

01 

00 

mov 

WORD PTR [bp+6] , 1 ; 

k k k 

while ( 2>argc ) 








Line 

41 
















$1190: 




k k k 

00012c 

83 

le 

06 

02 


cmp 

WORD PTR [bp+6], 2 ; 


k k k 

000130 

7d 

4b 




jge 

$FB1 94 


k k k 

000132 

8b 

76 

06 



mov 

si, WORD PTR [bp+6] ; 








$L20005 : 


k k k 

{ 









Line 

42 









k k k 

pi 

rintf ( "Enter 

numbe: 

r to factor: "); 



Line 

43 










k k k 

000135 

le 





push 

ds 


k k k 

000136 

68 

28 

00 



push 

OFFSET DGROUP : $SG195 


k k k 

000139 

9a 

00 

00 

00 

00 

call 

FAR PTR _printf 


k k k 

00013e 

83 

c4 

04 



add 

sp, 4 

k k k 

fgets (inbuf, INBUFSII 

IE, stdin) ; 



Line 

44 










k k k 

000141 

le 





push 

ds 


k k k 

000142 

68 

00 

00 



push 

OFFSET iob 


k k k 

000145 

6a 

50 




push 

80 


k k k 

000147 

le 





push 

ds 


k k k 

000148 

68 

00 

00 



push 

OFFSET DGROUP : $S180_inbuf 


k k k 

00014b 

9a 

00 

00 

00 

00 

call 

FAR PTR _fgets 


k k k 

000150 

83 

c4 

0a 



add 

sp, 10 


input 


last 


argc 

input 

argv 


argc 

argc 

argc 



I *** 

Line 


I *** 

Line 


I *** 

I *** 

Line 


I *** 

Line 


I *** 

Line 


I *** 

Line 


I * * * 

Line 


if ( 0==sscanf (inbuf , "%u" , &input ) ) 


45 









k k k 

000153 

8d 

46 

fe 



lea 

ax, WORD PTR [bp-2] ; input 

k k k 

000156 

16 





push 

ss 

k k k 

000157 

50 





push 

ax 

k k k 

000158 

le 





push 

ds 

k k k 

000159 

68 

41 

00 



push 

OFFSET DGROUP : $SG1 97 

k k k 

00015c 

le 





push 

ds 

k k k 

00015d 

68 

00 

00 



push 

OFFSET DGROUP : $S180_inbuf 

k k k 

000160 

9a 

00 

00 

00 

00 

call 

FAR PTR _sscanf 

k k k 

000165 

83 

c4 

0c 



add 

sp, 12 

k k k 

000168 

Ob 

cO 




or 

ax, ax 

k k k 

00016a 

75 

11 




jne 

$FB1 94 


printf ( " 

Unable 

to 

convert number. 

Please 

try again\n" ); 

46 









k k k 

00016c 

le 





push 

ds 

k k k 

00016d 

68 

44 

00 



push 

OFFSET DGROUP : $SG198 

k k k 

000170 

9a 

00 

00 

00 

00 

call 

FAR PTR _printf 

k k k 

000175 

83 

c4 

04 



add 

sp, 4 

else break 

; 








} 

48 


k k k 

000178 

83 

fe 

02 



cmp 

si , 2 


k k k 

00017b 

7c 

b8 



$FB1 94 : 

jl 

$L20005 


for 

49 

k k k 

( ix=nf=0, 

. is=input ; 

ix<last 

; ix+ + 

) 



00017d 

2b 

c0 




sub 

ax, ax 


k k k 

00017f 

89 

46 

f 8 



mov 

WORD PTR [bp-8], ax 

; nf 

k k k 

000182 

89 

46 

fa 



mov 

WORD PTR [bp-6], ax 

; ix 

k k k 

000185 

8b 

46 

fe 



mov 

ax, WORD PTR [bp-2] 

; input 

k k k 

000188 

89 

46 

f 4 



mov 

WORD PTR [bp-12], ax 

; is 

k k k 

00018b 

83 

le 

f 6 

00 


cmp 

WORD PTR [bp-10] , 0 

; last 

k k k 

00018f 

7 f 

03 




jg 

$ JCC399 


k k k 

000191 

e9 

8e 

00 


$ JCC399 

jmp 

$FB2 02 


k k k 

000194 

8b 

4 6 

fa 



mov 

ax, WORD PTR [bp-6] 

; ix 


000197 

dl 

eO 




shl 

ax, 1 



000199 

05 

00 

00 



add 

ax, OFFSET _prime 



00019c 

89 

46 

a6 



mov 

WORD PTR [bp-90], ax 



00019f 

c7 

46 

a8 

00 00 


mov 

WORD PTR [bp-88], SEG 

_prime 


0001a4 

8d 

46 

b4 



lea 

ax, WORD PTR [bp-76] 

; fact 


0001a7 

89 

46 

a2 



mov 

WORD PTR [bp-94], ax 


~k ~k ~k 

OOOlaa 

8c 

56 

a4 



mov 

WORD PTR [bp-92], ss 


~k 

OOOlad 

8b 

46 

f 6 



mov 

ax, WORD PTR [bp-10] 

; last 


OOOlbO 

2b 

46 

fa 



sub 

ax, WORD PTR [bp-6] 

; ix 

~k 

0001b3 

89 

46 

aO 



mov 

WORD PTR [bp-96], ax 


-k ~k 

0001b6 

01 

46 

fa 



add 

WORD PTR [bp-6], ax 

; ix 

~k 

0001b9 

8b 

4e 

fe 


$L20008 

mov 

cx, WORD PTR [bp-2] 

; input 


{ 

50 


q= 

=input/prime 

[ix] 

1 ; 






51 










OOOlbc 

c4 

5e 

a6 

les 

bx, DWORD 

PTR [bp-90] 



OOOlbf 

26 

8b 

07 

mov 

ax, WORD : 

PTR es : [bx] 



0001c2 

89 

4 6 

aa 

mov 

WORD PTR 

[bp-86] , ax 


•k -k -k 

0001c5 

8b 

cl 


mov 

ax, cx 



k k k 

0001c7 

2b 

d2 


sub 

dx, dx 



k k k 

0001c9 

f 7 

76 

aa 

div 

WORD PTR 

[bp-86] 


k k k 

OOOlcc 

89 

4 6 

fc 

mov 

WORD PTR 

[bp-4 ] , ax 

;q 

while ( q*prime[ix]= 

==input ) 





52 









k k k 

OOOlcf 

8b 

4 6 

aa 

mov 

ax, WORD : 

PTR [bp-86] 


k k k 

0001d2 

f 7 

66 

fc 

mul 

WORD PTR 

[bp-4] ;q 


k k k 

0001d5 

3b 

cl 


cmp 

ax, cx 



k k k 

0001d7 

75 

3d 


jne 

$FB2 05 



k k k 

0001d9 

26 

8b 

07 

mov 

ax, WORD : 

PTR es : [bx] 


k k k 

OOOldc 

89 

4 6 

b2 

mov 

WORD PTR 

[bp-78] , ax 


k k k 

OOOldf 

8b 

fO 


mov 

si, ax 



k k k 

OOOlel 

8b 

4 6 

a2 

mov 

ax, WORD : 

PTR [bp-94] 


k k k 

0001e4 

8b 

56 

a4 

mov 

dx, WORD : 

PTR [bp-92] 


k k k 

0001e7 

89 

4 6 

ac 

mov 

WORD PTR 

[bp-84 ] , ax 




. I *** 

; Line 
. | *** 

; Line 


. | *** 

; Line 


. | *** 

; Line 


. | *** 


k k k 

OOOlea 

89 56 

ae 

mov 

WORD PTR 

[bp-82 ] , dx 

k k k 

OOOled 

c4 7e 

ac 

les 

di , DWORD 

PTR [bp-84 


r 



$L20006: 



53 

i 







fact [nf++] 

=prime [ ix] ; 




54 







k k k 

OOOlfO 

26 89 

35 

mov 

WORD PTR 

es : [di] , si 

k k k 

OOOlf 3 

83 c7 

02 

add 

di, 2 


k k k 

OOOlf 6 

83 46 

a2 02 

add 

WORD PTR 

[bp-94] , 2 

k k k 

OOOlfa 

ff 46 

f 8 

inc 

WORD PTR 

[bp- 8] ;nf 


input /=prime [ix] ; 





55 







k k k 

OOOlfd 

8b cl 


mov 

ax, cx 


k k k 

OOOlff 

2b d2 


sub 

dx, dx 


k k k 

000201 

f 7 f 6 


div 

si 


k k k 

000203 

8b c8 


mov 

cx, ax 



q=input /prime [ix] , 





56 







k k k 

000205 

2b d2 


sub 

dx, dx 


k k k 

000207 

f 7 f 6 


div 

si 


k k k 

000209 

89 46 

fc 

mov 

WORD PTR 

[bp-4 ] , ax 


} 


;q 


; Line 


. | *** 

; Line 


. | *** 

; Line 


. | *** 


. | *** 

; Line 


57 


k k k 

00020c 

8b 

4 6 

b2 

mov 

ax, WORD PTR [bp-78; 

k k k 

00020f 

f 7 

66 

fc 

mul 

WORD PTR [bp-4] ;q 

k k k 

000212 

3b 

cl 


cmp 

ax, cx 

k k k 

000214 

74 

da 


je 

$FB2 05 : 

$L20006 


58 


k k k 

000216 

83 

4 6 

a6 

02 


add 

WORD PTR [bp-90], 2 


k k k 

00021a 

ff 

4e 

aO 



dec 

WORD PTR [bp-96] 


k k k 

00021d 

75 

9d 




jne 

$L20008 


k k k 

00021f 

89 

4e 

fe 


$FB2 02 : 

mov 

WORD PTR [bp-2 ] , cx 

; input 

if 

( nf <2 ) 

return 

printf ( " %u is 

prime\ 

n " , i s ) ; 



59 










k k k 

000222 

83 

7e 

f 8 

02 


cmp 

WORD PTR [bp-8], 2 

; nf 

k k k 

000226 

7d 

14 




jge 

$1206 


k k k 

000228 

ff 

76 

f 4 



push 

WORD PTR [bp-12] 

; is 

k k k 

00022b 

le 





push 

ds 


k k k 

00022c 

68 

70 

00 



push 

OFFSET DGROUP : $SG207 


k k k 

00022f 

9a 

00 

00 

00 00 


call 

FAR PTR _printf 


k k k 

000234 

83 

c4 

06 



add 

sp, 6 


k k k 

000237 

5e 





pop 

si 


k k k 

000238 

5f 





pop 

di 


k k k 

000239 

c9 





leave 



k k k 

00023a 

cb 





ret 



k k k 

00023b 

90 




$1206 : 

nop 



k k k 

00023c 

ff 

76 

b4 



push 

WORD PTR [bp-76] 

; fact 

k k k 

00023f 

ff 

76 

f 4 



push 

WORD PTR [bp-12] 

; is 

k k k 

000242 

le 





push 

ds 


k k k 

000243 

68 

7d 

00 



push 

OFFSET DGROUP : $SG208 


k k k 

000246 

9a 

00 

00 

00 00 


call 

FAR PTR _printf 


k k k 

00024b 

83 

c4 

08 



add 

sp, 8 


printf ( " %u= 

; %u", is, fact [0] 

) ; 






for 
61 
k k k 

( ix=l ; 

ix<nf 

; ix+ + 

) 




00024e 

cl 

46 

fa 

01 00 

mov 

WORD PTR [bp- 6] , 1 

; ix 

k k k 

000253 

83 

le 

f 8 

01 

cmp 

WORD PTR [bp- 8] , 1 

; nf 

k k k 

000257 

le 

29 



jle 

$FB2 1 1 


k k k 

000259 

8d 

46 

b6 


lea 

ax, WORD PTR [bp-74] 


k k k 

00025c 

89 

46 

a2 


mov 

WORD PTR [bp-94], ax 


k k k 

00025f 

8c 

56 

a4 


mov 

WORD PTR [bp-92], ss 


k k k 

000262 

8b 

76 

f 8 


mov 

si, WORD PTR [bp-8] 

; nf 

k k k 

000265 

4e 




dec 

si 


k k k 

000266 

01 

76 

fa 


add 

WORD PTR [bp-6], si 

; ix 


. | *** 

; Line 62 


printf ( 


u" , fact [ix] ) ; 


$L20010 : 



k k k 


. | *** 

; Line 


000269 

c4 

5e 

a2 


les 

bx, DWORD PTR [bp-94] 

00026c 

26 

ff 

37 


push 

WORD PTR es : [bx] 

00026f 

le 




push 

ds 

000270 

68 

83 

00 


push 

OFFSET DGROUP : $SG212 

000273 

9a 

00 

00 

00 00 

call 

FAR PTR _printf 

000278 

83 

c4 

06 


add 

sp, 6 

00027b 

83 

4 6 

a2 

02 

add 

WORD PTR [bp-94], 2 

00027 f 

4e 




dec 

si 

000280 

75 

e7 



jne 

$L20010 


$FB2 1 1 : 


return printf ( " \n" ) ; 
63 


k k k 

000282 

le 



push 

ds 

k k k 

000283 

68 

87 

00 

push 

OFFSET DGROUP : $SG213 

k k k 

000286 

9a 

00 

00 00 00 

call 

FAR PTR _printf 

k k k 

00028b 

83 

c4 

04 

add 

sp, 4 

k k k 

00028e 

5e 



pop 

si 

k k k 

00028f 

5f 



pop 

di 

k k k 

000290 

c9 



leave 


k k k 

000291 

cb 



ret 



_main ENDP 
DEMO_TEXT ENDS 

END 

. | *** } 


Questions 


Please answer the following questions, using the preceeding listings: 

1. Howlargeissegment2ofDEMO.EXE? 

2. What is the segment:offset of the 'fgets' routine? 

3. What is the segment:offset of the symbol 'fpinit'? 

4. Does DEMO.EXE call DosOpen? How can you tell? 

5. Which routine begins at address 0001 :29DE? 

6. How long is the routine named 'strlen'? 

7. Which routine contains address 0001 :1 86A? 

8. How far into the routine is the previous address? 

9. What is the program's entry point? 

1 0. What is the name of the routine which is the entry point? 

1 1 . What instruction mnemonic is at offset 00C5 in DEMO.EXE? 

12. What variable is in AX when the return at 00EO executes? 

13. Which line in DEMO. C generated the above return? 

14. Offset 0188 in DEMO. C is in which C function? 

15. What variable name is used by the instruction at 0055? 

1 6. What is the purpose of the instruction at offset 0234? 

Note: In the .cod file, the numbers in the assembler instructions are decimal. 

The lines generated in the .cod file between offsets 00E7 and 00E8 Tell you where the local variables are stored, relatively 
speaking. 



17 . 


To what are the numbers like 8, -10, -76, -12 relative? 


18. If a failure were to occur in routine 'gen', what command would you use to display only the variable 'npr'? DW 


19. How would you display the variable ’t'? DW 

20. Is the variable 'tp' in 'gen' at the same location as the variable ’nf in main? Yes / No Explain. 


21 . Check the offsets for ’gen’ and 'main' between the .map and the .cod files. Do they match? Why/why not? 

Will the offsets always behave this way? Yes / No 

Explain. 


A 32-bit Map File 


DEMO 

Start Length Name 

0001:00000000 000001A68H CODE32 
0001 : 00001A68 000000030H _MSGSEG32 
0002:00000000 00000006CH DDE4_DATA32 
0003:00000000 00000005CH DAT A3 2 
0003 : 0000005C 0000000B0H CONST32 
0003:0000010C 000000000H BSS32 
0003:00000110 000002000H STACK32 

Origin Group 
0000:0 FLAT 
0003:0 DGROUP 

Address Publics by Name 

0000:00000000 Imp DOS32FLATTOSEL (DOSCALLS . 425) 

0001 : 00001A7A DOS32GETMESSAGE 

0001 : 00001A7A Dos32GetMessage 

0000:00000000 Imp DOS32 IQUERYMESSAGECP (MSG. 8) 
0000:00000000 Imp DOS32SELTOFLAT (DOSCALLS . 426) 

0000:00000000 Imp DOS32TRUEGETMESSAGE (MSG. 6) 
0000:00000000 Imp DosAllocMem (DOSCALLS . 2 99) 

0000:00000000 Imp DosExit (DOSCALLS . 234 ) 

0000:00000000 Imp DosFreeMem (DOSCALLS . 304 ) 

0001 : 00001A7A DosGetMessage 

0001 : 00001A7A DOSGETMESSAGE 

0000:00000000 Imp DosWrite (DOSCALLS . 2 82 ) 

0001 : 00000F94 free 

0001:00000000 gen 

0001 : 000000AC main 

0001 : 000013F0 malloc 

0001 : 00001A68 sig32 

0002:00000008 _argc 

0002:0000000c _argv 

0001 : 000001A4 _bufprint 

0001:00001850 _DosFlatToSel 

0001:00001848 _DosSelToFlat 

0003:0000010c _edata 

0001 : 00000F48 _edcGetMessage 

0003:00000110 _end 

0002:00000004 _exeentry 

0002:00000010 _have_freed 

0001:00001010 _heapmin 

0001:00001108 _heapmin_int 

0001 : 000012E0 _ilog2 

0001:0000162c _MesgServ 


Class 

CODE 32-bit 
CODE 32-bit 
DATA 32-bit 
DATA 32-bit 
CONST 32-bit 
BSS 32-bit 
STACK 32-bit 



0002:00000014 
0001 : 000017FC 
0001 : 0000017C 
0001 : 00000154 


.pBucketArr 
.PrintErrMsg 
.printf ieee 
_printf_ansi 


0001:00001858 
0001:00001304 
0001 : 00001A40 
0001 : 00001A50 
0001 : 000002BC 
0001 : 000012E8 

Address 


_setuparg 
_split_chunk 
_terminate 
_wf loatfmt 

dofmto 

isdigit 

Publics by Value 


0000:00000000 
0000:00000000 
0000:00000000 
0000:00000000 
0000:00000000 
0000:00000000 
0000:00000000 
0000:00000000 
0001:00000000 
0001 : 000000AC 
0001 : 00000154 
0001 : 0000017C 
0001 : 000001A4 
0001 : 000002BC 
0001 : 00000F48 
0001 : 00000F94 
0001:00001010 
0001:00001108 
0001 : 000012E0 
0001 : 000012E8 
0001:00001304 
0001 : 000013F0 
0001:00001620 
0001 : 000017FC 
0001:00001848 
0001:00001850 
0001:00001858 
0001 : 00001A40 
0001 : 00001A50 
0001 : 00001A68 
0001 : 00001A7A 
0001 : 00001A7A 
0001 : 00001A7A 
0001 : 00001A7A 
0002:00000004 
0002:00000008 
0002:00000000 
0002:00000010 
0002:00000014 
0003:0000010C 
0003:00000110 


304) 

426) 
299) 

425) 
282) 
234) 

gen 

main 

_printf_ansi 
_printf ieee 
_bufprint 

dofmto 

_edcGetMessage 

free 

_heapmin 

_heapmin_int 

_ilog2 

isdigit 

_split_chunk 

malloc 

_MesgServ 

_PrintErrMsg 

_DosSelToFlat 

_DosFlatToSel 

_setuparg 

_terminate 

_wf loatfmt 

sig32 

DOSGETMESSAGE 

Dos32GetMessage 

DOS32GETMESSAGE 

DosGetMessage 

_exeentry 

_argc 

_argv 

_have_f reed 
_pBucketArr 
_edata 
_end 


Imp 

DosFreeMem 

(DOSCALLS 

Imp 

DOS32 IQUERYMESSAGECP 

(MSG. 8) 

Imp 

DOS32SELTOFLAT 

(DOSCALLS 

Imp 

DosAllocMem 

(DOSCALLS 

Imp 

DOS 3 2 TRUEGETMES S AGE 

(MSG. 6) 

Imp 

DOS32FLATTOSEL 

(DOSCALLS 

Imp 

DosWrite 

(DOSCALLS 

Imp 

DosExit 

(DOSCALLS 


Line numbers for DEMO . obj (DEMO . C) segment CODE32 


Source 

Src File 

Flags 

Seg : Offset 

Line Num 

Index 

(OX) 

(OX) 

9 

1 

00 

0001:00000000 

11 

1 

00 

0001:00000009 

12 

1 

00 

0001 : OOOOOOle 

13 

1 

00 

0001:00000024 

14 

1 

00 

0001:0000002b 

15 

1 

00 

0001:00000032 

17 

1 

00 

0001:00000040 

18 

1 

00 

0001 : 0000004b 

20 

1 

00 

0001:00000050 

21 

1 

00 

0001:00000051 

23 

1 

00 

0001 : 0000005a 

27 

1 

00 

0001:00000069 

28 

1 

00 

0001:00000082 



29 

1 

00 


0001:00000087 

30 

1 

00 


0001:00000097 

31 

1 

00 


0001 : 000000a4 

34 

1 

00 


0001 : OOOOOOac 

39 

1 

00 


0001 : 000000b2 

40 

1 

00 


0001 : 000000c8 

41 

1 

00 


0001 : 000000e5 

42 

1 

00 


0001 : OOOOOOf 4 

43 

1 

00 


0001:00000107 

45 

1 

00 


0001 : 00000114 

46 

1 

00 


0001:00000127 

47 

1 

00 


0001 : 00000144 

48 

1 

00 


0001:00000149 

Record Number of 

Start of 

Source : 

9 


Number of Primary 

Source 

Records : 

26 



Source & Listing Files: 

File 1 ) DEMO . C 

File 2 ) C : \PMG\CSET\ INCLUDE! os 2 . h 
File 3 ) C : \PMG\CSET\ INCLUDE! os 2 def . h 
File 4 ) C : \PMG\CSET\ INCLUDE \bse . h 
File 5 ) C : \PMG\CSET\ INCLUDE \bsedos . h 
File 6) C : \PMG\CSET\ INCLUDE\bsememf . h 
File 7) C : \PMG\CSET\ INCLUDE\bsesub . h 
File 8) C : \PMG\CSET\ INCLUDE\bseerr . h 
File 9) C : \PMG\CSET\ INCLUDE! STD 10 . H 

Program entry point at 0001 : 00000F6C 


A 32-bit .ASM File, Produced by CSET/2 


TITLE DEMO . C 

.386 

.387 

INCLUDELIB OS2386.LIB 
INCLUDELIB dde4nbs.lib 
CODE32 SEGMENT DWORD USE32 PUBLIC 'CODE' 

CODE32 ENDS 

DATA32 SEGMENT DWORD USE32 PUBLIC 'DATA' 

DATA32 ENDS 

CONST32 SEGMENT DWORD USE32 PUBLIC 'CONST' 

CONST32 ENDS 

BSS32 SEGMENT DWORD USE32 PUBLIC 'BSS' 

BSS32 ENDS 

DGROUP GROUP CONST32, BSS32, DAT A3 2 

ASSUME CS : FLAT, DS : FLAT, SS : FLAT, ES : FLAT 
EXTRN DosAllocMem : PROC 
EXTRN _printf ieee : PROC 

EXTRN _DosFlatToSel : PROC 
EXTRN _DosSelToFlat : PROC 
EXTRN _exeentry : PROC 
DATA32 SEGMENT 

0STAT1 DB "non-zero return code fro" 

DB "m DosAllocMem=%d" , OaH, OH 
ALIGN 04H 

0STAT2 DB "there are %u primes less" 

DB " than 6553 6 ", OaH, OH 



ALIGN 04H 

0STAT3 

DB "%6u ", OH 

0STAT4 

DB OaH, OH 


DD _exeentry 

DATA32 

ENDS 

BSS32 

SEGMENT 

BSS32 

ENDS 

CONST32 

SEGMENT 

CONST32 

ENDS 

CODE32 

SEGMENT 



• k k k k k 

9 int gen(int *prime) 


ALIGN 

04H 


PUBLIC 

: gen 

gen 

PROC 



PUSH 

EBP 


MOV 

EBP, ESP 


PUSH 

EBX 


PUSH 

ESI 


PUSH 

EDI 


MOV 

[EBP+08H] , EAX; prime 

• k k k k k 

11 int ix, 1=2, 11=25, npr=3, q, t, tp=2 


MOV 

DWORD PTR [EBP-018H] , 019H; 


MOV 

DWORD PTR [EBP-014H] , 03H; 


MOV 

DWORD PTR [EBP-010H] , 02H; 

• k k k k k 

12 prime [ 0] =2 ; 


MOV 

DWORD PTR [EAX],02H 

• k k k k k 

13 prime [1] =3; 


MOV 

DWORD PTR [EAX+04H] , 03H 

• k k k k k 

14 prime [2 ] =5; 


MOV 

DWORD PTR [EAX+08H] , 05H 

• k k k k k 

15 for ( t=7 ; t<65530 ; t+=tp ) 


MOV 

ECX, [EBP-OlcH] ; ix 


MOV 

EBX, 07H 


MOV 

EDI, 02H 


ALIGN 

04H 

FELB6 : 



• ★ ★ * ★ ★ 

16 

{ 

• k k k k k 

17 

tp=6-tp; 


MOV 

EDX, [EBP-010H] ; tp 


NEG 

EDX 


ADD 

EDX, 06H 


MOV 

[EBP-010H] , EDX; tp 

• k k k k k 

18 

if ( 11<— t ) 


CMP 

[EBP-018H] , EBX; 11 


JG 

FELB7 

• k k k k k 

19 

{ 

• k k k k k 

20 

i++; 


INC 

EDI 

• ★ ★ ★ ★ ★ 

21 

ll=prime [ 1 ] *prime [ 1 ] ; 


MOV 

EDX, DWORD PTR [EAX+EDI*04H] 


IMUL 

EDX, EDX 


MOV 

[EBP-018H] , EDX; 11 

• k k k k k 

22 

> 

FELB7 : 



• k k k k k 

23 

for ( ix=2 ; ix<l ; ix++ ) 


MOV 

ECX, 02H 


CMP 

EDI, 02H 


JLE 

FELB8 


ALIGN 

04H 

FELB9 : 




MOV 

[EBP-020H] , EDI; 0CBE17 


MOV 

ESI, EAX 

• k k k k k 

24 

{ 

• k k k k k 

25 

q=t/prime [ix] ; 

• k k k k k 

26 

tt=q*prime [ix] ; 

• k k k k k 

27 

if ( t==tt ) break; 


MOV 

EDI, DWORD PTR [ESI+ECX*04H] 


MOV 

EAX, EBX 


CDQ 



IDIV 

EDI 


MOV 

EDX, EDI 


MOV 

EDI, [EBP-020H] ; 0CBE17 


XCHG 

ESI, EAX 


IMUL 

EDX, ESI 


CMP 

EDX, EBX 


JE 

FELB8 

• k k k k k 

28 

} 


INC 

ECX 


11 

npr 

tp 



FELB8 : 


CMP 

JL 


ECX, EDI 
FELB9 


;***** 29 if ( l==ix ) prime [npr++] =t; 

CMP EDI , ECX 

JNE FELB12 

MOV EDX, [EBP-014H] ; npr 

MOV DWORD PTR [EAX+EDX*04H] , EBX 

INC EDX 

MOV [EBP-014H] , EDX; npr 

FELB12 : 

MOV EDX, EBX 

;***** 30 } 

MOV EBX, [EBP-010H] ; tp 

ADD EBX, EDX 

CMP EBX, Of f faH 

JL FELB6 

.***** 21 return npr; 

MOV EAX, [EBP-014H] ; npr 

POP EDI 

POP ESI 

POP EBX 

LEAVE 

RET 

gen ENDP 

;***** 34 int main(int argc, char *argv[]) 
ALIGN 04H 

PUBLIC main 
main PROC 

PUSH EBX 

PUSH ESI 

PUSH EDI 

SUB ESP , OcH 


;***** 39 rc=DosAllocMem ( &mem, 16384, PAG_READ+PAG_WRITE+PAG_COMMIT) ; 

PUSH 013H 

PUSH 04000H 

LEA ECX, [ESP+010H] ; mem 

PUSH ECX 

MOV AL, 03H 

CALL DosAllocMem 

ADD ESP, OcH 

;***** 40 if ( rc ) return printf ( "non-zero return code from DosAllocMem=%d\n" , rc) ; 
OR EAX, EAX 

JE FELB18 

PUSH EAX 

MOV EAX, OFFSET FLAT: 0STAT1 

SUB ESP, 04H 

CALL _printfieee 

ADD ESP, 014H 

POP EDI 

POP ESI 

POP EBX 

RET 

FELB18 : 

;***** 42 last=gen (p=mem) ; 

MOV EAX, [ESP+08H] ; mem 

MOV [ESP+04H] , EAX; p 

CALL gen 

MOV ESI, EAX 

;***** 42 printf ( "there are %u primes less than 65536\n" , last ) ; 

PUSH ESI 

MOV EAX, OFFSET FLAT: 0STAT2 

SUB ESP, 04H 

CALL _printfieee 

MOV EAX, ESI 

ADD ESP, 08H 



;***** 43 for ( ix=0 ; ix<last ; ix++ ) 
OR E AX , E AX 

JLE FELB20 

MOV EBX, EAX 

MOV EDI , [ESP + 04H] ; p 

XOR ESI , ESI 

ALIGN 04H 


FELB21 : 

****** 44 { 

****** 45 printf("%6u n ,p[ix]); 

PUSH DWORD PTR [EDI+ESI*04H] 

MOV EAX, OFFSET FLAT: 0STAT3 

SUB ESP, 04H 

CALL _printfieee 

ADD ESP, 08H 

;***** 46 if ( 9==(ix%10) ) printf ("\n") ; 

MOV EAX, ESI 

MOV ECX, OaH 

CDQ 

IDIV ECX 

CMP EDX, 0 9H 

JNE FELB22 

MOV EAX, OFFSET FLAT: 0STAT4 

CALL _printfieee 

FELB22 : 

****** 4 7 

INC 
CMP 
JL 

FELB20 : 


****** 43 return 0 ; 



XOR 

EAX, EAX 


ADD 

ESP, OcH 


POP 

EDI 


POP 

ESI 


POP 

RET 

EBX 

main 

ENDP 


CODE32 

END 

ENDS 



Questions 


Please answer the following questions, using the preceeding listings: 

1 . How large is segment 1 of DEMO.EXE? 

2. What is the segment:offset of the 'bufprint' routine? 

3. What is the segment:offset of the symbol 'have_freed'? 

4. Does DEMO.EXE call DosWrite? How can you tell? 

5. Which routine begins at address 0001 :12E8? 

6. How long is the routine named 'terminate'? 

7. Which routine contains address 0001 :1 888? 


ESI 

ESI, EBX 
FELB21 


8 . 


What is the program's entry point? 



9. What is the name of the routine which has the entry? 

10. How far into this routine is the actual entry point? 

1 1 . What is the first instruction mnemonic generated by line 28? 

12. What variable is in EAX when the return at line 31 executes? 

13. Offset 0124 in DEMO. C is in which C function? 

14. What variable name is used by the instruction at 0040? 

1 5. Where does the code for line 34 start? 

Note: In the .asm file, the numbers in the assembler instructions are hex. You can tell because they are suffixed with 'H'. 

The assembler code generated has the variable name following each line where it is referenced. This makes it easy to locate the 
variables, because you simply use the address expression in the instruction. 

16. Look at line 1 1 . To what are the numbers -18, -14, -10 relative? 


1 7. Look at the code generated for line 1 5. 

Where will the variable 't' be found? 

18. If a failure were to occur in routine 'gen', what command would you use to display only the variable 'npr'? DD 

19. How would you display the variable 't'? DD 

20. Is the variable T in 'gen' at the same location as the variable 'ix' in main? Yes / No Explain. 


Exercise 5: Unwinding a 16-bit Stack 


Objectives: 

1 . To learn how to 'unwind' a stack. This is how to find the calling hierarchy which existed at some particular point, such as at the 
point of failure. 

2. To learn how to 'mine' information from the stack frames. 

Normally, every routine which has not returned to its caller will have a stack frame. Each stack frame normally contains the parameters 
passed to a routine, the return address for the routine, and the data which is local for that routine. 

Start the dump formatter just as before, on the same dump. 

Questions: 

1 . The convention states that BP or EBP will point to the current stack frame. SP will point to the lowest address which is in use. 

Therefore, note the initial values for SP and BP . Since SS is the selector that defines the stack, note which it is. Some 

analysts also note the limit of the SS descriptor, because that value bounds the range of both SP and BP. 

SS SSLIM 

2. Display the current stack frame using DW SS:BP. This will show you only part of the frame, but most analysts do this because it 
makes following the chain so easy. 

The first word is the offset, or near address, of the next frame. The second word is the offset part of the return address. If the call was a far 
call, the return must also be a far call. If this is the case, the third word is the selector part of the return address. 



next stack frame return offset selector 

3. Some number of words following the return address are the parameters passed. There is no way to know for certain how many 
parameters there are, unless you know how both the caller and the routine are written. Analysts typically write down a few words, 
as convenient. 

parameter word# 1 2 3 4 

4. At this point we have gleaned what we can from this frame. Now you need to repeat the process for the rest of the stack frames. 

Many analysts will follow the entire chain of stack frames before going to the system or application documentation to find the names of the 
routines involved, and the line numbers. Others choose to go back and forth, and put in the routine names and line numbers for each frame 
as they go. 

The application documentation will tell you where variables are stored. Remember that each routine uses its own stack frame, so be certain 
to use the numeric value rather than the register name 'BP' to look at local data for routines other than the failing one. 

If you display from SP to BP-2, or ESP to EBP-4, you will see the entire local data for the routine using the current stack frame. This can be 
quite nice for locating the individual variables. 

Find the routine which failed by looking at the .MAP file. 

Find the line number that failed by looking next at the .COD file. 

The following variables are involved in the failure: 'npr' and 't'. their locations can be found in the .COD file. 

Find the location of npr, then display its value 

Find the location of t, then display its value 

You may want to look at the call to the failing routine, before going away to find the programmer. 


Exercise 6: Unwinding a 32-bit Stack 

Objectives: 

1 . To learn how to 'unwind' a stack. This is how to find the calling hierarchy which existed at the point of failure. 

2. To learn how to 'mine' information from the stack frames. 

Normally, every routine which has not returned to its caller will have a stack frame. Each stack frame normally contains the parameters 
passed to a routine, the return address for the routine, and the data which is local for that routine. 

Start the dump formatter by typing DF_RET .ADUMPS.1 62\DUMP04.DMP 

Questions: 

1 . The convention states that BP or EBP will point to the current stack frame. ESP will point to the lowest address which is in use. 

Therefore, note the initial values for ESP and EBP . Since SS is the selector that defines the stack, note which it is. 

SS SSLIM (not generally useful when SS is 53) 

2. Display the current stack frame using DD SS:EBP. This will show you only part of the frame, but most analysts do this because it 
makes following the chain so easy. 

The first doubleword is the offset, or near address, of the next frame. The second doubleword is the offset part of the return address. If the 
call was a far call, the return must also be a far call. If this is the case, the third doubleword is the selector part of the return address. 

IT IS RARE FOR 32-BIT PROGRAMS TO USE FAR ADDRESSES. 

next stack frame return offset 


3 . 


Some number of doublewords following the return address are the parameters passed. There is no way to know for certain how 
many parameters there are, unless you know how both the caller and the routine are written. Analysts typically write down a few 
doublewords, as convenient. 



parameter doubleword# 1 


2 


3 


4 


4. At this point we have gleaned what we can from this frame. Now you need to repeat the process for the rest of the stack frames. 


eax=00080000 ebx=000097eb ecx=0000002d edx=00001000 esi=000000c5 edi=0000002d 
eip=0001008e esp=000320c0 ebp=000320cc iopl=2 rf — — nv up ei pi zr na pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001a7000 

005b : 0001008e 891c90 mov dword ptr [eax+edx*27 ] , ebx ds : 00084000=invalid 

DD SS : ESP EBP-4 

0053 : 000320c0 00000000 00000000 00000000 

DD SS : EBP L18 

0053 : 000320cc 000320f8 000100f2 00080000 00080000 

0053 : 000320dc 00080000 00000000 00000000 00000000 

0053 : 000320ec 00010f8e 00000001 00070010 00000000 

0053 : 000320fc lbfbbf68 0000036d 00000000 00040000 

0053:0003210c 0004030b 00000000 00000000 00000000 

0053:0003211c 00000000 00000000 00000000 00000000 

DD 330F8 L 10 

0053 : 000320f 8 00000000 lbfbbf68 0000036d 00000000 

0053:00032108 00040000 0004030b 00000000 00000000 

0053:00032118 00000000 00000000 00000000 00000000 

0053:00032128 00000000 00000000 00000000 00000000 

The first parameter passed by OS/2 is the load module handle. 

•LMO 36D 

hmte=036d pmte=%f f 652c6c mflags=00903150 c:\pmg\classes\labs\lab4\demo.exe 
obj vsize vbase flags ipagemap cpagemap hob sel 

0001 00001a98 00010000 80002025 00000001 00000002 0361 OOOf r-x shr big 

0002 0000006c 00020000 80002003 00000003 00000001 0000 0017 rw- big 

0003 00002110 00030000 80002003 00000004 00000001 0000 OOlf rw- big 

Wonder what the 00040000 and 0004030B are? Display them to see! 

DB %40000 

%00040000 57 50 5f 4f 42 4a 48 41-4e 44 4c 45 3d 31 33 32 WP_OB JHANDLE=132 

%00040010 37 33 39 00 41 55 54 4f-53 54 41 52 54 3d 50 52 739 • AUTOSTART=PR 

%00040020 4 f 47 52 41 4d 53 2c 54-41 53 4b 4c 49 53 54 2c OGRAMS, TASKLIST, 

%00040030 46 4f 4c 44 45 52 53 2c-4c 41 55 4e 43 48 50 41 FOLDERS , LAUNCHPA 

%00040040 44 00 42 4f 4f 4b 53 48-45 4c 46 3d 43 3a 5c 4f D • BOOKSHELF=C : \0 

%00040050 53 32 5c 42 4f 4f 4b 3b-00 43 4f 4d 53 50 45 43 S2\BOOK; -COMSPEC 

%00040060 3d 43 3a 5c 4f 53 32 5c-43 4d 44 2e 45 58 45 00 =C : \OS2\CMD • EXE • 

%00040070 44 50 41 54 48 3d 43 3a-5c 50 4d 47 5c 4f 53 32 DPATH=C : \PMG\OS2 

DB %4030B L 20 

%0004030b 4c 41 42 34 5c 44 45 4d-4f 00 00 55 fO 8b cl e8 LAB4 \DEMO • • Up • Gh 

%0004031b d5 Id 01 00 ff 75 e8 e8-19 le 01 00 83 c4 14 89 U----uhh D-. 


Frame at Next Frame at Return address parameters: 


Frame at Next Frame at Return address parameters: 


Frame at Next Frame at Return address parameters: 


Many analysts will follow the entire chain of stack frames before going to the system or application documentation to find the names of the 
routines involved, and the line numbers. Others choose to go back and forth, and put in the routine names and line numbers for each frame 
as they go. 



The application documentation will tell you where variables are stored. Remember that each routine uses its own stack frame, so be certain 
to use the numeric value rather than the register name 'BP' to look at local data for routines other than the failing one. 


If you display from ESP to EBP-2, or ESP to EBP-4, you will see the entire local data for the routine using the current stack frame. This can 
be quite nice for locating the individual variables. 

Find the routine which failed by looking at the -MAP file. 

Find the line number that failed by looking again at the -MAP file. 

The following variables are involved in the failure: 'npr' and 't'. their locations can be found in the -ASM file. 

Find the location of npr, then display its value 

Find the location of t, then display its value Flint: t has been optimized, and is in a register. 

You may want to look at the call to the failing routine, before going away to find the programmer. 


Requesting Kernel Services 


If CALL targets a less privileged CS, or RET ( RETURN ) a more privileged CS, a general protection exception occurs by definition: a trusted 
program cannot directly invoke a less trusted one. 

If CALL targets a more privileged CS, a general protection exception occurs because a less privileged program cannot access a more 
privileged object (code segment). 

It is IMPOSSIBLE to DIRECTLY call a code segment which is a different privilege level than the caller. 

It IS POSSIBLE to INDIRECTLY call a more privileged code segment. 


The Task State Segment (TSS) 

This hardware control block is used to control hardware multitasking, I/O access, and privilege transitions. 


How to Find the TSS 


There is a selector register named the task register (TR). This register has a GDT selector that chooses a descriptor whose type is TSS. 
This descriptor contains the base and limit for the TSS. 

Task State Segment Format 

The fields from offset 4 to 1 F are not changed by the hardware. 


Offset (size) 

Content 

Offset (size) 

Content 

00 (2) 

link - previous tss 
selector 



04 (4) 

Ring 

0 ESP 

08 (2) 

Ring 0 SS 

0C (4) 

Ring 

1 ESP 

10 (2) 

Ring 1 SS 

14 (4) 

Ring 

2 ESP 

18 (2) 

Ring 2 SS 

1C (4) 

CR3 . 


20 (4) 

EIP 

24 (4) 

EFLAGS 

28 (4) 

EAX 

2C (4) 

ECX 


30 (4) 

EDX 



34 (4) 

EBX 

38 (4) 

ESP 

3C (4) 

EBP 

40 (4) 

ESI 

44 (4) 

EDI 



48 (2) 

ES 

4C (2) 

CS 

50 (2) 

SS 

54 (2) 

DS 

58 (2) 

FS 

5C (2 ) 

GS 

60 (2) 

LDT selector 

62 (2) 

reserved 

64 (2) 

TFlags 

66 (2) 

10 Map 


The Call Gate 


An explanation of what a call gate provides, and how it works. 


Why Have a Call Gate? 


The CALL GATE is the mechanism by which an application requests services from the operating system. Integrity has several requirements 
which are not immediately obvious to most people. 

1 . The caller must be forced to use a designed entry point to prevent entry at an arbitrary location; for example, at a point after the 
parameters have been validated. This might cause the operating system to violate its own integrity or that of another application. 

2. The parameters, as well as the rest of the stack, must be protected from the application while in use by the operating system to 
prevent changes by another thread in that application. 

3. The return address must be protected from the application while the operating system is running to prevent other threads of the 
application from altering it in a way that would cause a return to the application in a privileged mode. 

Note: A CALL GATE implements all of the above requirements. 

Note: A CALL GATE is a system descriptor which describes an entry point in a more privileged program which is accessible to less 
privileged programs. 


Another View 


A Gate is a 'service window’ which describes the entry point of the gate and what size package is passed into the more protected ring. 


RING 3 

\ 

\ Gate 

RING 2 \ 

-\ 

\ Gate 

\ 

RING 0 



Call Gate Contents 


CALL GATE 


PL 

of Gate 

i 

Can I 

see this gate? 

CS 

of entry 

i 

Where 

is the entry? 

EIP 

of entry 


Where 

is the entry? 

Parm Count 

i 

What 

gets passed? 

WC 

or DWC 

i 




A Descriptor 

Note: Observe that the privilege level of the gate controls which privilege level programs can access the gate: the target privilege level is 
contained in the entry point CS value. 


Call Gate Overview 


When a FAR CALL contains a target code selector ( CS ) which is a CALL GATE, the processor ignores the offset ( IP ) contained in the 
instruction and gets the true target CS and offset ( IP ) from the CALL GATE. In addition, if the call is to a more privileged program, the 
processor locates a fresh stack for it to use, stores the current stack selector and stack pointer in the new, more privileged stack, copies the 
parameters from the old stack to the new one, and finally saves the return information in the new stack. All this happens during the 
execution of the call instruction. 

Briefly, when the return occurs, all this gets undone. 


Call Gate Detail 

From less to more privileged, for example, Ring 3 to Ring 0 

1 . Verify new stack will hold linkage data. If not, stack fault, error code 0. 

2. New SS, SP from TSS, based on PL of new CS. 

3. Old SS:SP copied to new stack. 

4. Parameters ( up to 1 5 words or doublewords ) copied from old to new stack. 

5. Former CS:IP copied to new stack; SP now points here. 

6. New CS, IP from Call Gate 


A Ring Transition Picture 



The following is how the stacks look at entry to the more privileged program: 

RING 3 STACK RING 0 STACK < — INITIAL RO ESP 

high 





addresses 


SS 



P3 




ESP 



P2 




P3 



PI 




P2 



P0 




PI 




1 



P0 







CS 







EIP 




1 

low 

1 




addresses 


Note: There is NO RETURN ADDRESS on the less privileged stack. 

Note: The two items at the top of the more privileged stack are the less privileged SS and ESP. 

Note: Subtract 8 from the SP value found in the TSS to find where the less privileged ESP and SS are stored. The values in the TSS are 
initial values, not the address of the first item pushed. 

Note: A trap C in Ring 0 is usually a double fault. 

When the processor detects a Stack Exception it needs to push an error code and a return address onto the stack of the exception handler. 
If this happens in Ring 0, there will be no privilege level transition, which includes switching to a new, protected stack. If the exception is due 
to stack growth, there is no place to push the error code or return address. 

RESULT: TRAP 8 


Return Detail 

From more to less privileged, for example, Ring 0 to Ring 3 

1 . Verify that all steps below will work. If not, general protection fault. 

2. Pop IP, CS 

3. Add immediate value to 'old' SP 

4. Pop SP, SS 

5. Add immediate value to 'new' SP 

6. Zero every selector which has PL more privileged than the new CPL. This is required to maintain integrity because access 
validation is done only when a selector register is changed - not when it is used. 


Exercise 7: Looking at a Ring Transition 

Objectives: 


1 . 


Introduction 



To review previous knowlege of analysing traps 


To begin getting familiar with the debug kernel 
To learn how to identify the API targeted by a call gate 

2. Techniques 

To learn about the PATCH program 

To learn about getting control when a module is loaded 

3. Finding the TSS and the privileged stacks 
To learn when you may need to find the TSS 

To learn how to find the TSS 
To learn how to find privileged stacks 

4. Watching a ring transition 
Look at the ring 0 stack before 
Look at the ring 3 stack before 

Actually execute a far call from ring 3 to ring 0. 

Look at both stacks afterwards. 


Part 1 : Introduction to the Debug Kernel 

Procedures: Introduction 

1 . Change to directory CLASS\LABS\LAB09 

2. Execute OSPREY, see the failure, and the trap screen. 

At the failure, record CS:EIP from the trap screen. 

CS EIP 

At this point, it is too late to cause a dump. Dismiss the trap screen. 

We will refer to the system on which the problem occurs at the Machine Under Test, or the MUT. The MUT is connected via a null modem 
cable to an adjacent machine, which we will call the debug terminal. Most of the debugging actions will occur from the debug terminal, on 
which we will run a public domain terminal emulation program, LOGICOMM. If you like LOGICOMM and intend to use it frequently, you 
should register it, which will also get you an improved version. 

Let's use the debug kernel for the first time. First, we need to get its attention. The way to do this is to enter Control-C on the debug terminal, 
after starting LOGICOMM. The debug kernel defaults to settings 
9600, N , 8, 1 

3. Start LOGICOMM on the debug terminal, then type Control-C. 

The default response of the debug kernel is the registers at whatever point OS/2 was interrupted by the Control-C. This is not generally very 
useful. We need to get control where we want it, not at a random place. 

4. Enter the command VSF* 

This tells the debug kernel that you want control on any interupt which may be Fatal to a thread. The 'F' is for fatal, the '*' is for 'any'. 

Enter the command G (Go), so OS/2 can continue. 



5. On the MUT, rerun OSPREY. 

This time, you should get a group of lines on the debug terminal which tell you that a fatal failure has occurred. 
Enter the command DG CS You will find that this is in ring 0. 

Before we look at ring 0, let us find where ring 3 called ring 0, and also identify the API which was called. 

Enter the command .R (the period is very significant!) 

.R shows you the ring 3 registers, whereas R shows you the current ones. 

CS= EIP= Does this match the trap screen? 

eax=00000000 ebx=0000405c ecx=00000000 edx=00000001 esi=00000000 edi=000016b0 
eip=00001bc3 esp=000011e4 ebp=0000120e iopl=2 — — — nv up ei pi zr na pe nc 
cs=000f ss=001f ds=001f es=001f fs=150b gs=0000 cr2=00000000 cr3=001a7000 

OOOf : 00001bc3 ObcO or ax, ax 


We already know this instruction did not trap; the trap is in ring 0. 

6. If we unassemble prior to OOOf :1 bc3, we will find a far call. 

...1 BBE call :0000 

The instruction as hex data is 

7. If you inquire about the descriptor by entering DG and the selector, You should see something similar to this 

# DG lxxx 

1 xxx CallG32 Sel : Of f =014 8 : 0000550a DPL=3 P DWC=7 


Write down CS EIP DPL DWC 

If you enter the LN command with the values of CS and EIP from the call gate, you will identify the API which is called via this gate. 

8. We know how to find parameters on the ring 3 stack, DW SS:SP 

We can also find them on the ring 0 stack, but at this point, the kernel has already manipulated some of the addresses, so there is not an 

exact match. We need to get control at the point of the call at 1 BBE. 

9. Enter the command GT which will GoThrough the trap. 


Part 2: Some Techniques 


Procedures to get control at a point other than a trap: 

One approach is to use clever breakpoints within OS/2. Stopping at the first executable instruction of a program 

1 . We will make use of a couple of breakpoint commands 

This command tells the debug kernel that we want control on the debug terminal at some specific point. The problem is that the place where 
we would like to get control is not loaded into memory until we run the program, and it is difficult at best to type Control-C at just the right 
time. 

2. The initial breakpoint uses the fact that almost all programs use the DOSCALL1 DLL, which appears to have instance 
initialization. 

Enter the command BP DosLiblDisp.'.p*' 

The content of the quoted string is the command to execute when we arrive at the breakpoint. This will assure us that we are in the correct 
context, because the output of ’.p’ includes the module name. 


Let the MUT run, and execute OSPREY once again. 



You will probably get control in the context of OSPREY. If not, issue 'g' again a time or two until you are. 

3. At this point, OSPREY has been loaded, so we can set a breakpoint. 

If you simply try the command BP 0F:1 BBE, you will discover that the page is not yet loaded. There are two ways around this problem. 

a. Use a register breakpoint, BR E,0F:1BBE 

b. Cause OS/2 to bring the page in with .1 0F:1 BBE 
Then reenter the BP command from above. 


4. Plowever, this is 'cheating' because we already knew where to stop. 

To find the address of the first instruction at this point, enter the command .M 0F:0 Find the MTE handle, hmte. 
Issue the .LMO command with the FIMTE as the parameter. 

Alternatively, try .LMO 'OSPREY', which works sometimes. 

The output of the .LMO command includes the linear address of the MTE. 

Display the MTE as doublewords, and get the address of the SMTE from the output; it is in the second doubleword. 

Display the SMTE as doublewords, and you can find the entry point in the second and third words displayed. 

Now you can set a breakpoint at the entry to any module. 

The PATCH program 

1 . On the MUT, execute the EXEPIDR utility against OSPREY.EXE. 

EXEFIDR is distributed with the developers' toolkit. 


The output will provide you information you need to patch a program successfully. The last part of the output should look like 


Module : 

Description : 

Data : 

Initial CS:IP: 

Initial SS:SP: 

Extra stack allocation: 
DGROUP : 


OSPREY 

OSPREY.EXE 

NONSHARED 

seg 1 offset 0088 

seg 3 offset 0000 

OaOO bytes 
seg 3 


no. type address 

1 CODE 00000200 

2 DATA 00000000 

3 DATA 00002800 


file mem flags 
0247d 0247e 
00000 00200 
007cb 00960 


There are two things we will need in this listing. 

2. The entry point, or initial CS:IP is : 

3. The location in the file where that segment begins 

The columns labelled 'file' and 'mem' are the sizes of the segment in the file, and in memory. The difference is due to uninitialized data, 
which is not stored, saving space and reducing program load time. 

To find the location of an instruction in the file, add the offset to the file address. 

4. To get control, we will replace a byte with the hex value 'CC', which is a special one-byte instruction, Int 3, or Breakpoint. 

5. We will patch the call instruction at 1 BBE. 

Add the offset, 1 BBE to the file address 0200 

If you cannot add hex, get the debug kernel's attention, and then type in ? 1 BBE+0200. ? is a general purpose evaluation command. 

6. We now know where we want to patch the program. Let's do it. 


On the MUT, enter the command PATCFI OSPREY.EXE 



The patch address was calculated above; enter it. 


The byte you are about to replace is hex 

Type CC then press enter, and complete the confirmations. 

We have now patched the program. 

7. Execute the program on the MUT ; you get control at the INT 3. 

We need to put back the hex data which was originally there, so as not to introduce another problem. We will use the enter command. 
Type the command E CS:IP 

You will see the 'CC', type the original data value and press enter. 

Type the command .R and you should see the original far call. 

8. This is one way to get control. 

It has problems if the MUT is not where you can touch it. 

Type the commands G then GT to let OSPREY finish. 

9. Patch OSPREY back to its original content if you wish. 


Part 3: Finding the TSS 

It is relatively simple to find and display this critical control block which is used by the hardware for ring transitions. 

1 . Get the debug kernel's attention, so you can display data. 

2. The TSS is located via the Task Register (TR), which is a selctor. 

You can find the value in TR by entering ? TR 

Entering RT toggles register terse mode. Try R before and after entering RT. You can look for TR in the output. 

You really do not want TR, but the TSS, which is at TR:0. 

3. Enter 

DD TR:0 to display the TSS as doublewords 
DT TR:0 to format the TSS. 

4. The first doubleword is the link field. 

It indicates which TSS called this one through a task gate. 

The next two doublewords are the ESP and SS for entry to ring 0. 

The next pair of doublewords are unused by OS/2; they would have the ESP and SS for entry into ring 1 . 

The next pair of doublewords are the ESP and SS for entry to ring 2. 

5. To display the stack used at entry to ring 0, 

use the DD command with the SS and ESP values from the TSS; BUT Stacks grow downward, so put -80 after the ESP value. 80 is the 
number of bytes displayed by default; this will show you the top of the stack for ring 0, with the saved SS value as the last item shown. 


Part 4: Watching a Ring Transition 



We will watch a ring transition by stopping on an instruction which we know causes a ring transition, display both stacks, then 
single step the instruction, and look at both stacks again. 

Get control in OSPREY so that the next instruction is at 0F:1 BBE. 

1 . Display the call gate by using DG and the selector from the call. 

Write down the target CS EIP DWC PL 

2. Display the ring 3 stack as WORDS 

so you can see as many DOUBLEWORDS as are passed through the gate. 

Display the ring 0 stack as words, too. It is technically incorrect to do this, but for the purposes of this exercise, it makes things easy. 

3. Use the command T to execute the call instruction. 

Now, again display the ring 0 stack as words again. 

4. Compare the ring 0 content now with the content of the ring 3 stack. 

Do not overlook the ring 3 SS and ESP at the top of the ring 0 stack. 

Do not overlook the return address in the ring 0 stack, following the parameters which were copied by the hardware as it executed the call. 

5. TIMESAVER: 

If you know what API will be called, you can simply set the breakpoint at the API, by using its name. A side effect is that every thread which 
calls the API will stop, so you may want to use something like '.p*' as the command to execute at the breakpoint, which makes it easy to see 
when the thread of interest is there. 

This lab is now complete. However, if you let it run to the failing instruction, you will find an additional detail about this API, 
namely that because only 13 words were pushed, and 7 doublewords are needed to get them all copied into the ring 0 stack, 
there is one more detail we can see, namely how the difference (two bytes) is handled. 

If you display the ring 0 stack once again, it has been changed! 

The return will need to add enough to the ring 0 stack pointer that it can find the ring 3 stack successfully; this is also what is 
added to the ring 3 stack pointer, because both stacks must be cleaned up. In order that this not be destructive of what is already 
on the ring 3 stack, the ring 0 entry code has adjusted the saved ring 3 ESP downward by 2 before the trap occurs. This is an 
example of some of the work that has been done within the ring 0 stack by the privileged code. 


Exercise 8: Identifying the Owner of Storage 


Objectives: 

1 . To learn how to find out where a part of storage originated 

2. To learn how to find out what module contains it, if not dynamically acquired 

Every piece of storage has an owner. Storage owned by OS/2 may not have all the storage accounting information which is kept for storage 
used by applications. The most common clue that this situation has occurred is the presence of the 'UVirt' flag (bit 52) in the descriptor. The 
next most common clue is that the procedure below may fail if complete storage accounting has not been done. 

Within OS/2, handles are used extensively. Generally, a handle is nothing more than an index into some table or other. For diagnostic 
purposes, one can treat it as a 'magic number’ that can be used as an operand on certain commands. 

The initial objective is to find the module table entry which the loader built when the module was loaded. This will relate storage to the 'far' 
addresses in the link map. 

The procedure is slightly different for private and shared storage. 

With practice, one learns quickly what selectors are likely to be private, and which are likely to be shared. Refer to the address space picture 
which appears earlier, to refresh your memory about private and shared storage. 


One way to tell is to display the entire LDT ( using 'DL' ), and to look for the gap between 'low numbered' and 'high numbered' selectors. 

If the address is private, there will likely be many processes that define the address, and the data is likely different for each. You 
will need to find which process is the one you want. 

The dump formatter command '.I' will show you not only the handle of the module table entry for the executable which caused this process 
to exist, but also will show you the handle of the 'PTDA', which is the key control block for a process. 

The command usually used to identify storage is the '.M' command. 

If issued with a shared address, the output has the handle of the module table entry. If issued for a private address, you get a set of output 
lines for every process which contains the address. In this case, you will need to use the hPTDA, or PTDA handle from the '.I' command to 
determine which set of output lines to use. 

Once you have the handle of the module table entry, issue the command .LMO <handle>. 

The command will not only give you the full path name of the module, but will also format a table which has a column (toward the right) titled 
'sel'. This is the selector assigned. The first line of output is for the first segment in the link map, the second line is for the second segment, 
and so on. Thus, you can convert the selector:offset in the dump to a segment:offset in the correct link map. 


. i 

PROCESS slot : 23 Pid:0008 0rd:0001 

PTDA handle=032e address=%ad6d97f 0 

MTE handle=0363 address=%f f 666d4c (DEMO) 

SMTE address=%fel4abe8 

LDT handle=035c address=%ac6d7000 

CODE: user (cs : eip) #000f : OOOOOObe cbargs= 

STACKS: user (ss : esp) #001f : 000014be (active) 
ring2 (ss:esp >#0036:00001000 (bottom) 
ringO tcbf rame=%fe023f 58 bottom=%fe023f 9c 


M CS : IP 


*har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


Olf 5 

%f f 821bl8 00000010 %00010000 

lc9 

Olf 6 

Olf 3 

OOfa 

0000 

0131 

0000 

hptda=0240 

OOfa 

%ff 820586 00000010 %00010000 

ld9 

0102 

OOf 9 

0000 

0000 

0131 

0000 

hptda=01 17 

hob 

har hobnxt 

figs own 

hmte 

sown, 

. cnt 

It St 

xf 





0131 

Olf 5 0000 

0838 0132 

0132 

0000 

00 

00 00 

00 shared 

c : 

: pmshell . exe 

*har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0177 

%ff 821044 00000010 %00010000 

179 

0178 

0175 

0000 

0000 

Olbe 

0000 

hptda=01b9 

hob 

har hobnxt 

figs own 

hmte 

sown, 

. cnt 

It St 

xf 





Olbe 

0177 0000 

002c 01b9 

Olbf 

0000 

00 

00 00 

00 UNKNOWN 



*har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


Olf 5 

%f f 821bl8 00000010 %00010000 

lc9 

Olf 6 

Olf 3 

OOfa 

0000 

0131 

0000 

hptda=0240 

OOfa 

%ff 820586 00000010 %00010000 

ld9 

0102 

OOf 9 

0000 

0000 

0131 

0000 

hptda=0117 

hob 

har hobnxt 

figs own 

hmte 

sown, 

. cnt 

It St 

xf 





0131 

Olf 5 0000 

0838 0132 

0132 

0000 

00 

00 00 

00 shared 

c : 

: pmshell . exe 

*har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


02b5 

%f f 822b98 00000010 %00010000 

ld9 

02b6 

02b2 

0000 

0000 

0322 

0000 

hptda=031c 

hob 

har hobnxt 

figs own 

hmte 

sown, 

. cnt 

It St 

xf 





0322 

02b5 0000 

0838 0327 

0327 

0000 

00 

00 00 

00 shared 

c : 

: cmd . exe 

*har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


02e6 

%f f 822fce 00000010 %00010000 

ld9 

02e7 

02e5 

0000 

0000 

0362 

0000 

hptda=032e 

hob 

har hobnxt 

figs own 

hmte 

sown, 

. cnt 

It St 

xf 





0362 

02e6 0000 

0838 0363 

0363 

0000 

00 

00 00 

00 shared 

c : 

: demo 

. exe 


■LMO 363 

hmte=0363 pmte=%f f 666d4c mf lags=00803142 c:\pmg\pete\demol6\demo.exe 
seg sect psiz vsiz hob sel flags 

0001 0001 2e78 2e78 0362 OOOf 2d20 code shr rel 

0002 0000 0000 2910 0000 0017 OcOl data 

0003 0019 0937 1560 0000 OOlf OdOl data rel 


Start the dump formatter by typing DF_RET ..\DUMPS.162\DUMP01 .DMP 
Procedure: 

1. Enter the command '.I' 

The PDTA handle is , the module table entry handle is 



2. Enter the command '.M CS:IP' to identify Memory at CS:IP. 

Which 'har' line is for our process? har= 

What is the hmte value from this set of lines? hmte= 

Note: This is exactly what the M' command showed you, because this is what the .1 command does internally. 

3. Enter the command '.LMO followed by the hmte value. 

What is the full path name of the module that contains CS:IP? 


4. What is the segment number which has been assigned selector 000F? 

5. What address would you look for in the link map to find CS:IP? 


6. Now, repeat the same steps using the data in the next few displays. The address of interest is DFDF:9324 

7. What is the privilege level of this segment? 

8. What is its size? 

9. What is the command to identify memory at this address? 

Issue it. The lines which start hco= are context records, which indicate all of the contexts (processes) that can reference this address. It is 
extremely likely to be a shared address. 

10. Issue the ‘.LMO' command for the module table entry handle. 

1 1 . What module is this? Full path name is 

12. Which segment in the module contains this address? 

13. Therefore, in the .map file, the address will be : 


DG DFDF 
LOT 

dfdf Code Bas=lbfb0000 Lim=0000d4ef DPL=2 P 


.M DFDF : 9324 
*har par cpg 

00b7 %f f 81f f c4 000000 
hob har hobnxt figs 
00c5 00b7 0000 0838 

hco=026c pco=ffe62c37 
hco=0184 pco=ffe627af 
hco=0014 pco=ffe6207f 
hco=0089 pco=ffe622c8 
hco=0021 pco=ffe620c0 


va fig next prev 
0 %lbfb0000 3d9 0075 00b8 
own hmte sown,cnt It st 
OObf OObf 0000 00 00 00 

hconext=00184 hptda=032e 
hconext=00014 hptda=031c 
hconext=00089 hptda=0240 
hconext=00021 hptda=01b9 
hconext=00000 hptda=0117 


RE C 

A 


link 

hash hob 

hal 

0000 

00b4 00c5 

0000 hco=0026c 

xf 

00 shared c: 

: doscalll . dll 

f = 1 c 

pid= 


o 

i — i 

ii 

pid= 


o 

i — i 

ll 

pid= 


o 

i — i 

ii 

pid= 


o 

i — i 

ll 

pid= 



.LMO BF 


hmte= 

=00bf pmte 

:=%ff66ef3c mflags= 

=04 98b594 

c:\os2\dll\doscalll 

. .dll 




ob j 

vsize 

vbase 

flags 

ipagemap 

cpagemap 

hob 

sel 






0001 

00000360 

lbf 80000 

80009025 

00000001 

00000001 

00c8 

df c6 

r-x 

shr 

alias 

iopl 


0002 

0000aa30 

lbf 90000 

80002025 

00000002 

0000000b 

00c7 

dfcf 

r-x 

shr 

big 



0003 

0000d519 

lbfaOOOO 

8000d025 

OOOOOOOd 

OOOOOOOe 

00c6 

dfd6 

r-x 

shr 

alias 

conf 

iopl 

0004 

0000d4f 0 

lbfbOOOO 

8000d025 

0000001b 

OOOOOOOe 

00c5 

dfde 

r-x 

shr 

alias 

conf 

iopl 

0005 

00001140 

13f 90000 

80001023 

00000029 

00000002 

00c4 

9fcf 

rw- 

shr 

alias 



0006 

OOOOlaf 0 

13fa0000 

80001003 

0000002b 

00000002 

0000 

9fd7 

rw- 

alias 



0007 

00000e44 

13fb0000 

80001023 

0000002d 

00000001 

00c2 

9fdf 

rw- 

shr 

alias 



0008 

00000550 

13f C0000 

80001003 

0000002e 

00000001 

0000 

9fe7 

rw- 

alias 



0009 

00001000 

13fd0000 

80001023 

0000002f 

00000000 

OOcO 

9fef 

rw- 

shr 

alias 



000a 

00001000 

13fe0000 

80001023 

0000002f 

00000000 

OObe 

9f f 7 

rw- 

shr 

alias 




Steps to Diagnose a Trap 



The intent of the following material is to illustrate a proven method for finding the cause of a trap in an application program. By first learning 
how to solve the simplest problems, one will have a much better basis for approaching more difficult problems. Historically, problem solving 
skills have been largely self-taught. Much can be learned by observing others solve problems. Many problems can be solved quickly by 
using significant short-cuts and assumptions and then verifying them. When a novice observes an experienced diagnostician, the activities 
are difficult to understand, and may lead to the opinion that each problem has its own special method for solution, which in turn leads to 
questions about when to use which method. 

The following process will lead you to the cause of a trap. 

Remember to take notes as you proceed. This will help if you are interrupted, and want to continue later, or if you need to explain to 
someone else what you found, and what facts led you to a particular analysis of the situation. You can obviously do this manually, but you 
can use a log file more easily. Just type ?' followed by whatever you wish to log. The tools will evaluate the string, supplying the trailing 
quote, and show you the string, thus adding your thoughts to the log. 

1 . Locate the failing instruction. 

If you cannot do this, you have no place to start. Most operating systems will provide at least an excellent clue to the location of the failing 
instruction, if not its exact address. 

2. Determine why the failing instruction will not execute. 

A knowlege of hardware operation, or a reference manual kept handy, is essential for this step. At the very worst, each of the possible 
exceptions described in the manual can be eliminated one by one until the cause is found. 

Until you know why the instruction will not execute, you do not know what went wrong at the machine level. Conversely, as soon as you do 
know, you are prepared to begin the diagnosis of how things got into such a state. Observe that this does not require knowlege of C, 
FORTRAN, COBOL, SMALLTALK, etc. It requires only hardware knowlege. 

3. Analyse how the conditions for failure occurred. It may be that an address calculation was done incorrectly, or that the failure 
was due to an invalid parameter. If the former, you now need only to discover what program has done this, and where in that 
program the error occurred. Skip the next two steps. 

4. If an invalid parameter has been received, you must now update your notion of the cause of the problem. You need to consider 
the call as the location of the failure, and the specific parameter value as the reason why the called routine did not execute. 

5. You must now analyse how the parameter was created, and where it came from. Unwind one stack frame, and return to step 3. 

6. You now know what caused the problem, and now it is time to identify the failing program, locate the failing line, find the value of 
the program's variables, and, in general, collect all the data the programmer would have had if the failure had occurred at his 
desk. This step is usually a mechanical one. 

Once this is done, go find the programmer, and turn over all you know about the problem. Be prepared to continue helping, or to show the 
programmer how to get additional information. 


The OS/2 System Trace 


The System Trace facility is used to record a sequence of system events, function calls, or data in a fixed-size circular buffer as 
requested by calls to its API's. The buffer must be allocated during the processing of CONFIG.SYS. 

If you have a TRACEBUF statement in CONFIG.SYS, a trace buffer is allocated, allowing you to use the TRACE command 
successfully later. 

If any valid TRACE statements are in CONFIG.SYS (including TRACE=OFF), a trace buffer will be allocated for the default size 
of 4K, if TRACEBUF is not specified. This means that the statement TRACE=OFF will actually enable system tracing, which 
seems counter-intuitive to many people. 

If you do not specify TRACE or TRACEBUF statements in CONFIG.SYS, OS/2 does not allocate a trace buffer and system 
tracing is disabled. 

After the trace data is recorded, the trace formatter is used to retrieve the data from the system trace buffer and present it on 
your display, and optionally, to print it, or save it in a file. 



TRACEBUF and TRACEFMT 


TRACEBUF=x 

TRACEBUF sets the size of the trace buffer in the CONFIG.SYS file. 

The parameter Y specifies a circular trace buffer size of up to 63K. If you have a TRACEBUF statement without a TRACE statement in 
CONFIG.SYS, the trace buffer size requested is specified and tracing is turned off (the same as if you specify TRACE=OFF). 

If you need to use the System Trace facility, use the largest size, if possible. TRACEBUF=63 

TRACEFMT displays formatted trace records in reverse time-stamp order. It is intended to be used to format the trace data so that you can 
analyse the content of the trace buffer. The most recent entry is displayed first. TRACEFMT numbers each event as it is formatted. The 
event numbers are unrelated to the trace data, and are useful when discussing a trace with someone else, for easy reference to events. 

TRACEFMT works without a filename only if you have a trace buffer defined in the running system. 

TRACEFMT works with a filename only if the file is a hex image of a trace buffer from a system for which you have Trace Formatting Files. If 
the .TFF file is not correct, the entries which are different will be formatted incorrectly with little or no indication of an error. 

The file is typically created by the dump formatter by using the command '.TS filename 1 , but TRACEFMT will also save the trace buffer in 
unformatted form. This is much smaller than the formatted form. 


TRACE and TRACE Processing 


The trace command is used to control the system trace. 


Command line: 


CONFIG.SYS: 


TRACE ON 
TRACE OFF 

(you can specify only static TRACE in the 


TRACE=ON 
TRACE=OFF 
CONFIG.SYS file) . 


The above is optionally followed by one or more major code specifications, or one or more trace definition file specifications, or keywords. 
Next, you may optionally specify one or more process identifiers. Finally, you may specify that the trace buffer be cleared, and that trace 
activity be suspended, or resumed. 

OS/2 processes TRACE statements in the order in which they appear from any source. TRACE commands in CONFIG.SYS are processed 
in the order they appear. The effects of the statements are cumulative for the duration of OS/2's execution. If any part of a statement is 
incorrect, OS/2 ignores the statement. 

Process Id is specified by /P:nn,nn,nn (where nn is in FHEX!) 

Clearing the trace buffer is specified by using 1C. 

Resuming trace activity is specified by using /R. 

Suspending trace activity is specified by using /S. 

Major and minor event codes are associated with all trace events. Some of the major codes follow: 

Machine Exceptions Major Code: 3 
Plardware Interrupts Major Code: 4 

Device FHelper Routines Major Code: 6 
Disk Device Driver Major Code: 7 

Major codes may be specified by listing them separated by commas, or as a range, for example, 2-7 specifies codes 2, 3, 4, 5, 6, 7. Both 
methods may be combined, as in 5,7,12-18,2,27-32,9 



If you do not specify TRACE in CONFIG.SYS, event tracing is not started by CONFIG.SYS processing, but may be started later if 
TRACEBUF has been specified. 

Records in the buffer are identified by major and minor codes. Some of the data that may be recorded in the circular buffer includes system 
events such as interrupts, exceptions, and thread switches. 

OS/2 contains a mixture of static tracepoints and dynamic tracepoints. 

Static tracepoints are implemented as trace function calls within individual software modules. The TRACE command can be used to turn on 
and off static tracepoints by specifying them by major code and, optionally, by minor code. 

Dynamic tracepoints are implemented by implanting an INT 3 instruction at the specified location, and gathering data when the interrupt 
occurs. The TRACE command can be used to turn on and off dynmaic tracepoints, but only by specifying the module or trace definition file 
name as a parameterr. Dynamic tracepoints cannot be turnned on and off by reference to their major codes. 


TRACEFMT Processing 

When the trace is complete, you can use the trace formatter (TRACEFMT) to format the data into a report. This helps you to isolate causes 
of problems in the OS/2 system by making the data in the trace buffer available for analysis. 


Static & Dynamic Trace, and Files Used 


Trace Format Files (.TFF) & Trace Definition Files (.TDF) 

Static tracing occurs when a program developer has coded an API call to the system trace interface, which means you cannot specify at 
what point in the program flow tracing occurs, nor can you control what data is collected. 

Trace Format Files are used by TRACEFMT. They specify how the trace data should be formatted. The filename implies which major code 
is described, and TRACEFMT generates the filename for the .TFF file from the major code of the event about to be formatted. If no 
description is found, or if the description does not describe all of the trace entry, TRACEFMT defaults to hexadecimal bytes for a default 
formatting. This will be covered in detail by hands-on exercises. 

Trace Definition Files are used for dynamic tracing, and specifying one of them requires you to name the .DLL involved, or KERNEL. You 
may optionally a type or list of types and a group or list of groups. The .TDF file is used by TRACE to define where to collect data, and what 
data to collect. 

Dynamic tracing occurs when trace definition files ( .TDF ) are used by the TRACE command. The implementation is that OS/2 inserts 
actual breakpoint instructions at the specified locations, and collects the data specified when the breakpoint is executed. There is no 
overhead for dynamic tracing when it is not in use, and a technician can be very creative when defining where to collect trace data, and what 
data to collect. We will create custom dynamic trace entries during hands-on exercises. 

The OS/2 static tracepoints do not have associated TDF files, but may have associated TFF files that are used by the TRACEFMT. 


Dynamic Trace Processing 


Dynamic tracepoints are implemented as Trace Definition File (TDF) entries. The TRACE command can be used to insert (and turn on) a 
dynamic tracepoint by patching it into its corresponding software module. Dynamic tracepoints are specified by the dynamic link library (DLL) 
filename and minor code. 

Individual dynamic tracepoints can be qualified by separate type and group qualifiers. These qualifiers exist so that you can more easily turn 
on and off sets of related dynamic tracepoints. For example, all the dynamic tracepoints that are associated with pre-invocation events might 
have a type of PRE. Similarly, all the dynamic tracepoints that are involved in semaphore processing might have a group of SEM. In the 
TRACE command syntax, group is considered to have a stronger binding than type. This means that you can ask to turn on all events that 
are of a specified group that are also of one or more specified types. You do not need to use these qualifiers; they are there simply to make 
it easier to control related sets of dynamic tracepoints. 


TDF files are typically found in the \OS2\SYSTEM\TRACE directory. They are identified by .TDF file name extensions. There are also Trace 



Formatting Files (TFF) found within that directory. These files are used by the OS/2 Trace Formatter (TRACEFMT) utility to format the 
entries that are logged within the system trace buffer. 


Commonly Used Abbreviations for OS/2 Groups and Types 


Groups 

FS- file system 

KBD- keyboard I/O 

LDR- resource loader 

LNK- environment management 

MOU- mouse I/O 

MSG- message management 

MSP- virtual memory management 

NLS- national language support 

PIP- pipe support 

SEL- selector-related 

SEM- semaphore support 

SIG- signal handling 

TIM- timer support 

TK - task management 

TSK- monitor support 

VIO- video I/O 

VM - virtual memory management 


Types 

API- application programming interface 
INT- internal 

PRE - pre-processing invocation 
POST- post-processing invocation 


OS/2 Predefined Dynamic Trace Events 


The file SYSTEM. TDF file supports dynamic tracing for the following: 

TRACE ON KERNEL Major Code: 5 (decimal) 5 (hex) 

Groups: FS, LDR, NLS, PIP, SEL, SEM, SIG, TIM, TK, VM 
Types: PRE, POST, API, INT 

Purpose: Tracepoint definitions for APIs in the OS/2 kernel 

TRACE ON DOSCALL1 Major Code: 16 (decimal) 10 (hex) 

Groups: FS, LDR, LNK, MSG, MSP, NLS, SEM, TSK 
Types: PRE, POST, API 

Purpose: Tracepoint definitions for APIs in DOSCALLl.DLL 

TRACE ON MONCALLS Major Code: 16 (decimal) 10 (hex) 

Groups: TSK 
Types: PRE, POST, API 

Purpose: Tracepoint definitions for APIs in MONCALLS.DLL 

TRACE ON QUECALLS Major Code: 22 (decimal) 16 (hex) 

Groups : None 

Types: API, PRE, POST, INT 

Purpose: Tracepoint definitions for APIs in QUECALLS.DLL 

TRACE ON SESMGR Major Code: 23 (decimal) 17 (hex) 

Groups : None 
Types: API, PRE, POST 

Purpose: Tracepoint definitions for APIs in SESMGR.DLL 

TRACE ON OS 2 CHAR Major Code: 24 (decimal) 18 (hex) 

Groups: KBD, MOU, VIO 
Types: API, PRE, POST 

Purpose: Tracepoint definitions for APIs in OS2CHAR.DLL 

TRACE ON PMSHAPI Major Code: 192 (decimal) CO (hex) 

Groups : None 
Types: None 

Purpose: Tracepoint definitions for APIs in PMSHAPI.DLL 

TRACE ON PMWIN Major Code: 194 (decimal) C2 (hex) 

Groups : None 
Types: None 

Purpose: Tracepoint definitions for APIs in PMWIN.DLL 


TRACE ON PMGRE 


Major Code: 195 (decimal) C3 (hex) 



Groups : None 
Types: None 

Purpose: Tracepoint definitions for APIs in PMGRE.DLL 


TRACE ON PMGPI Major Code: 197 (decimal) C5 (hex) 

Groups : None 
Types: None 

Purpose: Tracepoint definitions for APIs in PMGPI.DLL 
The file SYSTEM. TFF file provides formatting information for OS/2 events. 


Steps to Diagnose a Hang 

Problems which are called 'hangs' fall into several categories. 

The term 'hang' has come into use because there is frequently no way for a user of OS/2 to determine whether the problem is a loop or a 
wait. The term 'hang' is used in a generic way to mean 'the system does not respond as I expect', or 'I am unable to interact with the 
system’. The problem may be a loop, or it may be a wait. 

Diagnosing any 'hang' will likely be much quicker if the system trace was used to collect appropriate data related to the symptoms. 


Steps to Diagnose a Wait 


Waits are recognized by the fact that no thread is ready. If the scope of the problem is a single application, we need only find out which 
thread is expected to run, and then analyse why it will not. If we cannot find out which thread we expect to run, we will need to do the 
analysis for each thread in the process, which will take somewhat more effort. Frequently, the application can be removed by using the 
window list to end it. If this has been attempted, and has not worked, one must find out why thread 1 will not execute. 

If the scope of the problem is the user interface, one needs to examine it, as discussed above. The workplace shell is discussed elsewhere; 
remember that from the kernel's viewpoint, it is 'just another application'. This used to be a much more common symptom than in relatively 
current releases. It was typically noticed on a LAN server, when requesters received normal service responses, but the system administrator 
could not use the keyboard or mouse. 

Frequently, if you haven't a well defined place to start, it works reasonably often to look at the blocking data for all threads, and to choose a 
resource which is needed by many threads. Pragmatically, if that resource could be made available, many threads would unblock. 

Therefore, choose one of the more 'popular' block ID's, and proceed to find out what thread owns it, why that thread will not run, and so on. 
You may need to do this for only one or two resources before you discover the key thread, and can focus your efforts on it. 

If the scope of the problem is that OS/2 refuses to run any thread, the problem must be extremely basic, for example, the drive containing 
SWAPPER.DAT is no longer available due to a hardware problem, or the system has actually terminated, but has been unable to display 
that fact. 


Steps to Diagnose a Loop 


Loops are also relatively easy to recognize. When one inspects the collective status of all threads in the system, one thread will be in 'run' 
status, (if an SMP, one on each processor) and it is likely that many more threads are ready. If the priority of the thread is normal, an 
application may loop for a long time without the user being aware of the loop, although system performance may suffer somewhat. 

To analyse a loop, follow one iteration of it. This is much easier to do with an interactive debugger than it is in a dump. 

If the priority of the 'run'ning is in the time-critical class, the dispatcher is designed to prevent OS/2 from dispatching other threads. The 
looping thread is the cause of the problem, unless the loop is the correct response to another problem. In this case, contact the developer to 
find out why the thread must be such a high priority, and while you are talking, ask what could cause it to enter a non-ending loop. To 
diagnose a loop, use an interactive debugger to step through the loop, and try to understand what each conditional jump is really trying to 
accomplish. You can use an interactive debugger to lower the priority of an offending thread, and 'observe the results'. Recognise that this is 
quite legitimate, but that the application's integrity may actually depend on the behaviour you have just altered. 



Serialization and Priorities in OS/2 


This section describes the various ways to serialize access to resources, which is often required in a pre-emptive multitasking environment. 


Brute Force Serialization 


There are several serialization methods which attempt unilateral control over the dispatcher. Each has it own advantages and 
disadvantages. They will each be explained here before going on to semaphores, which are much more granular, and therefore less 
intrusive than these serialization methods. 


Uniprocessor Method - Disable Interrupts 


There is a way for privileged code to guarantee serialization in a single-processor environment, namely to disable interrupts during the 
actual inspection and update of the protected resource, and then to enable interrupts promptly. The overhead of this method is practically nil, 
but it is potentially dangerous because it disables pre-emption, which reduces the responsiveness of the system to the user. It also 
represents a barrier to running successfully on a multiprocessor, because all other processors are unaffected by this, and it therefore 
requires the developer to re-examine parts of a program which are no longer serialized, but may well be thought to be properly serialized. 


Multiprocessor Methods - Spin Locks 


In a multiprocessor environment, there are additional problems, namely how to control the additional processors, which may be executing 
exactly the same instruction at the same cycle. The solution to successfully serializing access to critical structures is solved by using a 
special instruction prefix, LOCK, which guarantees that all accesses to memory for the following instruction occur as a unit, with no 
intervening cycles by other processors, DMA devices, or bus masters. 

Instructions such as: 

Increment(INC), Decrement(DEC), Add(ADD.ADC), Subtract(SUB,SBB), 

Logical operations, (AND,OR,XOR,NOT,NEG), 

Exchange(XCHG), Exchange&Add(XADD), Compare&Exchange(CMPXCHG) 

can be used to claim a resource, add a node to a linked list, and perform other atomic events which normally require serialization, like 
selecting a ready thread to run. 

Note: The 486 and following processors assert the hardware signal 'lock' for XCHG, XADD and CMPXCHG instructions if an operand is in 
memory, regardless of a prefix. 


Each processor will use the appropriate method to attempt its task, and if the condition code does not indicate success, it will simply retry 
the operation until it does complete. This is called a 'spin loop', and this method of serialization is called a 'spin lock'. It is used when it is 
expected to be able to access the lock in less time than it will take to save the current context and find another thread to run. 

One should not expect to discover the presence of spin locks in a non-multiprocessor environment, because they should always be 
available, and the spinning should never occur. 


DosEnterCriticalSection & DosExitCriticalSection 



These API's will serialize all threads in a process. They have no effect on threads in other processes. At the time control returns from 
DosEnterCriticalSection, no other thread in the process is allowed to execute (there is an exception to this which is when is signal is sent to 
a process). Looking at the threads' status, one may see 'crt'. This is NOT the thread that entered critical section. Threads in the 'crt' state are 
ready to run but are temporarily held because of the existence of the thread in critical section. The critical section thread may block, but is 
the only thread in that process which is allowed to run. Only when that thread issues the DosExitCriticalSection are the other threads 
released, and again allowed to compete for use of the processor. This is really too much serialization for most situations, because it 
temporarily disables multithreading in the process, regardless of the other threads' design, or current actual processing. 


DosSuspendThread & DosResumeThread 


Some applications are designed such that there is a limited number of threads which will access some shared resource, and others never 
will. 

To access a resource in a protected way, one can simply suspend the other threads which represent a possibility of simultaneous update, 
and leave the remaining threads alone. This is therefore less intrusive than the critical section API's, but still may affect threads which do not 
represent a threat at this instant, due to other processing, timing, and so on. 

DosSuspendThread API will cause a specific thread to no longer compete for the processor, until DosResumeThread is issued. A thread in 
this situation will have the status of 'frz'. It may not be possible, without an appropriate trace, to find out which thread suspended another. 


Semaphores 


The least intrusive way to guarantee serial access to a shared resource is to associate a semaphore with it, and to acquire ownership of the 
semaphore before accessing the resource. The application threads will be suspended only when there is actual contention for the resource. 

This does require all of the programmers involved to be careful to request the semaphore before accessing the resource, and to remember 
to free it when done. The classic solution to this is to build a low-level function which includes the serialization. 

Semaphores are of three categories: 

1 . Kernel Semaphores, or KSEMS. 

KSEMS will be discussed later, because we will focus first on items available to the application programmer. 

2. 16-bit semaphores. 

There are two basic kinds of 16-bit semaphores, and an add-on structure which makes a third type by aggregation. 

They are the System Semaphore, the RamSem, and the FastSafe RamSem, which is an accounting structure prefixed onto a RamSem. 

3. 32-bit semaphores. 

There are two types of 32-bit semaphores, Mutual Exclusion, or MutEx and Event Semaphores. It is also possible to wait on a list of 
EventSems or MutexSems, but all semaphores in a list must be of the same type. 


16-bit Semaphores 


There are three types of 16-bit semaphores, namely system, RAM, and fast-safe RAM semaphores. There are compromises 
involved in using each. 

System Semaphores 


These are the most robust of the three, and have the most overhead. 



One thread must create the semaphore, with DosCreateSem, which has a name in a format similar to a file name, but in root directory 
'SEM'. Other threads must open it with DosOpenSem to get its handle. 


Use is to issue DosSemRequest, use the resource, and then to issue DosSemClear so that other threads can access the resource. All 
threads should issue DosCloseSem before ending. 

If a thread ends while owning a system semaphore, the first requestor is given a return code that indicates the situation, so that it is warned 
of a possibly incomplete update, and may take whatever action is necessary to recover, or terminate. 

To find out which thread owns a system semaphore, display a word at the address provided in the blocking data. The address will be a 
logical address using a GDT selector, generally 400:xxxx. The 12 low order bits are the slot number of the thread which owns the 
semaphore. If unowned, the value is zero. 

RAM Semaphores (RamSems) 

At the opposite end of the scale is the extremely fast RamSem. Most of the speed comes from the following facts: 

API's use the address of the RamSem as the handle. 

OS/2 assumes a RamSem is local to a process. 

OS/2 does absolutely no accounting for a RamSem. 

OS/2 can not provide any recovery for a RamSem. 

A RamSem is owned by a user thread if the first byte is hex 'FF', otherwise it is not owned by a user thread. Unless you have a trace, there 
is no way to determine which thread owns a RamSem. 

Fast-Safe RAM Semaphores (FSRamSems) 

The FSRamSem is a compromise between the two earlier types. 

The FSRamSem is nothing more than a structure which includes a RamSem. The fields of the structure record the process ID (PID) and 
thread ID (TID) of the thread which owns the semaphore, or zero if unowned. They also include a use count, which is incremented if the 
owning thread again requests the semaphore. This allows recursive functions to serialize without being blocked, waiting for a resource the 
thread already owns. 

The DosFSRamSemRequest API is used to request the semaphore. It returns when the resource is owned by the thread. 

The DosFSRamSemClear API is used to release the semaphore. If the use count is not zero after being decremented, the semaphore is 
NOT released. There must be as many 'Clear' as 'Request' API calls to actually release the semaphore, and allow other threads to compete 
for it. 


32-bit Semaphores 


There are two classes of 32-bit semaphores, private and shared. There are three types of semaphore in each class, Event, 
MUTual Exclusion, and multiple wait semaphores. 

MUTEX semaphores correspond to one of the most common uses of the 16-bit semaphores, namely to allow competing threads 
to mutually exclude others from accessing a shared resource. 

A MUTEX semaphore includes the slot number of its owner, if owned, or zero if unowned. 

An EVENT semaphore contains a 'post count' which is incremented each time it is POSTED, and decremented each time a 
WAIT for it is completed successfully. This type provides a way to insure that some processing occurs exactly once for each 
POST. 

A multiple wait semaphore is nothing more than a list of semaphores, of the same type. A thread may wait on either 'ANY' or 
'ALL' of the semaphores in the list. 

All Semaphores must first be created with DosCreate???Sem, where '???' is the semaphore type. Other processes must open 
them with DosOpen???Sem to have access to them. Private semaphores have a null pointer to their name, and thus no name. 
Public ones have a name in the same format as that used for the 1 6-bit semaphores. DosClose???Sem is used when a thread is 
through using it. 



DosRequestMutexSem and DosReleaseMutexSem are used to access the mutual exclusion semaphores. 

DosPostEventSem and DosWaitEventSem are used to access an event semaphore. DosResetEventSem will allow immediate 
access, and return the post count, which is cleared by this API. 

DosQuery???Sem will allow the retrieval of information about each type of semaphore. 

DosAddMuxWaitSem and DosDeleteMuxWaitSem are used to add and delete semaphores from a multiple wait semaphore list, 
respectively. 


Dispatching Priorities 


This section describes how the priority of a thread is set, and defines what the classes mean for debugging. 


The Dispatcher, Priorities, and Dispatching Classes 


The dispatcher's task is to give control to the proper thread. The definition of 'proper' thread can be difficult to state. My approach to this 
problem is to state the obvious cases, and then to focus on what is left. In a sense, this discussion parallels the logic in the dispatcher. 

1. Idle Class. 

No other class will be pre-empted in order to run an idle class thread. The notion of starved, and the MAXWAIT parameter do NOT apply to 
Idle Class threads. OS/2 by design will not execute a ready Idle Class thread as long as threads in other classes are ready. 

2. Regular Class. 

Most threads are expected to be in this class. All dispatching options and parameters apply to scheduling this thread. 

3. Time-Critical Class. 

As long as any thread in this class is ready, OS/2 will give control to it. By design, this may prevent threads in other classes from running. 
You cannot use priority as a serialization method. 

For example, a page fault will result in temporarily blocking this priority thread. 

4. Fixed-High, or Server Class. 

The threads in this class are at a somewhat higher priority than those in the regular class which do not have the focus, but below 
time-critical. 

Note: The numbers above are what the programmer specifies in DosSetPriority, or the 1 6-bit API DosSetPrty, and are what is 
returned by DosGetPriority. OS/2 processes these class numbers to create an internal dispatching priority. There are 32 priority 
levels in each class, which range from 00 to 1 F. The priority levels, or deltas, stay the same as the programmer specified initially, 
if PRIORITY=ABSOLUTE is specified. 

The internal priorities have a range from 01 to 08, with 01 usually used for idle-class threads, and 08 usually used for time-critical 
threads. If PRIORITY=DYNAMIC was specified or defaulted, there are priority boosts given for the following reasons: 

Being the foreground process; and for owning the keyboard; 

Yielding the processor before the end of the time slice 
10 completion 

Being 'starved', that is, ready status and not dispatched for MAXWAIT seconds. 

Dispatching is the process of finding the correct ready thread, and then giving control to it. Within each class, the priority delta is 
used to choose which thread should have control. When several ready threads have the same priority, control is given in turn to 
each of them, based on the TIMESLICE parameter. The minimum value of this parameter is the duration of the priority boosts 
which may be applied. The maximum value is the longest a thread can execute before being pre-empted for other threads which 
have the same internal dispatching priority. 

As long as a group of threads at some priority use all the processor, control is not given to lower priority threads. What happens 
is that the other waiting threads become 'starved' after MAXWAIT seconds have elapsed, and their priority increases until they 
receive at least a minimum timeslice. 



Idle-class threads are never starved, and so will not receive this boost. 

Note: 


When running in the kernel and device drivers, pre-emption can not occur. Threads must explicitly give up their time-slice 
to give other threads an opportunity to run. 


How to Display Dispatching Priority 


Use the '.p' command on the slot of interest, and find the pTCB, which is the linear address of the Thread Control Block. 
For slot F, below, we see the following FOR .p output: 


★ 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

000c 

0005 

0000 

0005 

0001 

blk 

0200 

7cf7f 000 

7dl858a4 

7dl 6a0d8 

leb8 

00 

pgma 

0008 

0005 

0000 

0005 

0002 

blk 

081f 

7cf77000 

7dl858a4 

7dl 6 9a2 8 

lea8 

00 

pgma 

OOOe 

0005 

0000 

0005 

0003 

blk 

021f 

7cf 83000 

7dl858a4 

7dl6a430 

lea8 

00 

pgma 

OOOf 

0005 

0000 

0005 

0004 

blk 

061f 

7cf 85000 

7dl858a4 

7dl6a5dc 

lea8 

00 

pgma 

0010 

0005 

0000 

0005 

0005 

blk 

0200 

7cf87000 

7dl858a4 

7dl6a788 


00 

pgma 

OOOd 

0006 

0000 

0006 

0001 

blk 

0200 

7cf 81000 

7dl860d0 

7dl 6a2 84 

leb8 

00 

pgmb 

000a 

0006 

0000 

0006 

0002 

blk 

021f 

7cf7b000 

7dl860d0 

7dl69d80 

leb8 

00 

pgmb 

0013 

0006 

0000 

0006 

0003 

blk 

0800 

7cf 8d000 

7dl860d0 

7dl6ac8c 

leb8 

00 

pgmb 


DB %7D1 6A5DC+1 64 L 6 would show ( for slot f ) 

SEE CAUTION, BELOW 
%7D16A740 02 IF xx xx IF 06 

class / / the word value 061F 

level / actually used by the dispatcher 


CAUTION: the offset used is correct for WARP CONNECT, but the addresses are what were used in OS/2 2.1 1 , so this is a somewhat 
mixed example. Any offset in any control block may change any time a fix or new version is installed. Please refer to the Thread Control 
Block in the System Diagnostic Reference for offsets relating to other versions. 

The first byte is the programmer's priority class, ranging from 1 to 4. The second byte is the level within the class, ranging from 00 to 1 F. The 
third and fourth bytes are not useful. The fifth and sixth bytes are OS/2's computed dispatching priority. This field is a word, so the high order 
part is byte 6. 

081 F is the highest possible value. 

01 00 is the lowest possible value. 

On a uniprocessor, using DosSetPriority to make yourself time-critical at the highest delta value would give you an extremely good chance 
of not being pre-empted, and was occasionally misused for serialization. This will never work on a multiprocessor, and is risky even on a 
uniprocessor, because a page fault will cause you to lose control while the page is processed, just as doing I/O to a file will cause a thread 
to block if access to the actual device is required. 


The Status of a Thread 

A thread can be in one of several states. The following list is an attempt to list all the possible states, and to briefly discuss each, 
run This thread is currently executing. 

rdy This thread would like to run, but higher priority thread(s) are executing, which prevents this thread from running, 

blk This thread is blocked. Use the ’.pb' command to find out what resource (block id) it is blocked on (waiting for), 

crt This thread cannot be run because another thread in this process is currently in a critical section. 

This thread is frozen, that is, some other thread has called the API DosSuspendThread and passed the ID of this 


frz 


thread. This thread cannot execute until some thread issues DosResumeThread to inform OS/2 that this thread is 
once again eligible to be dispatched. There is no way to discover what thread suspended it. 


A Form to Use For Unwinding Stacks 


Frame Caller's Return Parameters 

at Frame Offset Selector 


Advanced Guide to Flang Analysis 


What is a hang ? 



It's an external symptom or a user perception that little or no work is being done. It could be a case of extremely poor performance. The 
hang symptom categorises itself into three distinct cases: 

Wait 

Threads and processes are not being dispatched by the Operatin System. Thread status gives the initial clue. Use of 
the .P command determines status. 

Blocking 

Threads may wait voluntarily for a resource or an event, in which case they will 
probably be Blocked. They might poll for the resource, in which cases they will 
cycle through blocking, being ready and running until the resource becomes 
available. 

A notoriously problematic case of Blocking is the deadlock. This is where two 
threads are each own exclusively a resource and block waiting for ownership of 
the other's resource. 

Suspension 

Another thread may have deliberately debarred a thread from being scheduled, in 
which case we will see the waiting thread in a crt or frz state. 

Pre-emption 

Another thread monopolises the system. Typically the hanging threads will be 
ready for dispatch (rdy), but will never or rarely receive a minimum time-slice. We 
look for running and ready threads with an excessively high priority. The .P will 
give the calculated priority of each thread. 

Disabled wait 

Looks rather like a H/W Freeze. Last instruction executed was a HLT having 
sometime previously disabled interrupts using CLI. This usually happens only 
when ring 0 code detects an terminal condition. One would hope that some form of 
diagnostic information had been displayed prior to this particularly if NMIs have 
been disabled also! If NMIs have not been disabled then an artificially generated 
channel check may be used to cause an NMI, which would allow one to break into 
the kernel debugger. Flowever the KDB to allows only one NMI channel check per 
boot. If NMIs are disabled then Fl/W analysis techniques may be the only 
recourse. 


Loop 

A thread is running more or less permanently. It's state will mostly be rdy or run. Similar analysis techniques to trap 
apply here. We examine the registers of the running thread by using .R. From the we can determine in which module 
the thread is running by looking at the owner of the executing code segment. If necessary we unwind the stack and 
determine the caller etc.. Analysis is very similar to trap analysis. 


Fl/W Freeze. 

The processor fetch-execute cycle has been suspended. Not even an NMI interrupt will resume instruction fetch. This 
is almost certainly a hardware problem. Timing/clocking problems caused by incompatible cards, overloaded busses, 
incorrect bus terminations, faulty processor or controller chips. Use Fl/W techniques such an ICE machine or Logic 
Analyser. 

The following Theory Topics are now covered in detail: 

■ The Wait Condition - Diagnostic Techniques 

This is further subdivided into two topics of discussion: 

Memory Management and Ownership Topics 
Thread Scheduling and Dispatching 
• Program Design Issues and Weaknesses 

The final section of this Guide is a collection of Worked Examples that explore memory management, the File System, Presentation 
Manager and Ring 0 Loops From a Dump. 


The Wait Condition - Diagnostic Techniques 


In most problem analyses the question of memory ownership or use will arise. For example: 


To wh/ch modu/e does th/s instruction be/ong? 

Which process executed this modu/e? 

Who a/iocated this storage? 

Who passed these parameters? 

What contro/b/ock does this address point to ? 

In fact the frequency with which this question is asked makes it a fundamental aspect of analytical technique. 

For hang analysis this is no less true: 

In the case of loops, analysis proceeds in a similar manner to that of traps. 

In the case of waits, a key piece of information is the Blockld. In many cases this is an address of a system control block that 
relates closely to the reason for waiting. Discovery of the owner of storage pointed to by a Blockld is therefore of prime interest. 

We start by reviewing memory management in OS/2 and in particular memory ownership. 


Memory Management and Ownership Topics 

Memory allocation in a demand-paging virtual storage operating system such as OS/2 embodies the allocation of a number of system 
resources with certain attributes applied: 

Resources 

Virtual address space 

Real address space 

Auxiliary address space (SWAPPER) 

Attributes 

Exclusion (privacy) 

Inclusion (sharing) 

Owner (Where is was allocated from or who it was allocated to) 

Requestor (who made the request on behalf of the owner) 

Permissions (Read-only, Read/Write, Executable) 

Use of the resources and the attributes applied is tracked by the system in its VM control blocks. The most important of these are: 


VMAH 

The Virtual Memory Arena Header Record 

VMOB 

The Virtual Memory Object Record 

VMAR 

The Virtual Memory Arena Record 

VMCO 

The Virtual Memory Context Record 

PF 

The Page Frame Structure 

VP 

The Virtual Page Structure 


Virtual Address Space Arenas and Regions 


OS/2 partitions the 4G virtual address space into three types of arena: 


System 

Shared 

Private 

The system arena is common to all processes. It starts at the 51 2M boundary and occupies the address space up to 4G. Only system code 
(and device drivers) can access data in the system arena directly. User code must use APIs invoked by the call gate mechanism to access 
system arena code and data. Nearly all system arena data is global: that is, managed by a common set of page tables, whatever the current 
thread/process context. The exception to this is in the memory area mapped by selector 30. Page table entries are adjusted as part of 
context switching so that selector 30 addresses the current PTDA, TCB and TSD. 

The shared arena address range is common to all processes, but it comprises data that is both global and instance. Instance data occurs 
where a separate set of page table entries are used per context to map the same linear address range. 

Instance data is used when the same type of data needs to be allocated as multiple private copies to each process. An example of this 
would be a logical screen buffer. The shared arena starts initially at the 304M boundary and ends at 51 2M. User programs may access the 
shared arena. DLL code and data is located in the shared arena. DLL code segments are always global, but DLL data segments may be 
instance or global and are usually a mixture of both. 

The shared arena is further subdivided into a number of regions: 

Region Description 

Protected This region is reserved for protected data segments of protected DLLs. In General 16- 

and 32-bit applications do not have addressability above the 448Mb boundary. Potentially 
32-bit applications are able to modify all read/write global data, whether intended by the 
owning DLL or not. The Protected region is provided so that Protected DLLs can isolate 
their data from general access. Only Protected DLLs have addressability to the protected 
region by being assigned data selector 63. 

32-bit DLLs become protected through use of the protect option at compile time. 

16-bit DLLs may also use the protected region, if explicitly coded to do so and listed in 
CONFIG.SYS using: 

PROTECTl 6=dlll , d!12 , .... 


The Protected Region may be subsumed into the Based Region (see below) by coding in 
CONFIG.SYS the NOPROTECT option on the MEMMAN statement. 

The default is MEMMAN=PROTECT 

Note: 

From OS/2 Warp V3.0 fix pack 19 and OS/2 Warp V4.0, the Protected Regon has 
been absorbed into the Based Region. The system bahaves as if 

MEMMAN=NOPROTECT is in effect and MEMMAN=PROTECT has no effect. 

Based The Based Region is reserved for non-protected DLLs that have a preferential base 

address assigned by the linkage editor by using the BASE option. 

The purpose of the Based Region is to improve performance of module loading, by 
avoiding the need for the System Loader to do fix-up processing. 

Note: 

Under OS/2 2.x, MEMMAN=NOPROTECT would cause the Based and Packed 
Regions to move up 64M bytes - effectively giving another 64M bytes for general 
purpose use in the Shared Arena. 

Packed The Packed Region is reserved for 16-bit DLL code segments. Within the Packed Region 

the Compatibility Region Mapping Algorithm does not apply. Code segments are packed 
contiguously to make best use of physical pages. 

Potentially, tiny DLL code segments can deplete physical storage very rapidly if not 
packed. However, when packing is used there is no general algorithm that will convert 
16-bit addresses into 32-bit addresses within the Packed Region. The system has to scan 


the LDT, over the Packed Region, to make this conversion. 


Packing may be disabled by specifying the NOPACK option of the MEMMAN statement 
in CONFIG.SYS. The default is PACK. When packing is disabled up to 32M bytes is 
made available to the Global Shared Region. 

Notes: 


Under OS/2 2.x only MEMMAN=NOPACK would tend to reduce the Swapper 
Size where a great many 16-bit code segments are in use. This is because code 
segments outside the Packed Region are normally discardable (they are not 
swapped). Within the packed region they are swappable since a 4K page may 
contain code from a number of different modules. 

Under OS/2 2.x MEMMAN=NOPACK would provide up to 32M bytes extra 
virtual address space for general purpose use in the Shared Arena. 

Packing does not affect the availability of LDT selectors for allocations in the 
Packed Region, just the base linear address boundaries on which they are 
deployed. 

Packing should not be confused with either the LINK386 PACK option or the 
PACK.EXE utility. 

From OS/2 Warp V3.0 fix pack 19 and OS/2 Warp V4.0 the packed region has 
been reduced to 16Mb. 

Global Shared This region has a lower boundary at 320M bytes and includes the Packed, Based and 

Protected Regions. This is reserved for Global Read-Only allocations only. Since no 
Read/Write data is allocated in the Global Shared Region some page table economies 
are possible. Also process context switching performance is improved. 

Notes: 


The Global Shared Region is not configurable. 

The Global Shared Region is only implemented in OS/2 WARP version 3. 

Under OS/2 2.x Read/Write segments would be allocated in the Based Region. 

Read/Write Basing The Read/Write Basing region is the preferred region for locating Read/Write DLL data 

segments where a base address has been assigned to a DLL module by the linkage 
editor. The purpose of this region is to keep Read/Write segments out of the Global 
Shared Region and thus retain its performance advantages. It also places an upper 
bound on the location of dynamic shared allocations, namely the Minimum Read/Write 
Basing Region address. 

Notes: 


The Read/Write Basing Region is not defined in OS/2 versions prior to version 3. 

Based DLLs under OS/2 2.x, by preference, have their segments loaded 
sequentially starting with segment 1 at the base address. With the 
implementation of the Global Shared Region only Read-Only segments can be 
loaded sequentially from the base address. 

Expansion The Shared Arena is an expand-down arena, that is, allocation searches for free regions 

from the high addresses to low. The Shared Arena therefore expands from the minimum 
Read/Write Basing Region address towards the highest upper bound of all the Private 
Arenas. This area is the expansion region for both the Shared Arena and all the Private 
Arenas. 

The Shared Arena will not contract to an address higher than the minimum Read/Write 
Basing address. 

Note: 


The expansion region for OS/2 2.x is from the lower boundary of the Packed 
Region, if present. If not, then from the lower boundary of the Protected Region, if 
present. If both the Protected and Packed Regions are removed (using 
MEMMAN=NOPACK, NOPROTECT) then expansion occurs from the top of the 
Shared Arena. 


Each private arena occupies the lowest range of virtual address space from 0 - 64M bytes expanding up to a maximum of 304M bytes, the 
minimum Read/Write Basing address. None of the Private Arenas will be allowed to expand beyond the lowest allocation in the Shared 
Arena, that is Private and Shared Arenas may not overlap. 

In general each process uses a separate set of page table entries to map each page of its private arena. Thus the data in the private arena 
is private to each process. Code (.EXE files) however is treated differently. Since code is read only an economy is made whenever more 
than one process runs the same .EXE. Where this happens the same page table entries are used among the processes sharing the 
common .EXE file. User programs may only access the private arena of the process they are running in (a special exception to this is 
possible through the DosDebug API by defining memory aliases). 

Virtual Memory Arenas and Regions may be presented pictorially as in the following diagram. 

Note: 


Some regions of the 4G address space are reserved. This is done for a variety of reasons which include: 
H/W and BIOS restrictions 
Enforced segregation between Arenas 
Guaranteed reserved address ranges. 
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Virtual Address Space Management 


Each of the three types of arena discussed in the previous section is managed by: 

An Arena Header Record (VMAH) 

A Sentinel Arena Record (VMAR) 

The VMAHs are maintained in a double-linked list. They contain information about the extent to which an arena has been used. Of particular 
interest are the following fields: 

+0x0 

Pointer to the next VMAH 


+0x4 

+0x8 


Pointer to the previous VMAH 

Pointer to the Sentinel Arena Record for this arena 


+0xc 


Pointer to the VMAR adjacent to the 1st free area. 

In the case of expand down arenas (the shared arena), this is the VMAR for the region of memory allocated above 
the first free area below the Minimum Read/Write Basing region. 

In the case of expand-up arenas (system and private) this is the VMAR for the region of memory allocated just below 
the lowest free area. 


+0x20 


Current minimum linear address allocated. 


+0x24 


Current Maximum linear address allocated. 


VMAHs are located: 

at _ahvmSys for the Shared Arena 

at _ahvmhShr for the High Memory System Arena 

at _ahvmShr for the System Arena 

imbedded at +0x40 in each PTDA for Private Arenas 

Arena Records (VMARs) are used to describe virtual storage reservations. These are described in more detail in Virtual Memory Arena 
Records, below. 

A special form of the VMAR is the Sentinel Arena Record. This serves two purposes: 

To track the theoretical size limits of an Arena 

To act as the head to a double-linked list of Regular VMARs, each of which describes a specific allocation. 

The sentinel VMAR for the Shared Arena is called the Boundary Sentinel, since it determines where the (dynamic) boundary between 
shared an private arenas lies. The boundary is adjusted to reflect the current highest private arena address. 

The manner in which VMARs and VMAHs are organised to manage the three types of arena is shown in the following diagram: 


Virtual Address Space Management 
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Virtual Memory Arena Records 


VMARs are 24-byte records that describe virtual address space allocation, or reservation. They are located in a table in system memory. 
The principle use of the VMAR is to track the allocation of virtual memory, which may or may not be backed in RAM or on the SWAP file. 

Arena records appear in a number of guises depending on the area storage they describe and whether the storage is shared, instance or 
private data. They are formatted by the KDB and DF .MA command. .MA takes either the handle or address or the VMAR as a parameter, 
or if no parameters are specified then the entire VMAR table is formatted. 


# ,ma 
har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0001 

%feeef 020 

00000100 

%ff 050000 

001 

OOlf 

0002 
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0000 

0001 
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=0000 

0002 

%feeef 036 

00000161 

%feeef 000 

001 

0001 
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=0000 
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0000 

0000 

fffO 

0000 

max=%lf f f 0000 

0006 

%feeef 08e 

00000003 

%f f f lbOOO 

009 

OOOf 

03ad 

0000 

0000 

0007 

0000 

sel=0100 

0007 

%feeef 0a4 

0000000c 

%ffe22000 

009 

0008 

0019 

0000 

0000 

0008 

0000 

sel=0400 

0008 

%feeef Oba 

OOOOOOOd 

%ffe2e000 

009 

0009 

0007 

0000 

0000 

0009 

0000 

sel=1000 

0009 

%feeef OdO 

00000010 

%ffe3b000 

009 

01e2 

0008 

0000 

0000 

000a 

0000 

sel=0120 

000a 

%feeef 0e6 

OOOOOlcl 

%ac624000 

121 

002a 

003a 

0000 

0000 

000b 

0000 

=0000 

000b 

%feeef Of c 

00000006 

%ffe4d000 

009 

000c 

Oldf 

0000 

0000 

000c 

0000 

sel=0130 

000c 

%feeef 112 

00000003 

%ffe53000 

009 

0094 

000b 

0000 

0000 

OOOd 

0000 

sel=0138 

OOOd 

%feeef 128 

00000010 

%11450000 

379 

0394 

02d6 

0000 

0000 

OOOe 

0000 

hco=00174 

OOOe 

%feeef 13e 

00000001 

%fffl0000 

001 

03d3 

0020 

0000 

0000 

OOOf 

0000 

=0000 

00b6 

%feeef fae 

00000080 

%00110000 

169 

03df 

0076 

0000 

0000 

041f 

0000 

hptda=03c9 


The fields of principle interest are: 
har 

The arena record handle. This is a unique identifier assigned to each VMAR. 


cpg 


The number of pages (4K bytes) allocated or reserved. 


va 


The address of the first page in the reservation. 


hob 


The handle of the VMOB that occupies the virtual address range covered by va and cpg. 

The right-hand column gives descriptive information about the use of the address range in a VMAR. Of particular interest are: 
sel=ssss 


Indicates system storage mapped by a GDT selector. 


hco=hhhh 

Indicated shared global storage. The hco is the handle of the VMCO at the head of the list representing accessors to 
an allocation in the Shared Arena. 


hptda=pppp 


Indicated private memory allocated in the private arena of a process whose PTDA handle is pppp. 


Virtual Memory Object Records 


VMOBs are 1 6-byte records allocated contiguously in a table in system memory. Each table entry is numbered from 1 and is referred to as a 
memory object handle, or more simple as a hob. 


VMOBs are use to store information about the allocation request. Of particular interest are: 


• The Requestor 

• The Owner 

• The Permissions 

The VMOB also has links to other related control blocks. Of these the important ones are: 

The associated VMAR, 
the associated VMCOs, 
and associated VMOBs. 

VMOB is formatted by using the KDB or DF .MO command. .MO takes either the handle or address or the VMOB as a parameter, or if no 
parameters are specified then the entire VMOB table is formatted. 


# .mo 
hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. ent 

It 

St 

xf 


0001 

0001 fec8 

0000 

fffl 

0000 

0000 

00 

00 

00 

00 

vmob 

0002 

0002 fec8 

0000 

f fe3 

0000 

0000 

00 

00 

00 

00 

vmar 

0003 

0003 fec8 

0000 

f fee 

0000 

0000 

00 

01 

00 

00 

vmkrhrw 

0004 

%fff 13238 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 

0005 

%fff 13190 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 

0006 

%fff0a891 

8000 

f fa6 

0000 

0000 

00 

00 

00 

00 

mte doscalls.dll 

0007 

0006 0000 

0000 

f f 6d 

0000 

0000 

00 

00 

00 

00 

doshlp 

0008 

0007 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0009 

0008 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000a 

0009 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000b 

000a 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000c 

000b 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

OOOd 

000c 0000 

0325 

f fba 

0000 

0000 

00 

00 

00 

00 

lock 

OOOe 

OOOd 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

OOOf 

OOOe 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0010 

008f 0000 

402c 

OOae 

0115 

0000 

00 

00 

00 

00 

priv 0002 c rpmshell . exe 

0011 

0010 0000 

0000 

f f 37 

0000 

0000 

00 

00 

00 

00 

romdata 

0012 

0011 0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 


One VMOB is formatted per line with the hob in the left-hand column. 

The owner is shown under the own column and is given as a hob that is associated with and uniquely identifies where the allocation is made 
from. For example: 

Memory dynamically allocated within a Private arena uses the handle of the PTDA (hptda) as the owner. 

The PTDA has a number of characteristics that make it an ideal choice for an owner: 

Each process has a unique PTDA 

The PTDA is the central control block from which all information about a process is obtained. 

Each PTDA is allocated from a unique memory object so has a unique hob, which defined to be the hptda. 

For storage allocated for a load module segment the module MTE handle (hmte) is used. 

The MTE has a number of characteristics that make is an ideal choice for an owner: 

Each loaded module is represented in the system by an unique MTE. 

Each MTE is allocated from a unique memory object so has a unique associated hob, which is defined to be the 
hmte. 

Memory allocated in the shared arena which is not specific to a particular process uses the following conventions for owner: 

• For DLL instance and global data the owner is the hmte of the owning DLL. 

• For Giveable shared storage, the owner is (0xfff5). 

• For Gettable shared storage, the owner is (0xfff6). 

• For Giveable and Gettable shared storage, the owner is (0xfff7). 



• For Named Shared Storage, the owner is (0xff82). 

See DosAllocSeq, DosGiveSeq, DosGetSeq and DosAllocSharedMem APIs in the Control Proqram Proqramminq References 
for OS/2 1.x, 2.x and 3.x. 

Memory allocated or suballocated from the system arena uses an artificial system owner id (ffxx) that doesn't actually correspond 
to a VMOB but is a conventional handle used to indicate the type of system object which has been allocated. An example this is 
hob 1 which is the table of VMOBs. 

The requestor's id is shown in the hmte column. This field is either: 

The hmte of the module making the request. 

An associated system object 

zero where there is no associated requestor. 

To the right of each line appears a textual interpretation of the own and hmte fields. 

The handle of the associated VMAR is shown in the har column. 

Associated VMOB's that share the same virtual address (that is, instance data) are linked from the hobnxt field. 

Not every VMOB is linked to an associated VMAR, as seen in hobs 4 and 5 in the example. These are known as pseudo-objects. They are 
used for some small system control blocks that are allocated, as required, from system storage but are too small to warrant the overhead of 
the minimum allocation of 1 page, which an arena records implies. PTDAs and MTEs are the most frequently encountered pseudo-objects. 
The va field replaces the har and hobnxt and points directly at the object itself. 


The Virtual Memory Context Record 


VMCOs are small control blocks that serve as extensions to the VMAR for shared arena, shared data. Whenever a process is given access 
to a shared global data object (most frequently DLL code and global data) then a VMCO is used to record the handle of the process (hptda) 
of the accessing process. Each process that shares a global data object will have a VMCO chained in a single-linked list from the object's 
VMAR. 


VMCOs may be formatted using the KDB and DF .MC command, however they are usually displayed with their corresponding VMOB and 
VMAR by using either the .MOC or .MAC commands. 

#.mac 297 


*har par cpg va fig next prev 

0297 %feef 2 904 00000660 %llfb0000 369 0312 0295 


link hash hob 
0000 00 9e 02al 


hob har hobnxt figs own hmte sown,cnt It st 
02al 0297 0000 4a2d fff5 0302 0000 00 00 00 
hco=057f pco=ffe70b96 hconext=00241 hptda=06dl 
hco=0241 pco=ffe6fb60 hconext=004ce hptda=04b2 
hco=04ce pco=ffe70821 hconext=0034c hptda=05c3 
hco=034c pco=ffe70097 hconext=001e4 hptda=04ca 
hco=04ca pco=ffe7080d hconext=00348 hptda=05c3 
hco=0348 pco=ffe70083 hconext=0017a hptda=04ca 
hco=017a pco=ffe6f77d hconext=00177 hptda=03d9 
hco=0177 pco=ffe6f76e hconext=00148 hptda=03ec 
hco=0148 pco=ffe6f683 hconext=000b2 hptda=03c9 
hco=00b2 pco=ffe6f395 hconext=00083 hptda=0359 
hco=0083 pco=ffe6f2aa hconext=00081 hptda=02el 
hco=0081 pco=ffe6f2a0 hconext=0007d hptda=02ad 
hco=007d pco=ffe6f28c hconext=00037 hptda=027a 
hco=0037 pco=ffe6fl2e hconext=00000 hptda=02ac 


xf 

00 give 

f=le 

pid=0059 

(D 

i — l 

II 

4-4 

pid=0043 

CD 

i — 1 

II 

4-) 

pid=0016 

f=le 

pid=000f 

f=16 

pid=0016 

f=16 

pid=000f 

CD 

i — 1 

II 

44 

pid=000b 

CD 

i — 1 

II 

44 

pid=000c 

CD 

i — 1 

II 

44 

pid=000a 

CD 

i — 1 

II 

44 

pid=0009 

CD 

i — 1 

II 

44 

pid=0007 

f=16 

pid=0006 

f=16 

pid=0008 

f=16 

pid=0004 


hal 

0000 hco=0057f 


c :pmspool .exe 
c : pawn . exe 
c : pmshell . exe 
c : pawn . exe 
c : pmshell . exe 
c : spdaemon . exe 

c : ddaemon . exe 
c : harderr . exe 
c : landll . exe 
c : lanmsgex . exe 
c : pmshell . exe 
c : gambit . exe 


Private Arena Private Data 


Private data, that is data in a Private Arena not accessible from any other context, is managed by VMARs and VMOBs as depicted by the 


following diagram. 

Control blocks and data that directly represent the allocation are shown shaded. 
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Private Arena Shared Data 


This is the case where .EXE program Read/Only segments are shared across multiple Private Arenas. 

The following diagram depicts this situation. 

Note that only one VMOB is used, but there are multiple VMARs, one for each process accessing the allocation. Each VMAR is linked using 
the link field. 

Control blocks and data that directly represent the allocation are shown shaded. 
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Shared Arena Global Data 


DLL Global Data and Named Shared, Giveable and Gettable allocations are potentially shareable among multiple processes. With these 
types of allocations data and address range is common to all who access it. Those that are given access are recorded by the VMCO chain. 

With this type of allocation, there is only one VMAR, and VMOB. 

Note that the own field of the VMOC, which is interpreted on the right hand side of the .MO display, may be one of five possibilities: 

hmte Data is Global Data or Code segment of a DLL 

Give Data is allocated with the Give attribute 

Get Data is allocated with the Get attribute 

GiveGet Data is allocated with both the Give and Get attributes. 

Mshare Data is named shared storage. 

The following diagram depicts this situation. 

Control blocks and data that directly represent the allocation are shown shaded. 
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Shared Arena Instance Data 


A DLL Instance data allocation shares only its address range among its accessors. The data is mapped to a different set of physical pages 
for each process. 

This type of allocation is represented by a single VMAR with a chained list of VMOBs, one for each accessor. This is the only case where 
VMOBs are linked by the hobnxt field. 

The following diagram depicts this situation. 

Control blocks and data that directly represent the allocation are shown shaded. 
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The Page Frame Structure 


Occasionally we need to enquire into the ownership and disposition of real storage. The PF is used to track the use of all frames of real 
storage, whether allocated, idle (pending freeing) or free. 


The PF is formatted using the .MP KDB and DF command. .MP will optionally take the frame number (real address MOD 4K) as a 
parameter. 


# .mp 
f felbOOO 

InUse : 

pVP=ff 406000 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

f felbOOc 

InUse : 

pVP=ff 406050 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

f felb018 

InUse : 

pVP=ff 40605a 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

f felb024 

InUse : 

pVP=f f 406064 

RefCnt=0002 

Flg=0 

11=00 

sl=00 

Blk=00000 

f felb030 

InUse : 

pVP=f f 40606e 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 


Frame=00000 

Frame=00001 

Frame=00002 

Frame=00003 

Frame=00004 


Of particular interest are: 

Frame=fffff 

The real storage frame number represented by this PF. 


pVP 


The address of the related Virtual Page Structure (non-free PFs only). See next section. 


The long term lock count. 


This is non-zero when an otherwise non-resident page is long-term locked, that is prohibited from being discarded or 
swapped, and expected to be so for a relatively long time. 


si 


The short term lock count. 

This is non-zero when an otherwise non-resident page is short-term locked, that is prohibited from being discarded or 
swapped, but temporarily so (much less than 1 0 seconds). 


The Virtual Page Structure 


VPs track the disposition of every page of virtual storage of every object. They enable the system to locate the data for the page, whether it 
is in RAM or on the Swap file. 


VPs are formatted using the .MV KDB and DF command, which takes as a parameter the address of the VP, which may be obtained from 
the PF structure. 


. mv %ff4060f0 15 
VPI=0018 pVP=f f4060f 0 Res 
VPI=0019 pVP=ff4060fa Res 
VPI=001a pVP=ff406104 Res 
VPI=001b pVP=ff40610e Swp 
VPI=001c pVP=ff406118 Swp 


Frame=0011 

Frame=0012 

Frame=0013 

Block=08cc 

Block=0001 


Flg=410 

Flg=410 

Flg=410 

Flg=0a0 

Flg=000 


HobPg=0001 

HobPg=0002 

HobPg=0003 

HobPg=027b 

HobPg=0000 


Hob=0009 

Hob=0009 

Hob=0009 

Hob=0026 

Hob=00e7 


Ref=001 

Ref=001 

Ref=002 

Ref=001 

Ref=001 


Of particular interest are: 

Flob=nnnn 

The hob of the object to which this page belongs. 


FlobPg=nnnn 


The page number within the object. 



Frame=ffff 


The real storage frame number that backs this virtual page. 


Block=bbbb 


The Swap file 4K block that contains the data for this virtual page. 


Page Management 


The relationship between PF structures, Page Table Entries, Swap File Blocks and Memory Objects is shown in the following diagrams. 

The relationship between PF structures, VP structures, Page Table Entries, Swap File Blocks and Memory Objects is shown in the following 
two diagrams 

The first of these depicts the situation where storage is backed or committed by physical memory. 



Page Management 


Backed Virtual Storage 
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The next diagram shows how this situation changes when storage is paged out. 

Note that the Page Table Entry is used to record the swapper block number when the page is not present. 
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Aliasing 


The situation described thus far can be further complicated by a technique known as aliasing. This is where one or more pages of an object 
may be mapped by page table manipulation to one or more pages of another object. In effect, this is partial object sharing. 

This can occur between processes or within a process and is usually done for the following reasons: 

A device driver needs to create an I/O buffer to receive data at interrupt time and therefore in any context. The application that 
called the device driver also needs to have access to the results. This is commonly solved by the device driver making a UVIRT 
allocation in the system arena which aliases an application data buffer. 

A debugging application needs to access or even modify data and code of the debugee. This is achieved through CS and DS 
selector aliasing. 

A Dos Virtual Machine needs to simulate the A20 line wrap-around. Storage addressed above the A20 line aliases to addresses 
module 2**20. 

A Dos Virtual Machine's Private Arena address space is aliased in the system arena so that it may be accessed by Virtual 
Device Drivers in a context other than that of the VDM. The VDM handle (HVMD) is the alias address, which the VDD may add 
to any Private Arena Address to obtain a context independent access to a location in a given VDM. 

These situations require the introduction of another memory management control block: the Alias Record (VMAL). Each VMAL has a unique 
handle or hal, which is the table entry from which the VMAL is allocated. 

Where aliasing occurs, the handle to the alias record (hal) is saved in the VMAR of the aliasing address range. 

In the case of memory aliasing the VMAL contains the handle to the PTDA of the aliasing process. 

In the case of CS/DS aliasing within a process the VMAL contains the CS selector. 

The link field of the VMAR is used to link together aliasing and aliased address ranges. 


Alias records 

may be formatted using the .ML command as shown in the following example: 

## .ml 






hal=0001 

pal=%f c5de020 

har=00af 

hptda=00ae 

pgof f=00000 

f=001 

hal=0002 

pal=%f c5de028 

har=00b0 

hptda=00ae 

pgof f=00000 

f=001 

hal=0003 

pal=%f c5de030 

har=007a 

hptda=00ae 

pgof f=00000 

f=001 

hal=0004 

pal=%f c5de038 

har=0160 

cs=00e6 ds= 

=d446 cref=001 

f =13 

hal=0005 

pal=%f c5de040 

har=017f 

hptda=00ae 

pgof f=00000 

f=001 

hal=0006 

pal=%f c5de048 

har=0197 

hptda=00ae 

pgof f=00000 

f =02 1 

hal=0007 

pal=%f c5de050 

har=0198 

hptda=00ae 

pgof f=00000 

f =02 1 

hal=0008 

pal=%f c5de058 

har=0199 

hptda=00ae 

pgof f=00000 

f =02 1 

hal=0009 

pal=%f c5de060 

har=01c8 

hptda=00ae 

pgof f=00000 

f=001 

hal=000a 

pal=%f c5de0 68 

har=01db 

cs=0056 ds= 

=d446 cref=001 

f =13 

hal=000b 

pal=%fc5de070 

har=02 Ob 

cs=0056 ds= 

=d446 cref=001 

f =13 

hal=000c 

pal=%fc5de078 

har=0242 

cs=0056 ds= 

=d446 cref=001 

f =13 


## 


CS Aliasing is depicted in the following diagram: 
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The following diagram depicts multiple process memory aliasing 



Memory Aliases in Multiple Processes 



Who Owns Virtual Memory? 


Given a virtual address, the procedure for determining who owns and is using this memory essentially amounts to the following steps: 

1 . If the question of ownership relates to a known process's private storage then determine its hptda. 

2. Locate the arena record(s) that encompass the address. 

3. If more than one then select the one that relates to the process of interest (if known) by matching the hptda. 

4. Locate the object records that are chained to the arena record. 

5. If more than one then select the process of interest by matching the hptda. 

6. Note the own and hmte values and their interpretation on the right-hand side of the VMOB display. 

7. If necessary format the own and hmte VMOBs. 

8. If either is an MTE then use .LM or .LMO, with the hob as parameter, to format the MTE. 

9. If the memory is shared (hco=nnnnn appears in the arena record display) then format the chain of VMCOs and select the one 

that matches hptda from step 1 . 

Fortunately this task is reduced in complexity because of the M or match option that exists with both the .MO and .MA commands. 

.MOM addr will display the VMOB of a pseudo-object that matches the addr if it exists. PTDAs are pseudo-objects and their addresses are 
listed by the .P command. 

.MAM addr will search for all arena records whose address range encompasses addr. Under the kernel Debugger this search is restricted 
to the current context unless the A option (all contexts) is also specified. Under the dump formatter A in always in effect. 

The C option further reduces the effort. This is the chain option and is applicable to .MO, .MA, .MC and .ML commands. Chaining formats all 

VMOBs, VMARs, VMCO and VMALs that are chained from each VMAR associated with the VM control block being formatted. 

.MAMC (or .MAMAC under the DF) are the default options if just .M is specified. Furthermore the matching address defaults to the current 
CS:EIP. 

The following sections illustrate memory ownership in: 

Shared Arena Global Data 
Shared Arena Instance Data 
Private Arena Shared and Private Data 
Physical Storage. 

Further examples in memory management exploration, including looking at aliasing may be found in Exploring Memory Management. 


Shared Global Data 


Who owns %1 21 23456 ? 

#.m %12123456 


*har par cpg va fig next prev 

0297 %feef2904 00000660 %llfb0000 369 0312 0295 
hob har hobnxt figs own hmte sown,cnt It st 
02al 0297 0000 4a2d fff5 0302 0000 00 00 00 

hco=057f pco=ffe70b96 hconext=00241 hptda=06dl 
hco=0241 pco=ffe6fb60 hconext=004ce hptda=04b2 


link 

hash hob 

0000 

00 9e 02al 

xf 


00 give 

f=le 

pid=0059 

CD 

i — 1 

II 

4-4 

pid=0043 


hal 

0000 hco=0057f 


c:pmspool .exe 


hco=04ce 

hco=034c 

hco=04ca 

hco=0348 

hco=017a 

hco=0177 

hco=0148 

hco=00b2 

hco=0083 

hco=0081 

hco=007d 

hco=0037 


pco=f fe70821 
pco=ffe70097 
pco=f fe7080d 
pco=f fe70083 
pco=f fe6f 77d 
pco=f fe6f76e 
pco=f fe6f 683 
pco=f fe6f 395 
pco=f fe6f 2aa 
pco=f fe6f 2aO 
pco=f fe6f28c 
pco=f fe6f 12e 


hconext=0034c 

hconext=001e4 

hconext=00348 

hconext=0017a 

hconext=00177 

hconext=00148 

hconext=000b2 

hconext=00083 

hconext=00081 

hconext=0007d 

hconext=00037 

hconext=00000 


hptda=05c3 

hptda=04ca 

hptda=05c3 

hptda=04ca 

hptda=03d9 

hptda=03ec 

hptda=03c9 

hptda=0359 

hptda=02el 

hptda=02ad 

hptda=027a 

hptda=02ac 


# .mo 302 

hob va figs own hmte sown,cnt It st 

0302 %fdf40844 8000 ffa6 0000 0000 00 00 00 

# 


f=le 

pid=0016 

f=le 

pid=000f 

f =1 6 

pid=0016 

f =1 6 

pid=000f 

f =1 6 

pid=000b 

f =1 6 

pid=000c 

f =1 6 

pid=000a 

f =1 6 

pid=0009 

f=l 6 

pid=0007 

f =1 6 

pid=0006 

f =1 6 

pid=0008 

f =1 6 

pid=0004 


c : pawn . exe 
c : pmshell . exe 
c : pawn . exe 
c : pmshell . exe 
c : spdaemon . exe 

c : ddaemon . exe 
c : harder r . exe 
c : landll . exe 
c : lanmsgex . exe 
c : pmshell . exe 
c : gambit . exe 


xf 

00 mte c : pmmerge . dll 


This is shared arena global data because of the presence of the hco chain. The storage was dynamically allocated by PMMERGE.DLL as 
giveable storage. It is currently being referenced by 14 processes. 


Shared Instance Data 


Who allocated %13fa1234 ? 


# .m %13fal234 


har 

par 

cpg 


va 

fig 

next 

. prev 

link hash hob hal 

009c 

%feeefd72 0000001 

.0 %13fa000C 

l 179 

009b 

. 00 9d 

0000 0000 0 63f 0000 =0000 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 




063f 

009c 

0497 

002c 

06dl 

00a3 

0000 

00 

00 

00 

00 

priv 

0059 


0497 

009c 

05c4 

002c 

04b2 

00a3 

0000 

00 

00 

00 

00 

priv 

0043 

c ipmspool . exe 

05c4 

009c 

04ce 

002c 

05c3 

00a3 

0000 

00 

00 

00 

00 

priv 

0016 

c : pawn . exe 

04ce 

009c 

03f 0 

002c 

04ca 

00a3 

0000 

00 

00 

00 

00 

priv 

OOOf 

c ipmshell . exe 

03f 0 

009c 

03dd 

002c 

03ec 

00a3 

0000 

00 

00 

00 

00 

priv 

000c 


03dd 

009c 

03cd 

002c 

03d9 

00a3 

0000 

00 

00 

00 

00 

priv 

000b 

c : spdaemon . exe 

03cd 

009c 

035d 

002c 

03c9 

00a3 

0000 

00 

00 

00 

00 

priv 

000a 

c : ddaemon . exe 

035d 

009c 

02 f 4 

002c 

0359 

00a3 

0000 

00 

00 

00 

00 

priv 

0009 

c : harderr . exe 

02 f 4 

009c 

02e5 

002c 

027a 

00a3 

0000 

00 

00 

00 

00 

priv 

0008 

c ipmshell . exe 

02e5 

009c 

02ae 

002c 

02el 

00a3 

0000 

00 

00 

00 

00 

priv 

0007 

c : landll . exe 

02ae 

009c 

02a8 

002c 

02ad 

00a3 

0000 

00 

00 

00 

00 

priv 

0006 

c : lanmsgex . exe 

02a8 

009c 

0000 

002c 

02ac 

00a3 

0000 

00 

00 

00 

00 

priv 

0004 

c : gambit . exe 


.mo a3 








hob 

va 

figs 

own 

hmte 

sown, cnt 

it 

St 

xf 

00a3 

%fdef 5f 7 0 

8000 

f f a6 

0006 

0000 00 

00 

00 

00 mte cidoscalll.d 


# . lmo a3 


hmte= 

=00a3 pmte 

:=%fdef5f70 mflags= 

=0498b594 

c:\os2\dll\doscalll 

. .dll 




ob j 

vsize 

vbase 

flags 

ipagemap 

cpagemap 

hob 

sel 






0001 

00000360 

lbf 80000 

80009025 

00000001 

00000001 

OOac 

df c6 

r-x 

shr 

alias 

iopl 


0002 

0000aa34 

lbf 90000 

80002025 

00000002 

0000000b 

OOab 

dfcf 

r-x 

shr 

big 



0003 

0000d4 99 

lbfaOOOO 

8000d025 

OOOOOOOd 

OOOOOOOe 

OOaa 

dfd6 

r-x 

shr 

alias 

conf 

iopl 

0004 

0000d4f 0 

lbfbOOOO 

8000d025 

0000001b 

OOOOOOOe 

00a9 

dfde 

r-x 

shr 

alias 

conf 

iopl 

0005 

00001140 

13f 90000 

80001023 

00000029 

00000002 

00a8 

9fcf 

rw- 

shr 

alias 



0006 

OOOOlaf 0 

13fa0000 

80001003 

0000002b 

00000002 

0000 

9fd7 

rw- 

alias 



0007 

00000e44 

13fb0000 

80001023 

0000002d 

00000001 

00a6 

9fdf 

rw- 

shr 

alias 



0008 

00000550 

13f C0000 

80001003 

0000002e 

00000001 

0000 

9fe7 

rw- 

alias 



0009 

00001000 

13fd0000 

80001023 

0000002f 

00000000 

00a4 

9fef 

rw- 

shr 

alias 



000a 

00001000 

13fe0000 

80001023 

0000002f 

00000000 

00a2 

9f f 7 

rw- 

shr 

alias 




# 


%13fa1234 is the shared arena (there is no hptda associated with the arena record). 
This is shared instance data because of the chain of related object records. 

The storage was allocated by hmte=a3, but their are multiple owners. 


mte a3 is DOSCALL1 .DLL 



%1 3fa1 234 is within object 6 of the module. It is DLL RW instance data. 


Private Data 


Who owns #17:0 in thread slots 8 and 9? 

>> First find the hptda's for each of the slots of interest since we are 
>> looking at private arena storage 

# .p8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0008 0008 0001 0008 0007 blk 0200 abd2f000 abe497f0 abe28bf0 01 PMSHL32 

# .mom %abe497f0 

hob va figs own hmte sown,cnt It st xf 

027a %abe497f0 8000 ffcb ff79 0000 00 00 00 00 ptda 0008 c ipmshell . exe 

# .p 9 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0009 0004 0001 0003 0001 blk 081f abd30000 abe48614 abe28de8 00 GAMBIT 

# .mom %abe48614 

hob va figs own hmte sown,cnt It st xf 

02ac %abe48614 8000 ffcb 02a8 0000 00 00 00 00 ptda 0004 cigambit.exe 


>> Next list all the owners of 17:0 
# .m #17:0 

*har par cpg va fig next prev link hash hob hal 

02 6d %feef 2568 00000010 %00020000 ld9 029a 026c 0000 0000 029d 0000 hptda=02ad 

hob har hobnxt figs own hmte sown,cnt It st xf 

029d 026d 0000 0838 029e 029e 0000 00 00 00 00 shared c : lanmsgex . exe 

*har par cpg va fig next prev link hash hob hal 

0277 %feef 2 644 00000010 %00020000 ld9 0276 0272 0000 0000 02b0 0000 hptda=02ac 

hob har hobnxt figs own hmte sown,cnt It st xf 

02b0 0277 0000 0838 02bl 02bl 0000 00 00 00 00 shared c:gambit.exe 

*har par cpg va fig next prev link hash hob hal 

02a0 %feef 2 9ca 00000010 %00020000 179 02a4 029f 0000 0000 02e8 0000 hptda=02el 

hob har hobnxt figs own hmte sown,cnt It st xf 

02e8 02a0 0000 002c 02el 02e7 0000 00 00 00 00 priv 0007 c: landll.exe 

*har par cpg va fig next prev link hash hob hal 

02aa %feef 2aa6 00000010 %00020000 179 02ab 02a9 0000 0000 02f8 0000 hptda=027a 

hob har hobnxt figs own hmte sown,cnt It st xf 

02f8 02aa 0000 002c 027a 02f7 0000 00 00 00 00 priv 0008 c :pmshell . exe 

*har par cpg va fig next prev link hash hob hal 

02f c %feef 31b2 00000010 %00020000 ld9 02fd 02fb 0000 0000 0360 0000 hptda=0359 

hob har hobnxt figs own hmte sown,cnt It st xf 

0360 02fc 0000 0838 035f 035f 0000 00 00 00 00 shared c : harderr . exe 

*har par cpg va fig next prev link hash hob hal 

0360 %feef 3a4a 00000010 %00020000 ld9 0361 035f 0000 0000 03d0 0000 hptda=03c9 

hob har hobnxt figs own hmte sown,cnt It st xf 

03d0 0360 0000 0838 03cf 03cf 0000 00 00 00 00 shared c : ddaemon . exe 

*har par cpg va fig next prev link hash hob hal 

036b %feef 3b3c 00000010 %00020000 ld9 036c 036a 0000 0000 03e0 0000 hptda=03d9 

hob har hobnxt figs own hmte sown,cnt It st xf 

03e0 036b 0000 0838 03df 03df 0000 00 00 00 00 shared c : spdaemon . exe 

*har par cpg va fig next prev link hash hob hal 

0378 %feef 3c5a 00000010 %00020000 ld9 0379 0377 0000 0000 03f3 0000 hptda=03ec 

hob har hobnxt figs own hmte sown,cnt It st xf 

03f 3 0378 0000 0838 03f2 03f2 0000 00 00 00 00 shared 

*har par cpg va fig next prev link hash hob hal 

040e %feef 4 93e 00000010 %00020000 179 045c 040f 0000 0000 04c6 0000 hptda=04b2 

hob har hobnxt figs own hmte sown,cnt It st xf 

04c6 040e 0000 002c 04b2 0522 0000 00 00 00 00 priv 0043 c :pmspool . exe 



*har par cpg va fig next prev link hash hob hal 

0427 %feef 4b64 00000010 %00020000 179 0428 0426 0000 0000 04cf 0000 hptda=04ca 
hob har hobnxt figs own hmte sown,cnt It st xf 

04cf 0427 0000 002c 04ca 02f7 0000 00 00 00 00 priv OOOf c : pmshell . exe 

*har par cpg va fig next prev link hash hob hal 

04e8 %feef 5bfa 00000010 %00020000 179 04e6 04e5 0000 0000 05d4 0000 hptda=05c3 
hob har hobnxt figs own hmte sown,cnt It st xf 

05d4 04e8 0000 002c 05c3 05cf 0000 00 00 00 00 priv 0016 c:pawn.exe 

*har par cpg va fig next prev link hash hob hal 

0502 %feef 5e36 00000010 %00020000 ld9 059f 0598 0000 0000 0507 0000 hptda=06dl 
hob har hobnxt figs own hmte sown,cnt It st xf 

0507 0502 0000 0838 05b3 05b3 0000 00 00 00 00 shared 

*har par cpg va fig next prev link hash hob hal 

0507 %feef 5ea4 00000010 %00100000 lei 056c 05cb 05d4 0000 0678 0018 hptda=04af 
hal=0018 pal=%fddae0d8 har=0507 hptda=04af pgoff=00000 f=081 

har par cpg va fig next prev link hash hob hal 

05d4 %feef7042 00000040 %00000000 lei 05bf 0461 0000 0000 0678 0000 hptda=04af 
hob har hobnxt figs own hmte sown,cnt It st xf 

0678 0507 0000 103c 04af 0000 0000 00 00 00 00 priv 005b *vdm 

» Slot 8: 

# .mo 2bl 

hob va figs own hmte sown,cnt It st xf 

02bl %feeeef38 8000 ffa6 02a7 0000 00 00 00 00 mte c:gambit.exe 

# . lmo 2bl 

hmte=02bl pmte=%feeeef 38 mflags=00003140 c:\dcafl3\gambit.exe 
seg sect psiz vsiz hob sel flags 

0001 0002 IfeO IfeO 02b2 OOOf 2d20 code shr rel 

0002 0013 002a 002c 02b0 0017 2d20 code shr rel 

0003 0014 1 9ae 19ae 0000 OOlf OdOl data rel 

0004 0022 0002 0002 02a9 0027 2c20 code shr 

0005 0000 0000 3400 0000 002f OcOl data 


» Slot 9 


# .mo 2f7 

hob va figs own hmte sown,cnt It st xf 

02 f 7 %fdf40al8 8000 ffa6 0000 0000 00 00 00 00 mte c : pmshell . exe 

# 


This is private arena data of some sort, whose address range is present in 13 processes. 

The hptda for pid 4 (slot 9 is 2ac) 

The second major entry from .m output (har=277, hptda=2ac) is for gambit.exe in pid 4. 

The owner and hmte are the same (2b1 ). This indicates a code segment within the module gambit.exe. 

.LMO 2b1 show this to be in segement 2 of gambit.exe 
The storage in pid 8 (slot 8) is shown in the 4th entry, har=2aa. 

Here own=27a and hmte=2f7. 

The owner is shown to the right of the VMOB as being pid 8. We can check this by displaying hob 27a. This turns out to be a ptda for pid 8, 
as we saw when we used .mom against the PTDA address. 

.lmo 2f7 shows this to be the MTE for pmshell.exe. We concluded that pmshell has allocated private memory in pid 8 at this address. 


Physical Memory 



Who owns physical address %%90123 ? 


# . mp 9 0 

ffelb6c0 InUse: pVP=ff408576 RefCnt=0001 Flg=l 11=00 sl=00 Blk=00272 Frame=00090 

# . mv %ff408576 

VPI=03bf pVP=ff408576 Swp Frame=0090 Flg=030 HobPg=0011 Hob=0282 Ref=001 

# .moo 282 

*har par cpg va fig 

0263 %feef248c 00000060 %a8650000 001 
hob har hobnxt figs own hmte sown, 

0282 0263 0000 0000 ffd4 0000 0000 

# dp %a8650000+11000 11 
linaddr frame pteframe state res 

%a8661000* 0055d frame=00090 0 0 

%a8661000 00090 frame=00090 0 0 

# 


Physical address %%90123 is in frame 90. 

This is currently assigned to VP at %ff408576 and is 
The VP tells us the hob and page within the hob. 

.MOC will format the VMOB and associated VMAR. 

We can check that this is correct from the page table entries for the 1 7th (0x1 1 th) page of the object's virtual address. 


next 

prev 

link hash hob 

hal 


0262 

0267 

0000 0001 0282 

0000 

=0000 

cnt 

It St 

xf 



00 

00 00 

00 vddheap 




Dc Au CD WT Us rW Pn state 

c A s r P pageable 

c A s r P pageable 


on the swap file at block 272. 


Thread Scheduling and Dispatching Topics 


Part 2 of our discussion on The Wait Condition centres on the Scheduler and Dispatcher and the mechanisms that govern when threads will 
or will not run. 

This is considered from the perspective the system, which leads us to divide the discussion into two cases: 

Blocking - Voluntary Suspension 
Involuntary Suspension 


Blocking - Voluntary Suspension 


We now turn our attention to b/ock/ng , which the is mechanism that threads use to give up processor time voluntarily to wait for an event to 
occur or a resource to become available. 

The term voluntary is chosen from the perspective of the scheduler and not necessarily from the application's perspective. In this context 
voluntary suspension refers to an action taken by a thread to give up its time-slice. This will include direct actions such as waiting on 
semaphores as well as calling APIs, which for internal reasons need to wait for a resource or an event. 

PROCBLOCK and its counterpart PROCRUN are the two kernel routines at the heart of the block/run mechanism. These are callable 
directly by kernel component and also by Device Drivers and File System Drivers through a small interface layer. Application code only gets 
to call PROCBLOCK and PROCRUN indirectly through system APIs and in particular through the semaphore APIs. 

The block/run mechanism is designed with the following criteria: 

A thread should be able to block without the waking thread having to know whether anyone, or who, had blocked on a resource 


Multiple threads should be able to wake when an event or resource becomes available. 

This is achieved by having an abstract token, known as the Block ID, associated with the resource or event. The Blockld is passed to 
PROCBLOCK when a thread blocks. Similarly when another thread wishes to wake threads waiting for a resource or event the Blockld that 
represents the resource or event is passed to PROCRUN. 

In addition to the Blockld, callers of PROCRUN receive a flag that indicates whether all or just the highest priority thread waiting on the 
Blockld should wake. 

This mechanism has shortcomings unless certain constraints are applied: 

Blocklds need to be subject to a convention that gives uniqueness otherwise it is possible that threads will incorrectly block and 
run. A solution is to use the address of a control block memory object that relates uniquely to the resource or event. 

If addresses are to be used for Blocklds then they must point to global data for reasons of uniqueness. Furthermore, if they are 
to be reference by disabled code then the storage needs to be in resident memory. This more or less implies that addresses 
must be taken from within the System Arena. 

If Blocklds are in use that do not represent addresses then they must not conflict with any potential addresses used as Blocklds. 

Even if addresses are use there is no accounting information that says who owns the related resource. 

A workable scheme is implemented by limiting the direct use of PROCBLOCK and PROCRUN to system code, device drivers and file 
system drivers, all of which have access to the System Arena. 

Apart from three special conventions the system and most device drivers use addresses as Blocklds. There are three system defined 
conventional Blocklds are: 


fffe 

results from a RAMSEM wait. 

fffd 

results from a MUXWAIT. 

ffca.... 

results from a Child Wait 


x (x=a - f) 


Linear address of the memory object of control block that relates to the resource. 


Probably selector:offset address of the memory object or control block that relates to the resource. 

This scheme could be subverted by device drivers, but in general they will choose to block on addresses of resources they own, which are 
usually allocated out of the system arena and addressed using a GDT selecboffset. 

Accountability remains an exposure. For Blocklds that are addresses the owner of the memory that the Blockld points to gives a big clue. 

For conventional Blocklds we have to do more work. These are discussed in detail later. We will first we look at an example of a Blockld that 
is an address. 

Basic Technique: 

The technique for analysing blocked threads is two-pronged: 

1 . We can look at the wait from the application perspective by examining the current user registers and by trying to identify the API 
issued. This is usually relatively easy but often gives no clue as to the underlying wait since any single API may block on many 
occasions for many reasons. 

2. Examine the problem from the Internal, or Kernel perspective to determine what an API might be waiting for. This process starts 
with finding the associated Blockld. 

When a thread blocks its Blockld is stored in the TCB TCBSIeepId field. Conveniently, this is formatted by using the .PB KDB and DF 
command. 

Note: 


.PB under DF lists non-blocked threads. Blocklds are irrelevant for such threads. 


.PB also attempts to interpret the Blockld. The full details of these are given in the Kernel Debugger and Dump Formatter Command 
Reference. In addition to classifying the Blockld, .PB examines TCB_Semlnfo and TCB_SemDebugAddr. 

For many semaphore originated Blocklds TCB_Semlnfo is used to store the address or handle of the user's semaphore that lead to the 


thread blocking. .PB will attempt to locate a near symbol to the semaphore address and display it. 

Under the kernel Debugger, TCB_SemDebugAddr is used to store the address of the caller to the Semaphore API when the thread blocked. 
If this field is not Oxffffffff .PB attempts to locate a near symbol to the caller and display it. 

Once we have the Blockld, TCB_Semlnfo, and TCB_SemDebugAddr we are able to begin searching for information associated with reason 
for blocking. 

The next step is to decide whether the Blockld is one of the three special categories or to be treated as an address. 


Blocking on the Address of a Resource 


The initial analysis of Blocklds that are linear addresses uses the .M command to determine ownership. 

If we have appropriate symbols loaded, LN against the Blockld can also be very informative. 

As mentioned in the previous section, for addresses to be effective Blocklds they must be unique and so are generally allocated from the 
system arena. Most allocations from the system arena are 'labelled' with a system object Id. If the .MO command is used against a system 
object Id it will display a meaningful mnemonic for the Owner Id. In many cases the Mnemonic is for a system control block or buffer. 
Blocklds that address the beginning of a control block tend to be used for serialising updates to the control block. There may be processes 
that a control block is associated with. These are often serialised by using the address of a field within the control, that is specifically 
associated with the process. 

A complete list of system object Ids may be found in the under the Kernel Dubugger Command Reference under the .MO command 
description. 


We now look at some examples: 

File System - Device Driver 

# ,pb41 

Slot Sta BlockID Name Type Addr Symbol 

0041 blk 04085ca7 DEMOl 

# In 408:5ca7 

No Symbols Found 

# .m 408:5ca7 

*har par cpg va fig next prev link hash hob hal 

0079 %feflfa70 00000010 %7bf27000 129 0078 0077 0000 0000 007b 0000 sel=0408 

hob har hobnxt figs own hmte sown, cnt It st xf 

007b 0079 0000 0324 ffal 0000 0000 00 00 00 00 sft 


# .d sft 408:5ca7 


sf_ref_count : 

0000 

sf i_mode : 

0092 

sf_usercnt : 

0000 

sf i_hVPB : 

0000 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

02c0 : 0000 

sf i_cdate : 

0000 

sf_devptr : 

#0928:001c 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : f f 40 

sf i_adate : 

0000 

sf_chain : 

#0000:0000 

s f i_mt ime : 

3cel 

sf_MFT : 

ffffffff 

sf i_mdate : 

lebO 

sfdFAT_f irFILEclus : 

0000 

sf i_size : 

00000000 

sfdFAT_cluspos : 

0000 

sf i_position : 

000013c0 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

sf i_PID : 

0012 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 

DEMODEV2 

sfi_selfsfn: 00b5 

sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sf i_DOSattr : 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




# .p41 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0041 0012 OOOf 0012 0001 blk 0300 7bdl9000 7bdfc218 7bddfc68 Oebc 13 DEMOl 


# . s41 

Current slot number: 0041 

# . r 

eax=00000000 ebx=00000002 ecx=00000000 edx=4d3409ea esi=d02f0021 edi=000009ea 


eip=00000134 esp=0000a424 ebp=0000a43e iopl=2 — 
cs=000f ss=005f ds=005f es=004f fs=150b gs=0000 


OOOf :00000134 

894 6fe 

mov 

word ptr [bp-02], ax 

# u cs:ip-20 

OOOf :00000114 

681f 00 

push 

OOlf 

OOOf :00000117 

682d00 

push 

002d 

OOOf :0000011a 

Oe 

push 

cs 

OOOf :0000011b 

e87cl 9 

call 

la9a 

OOOf :0000011e 

83c40a 

add 

sp, tOa 

OOOf :00000121 

8e06ee09 

mov 

es,word ptr [09ee] 

OOOf :00000125 

8b5ef 8 

mov 

bx,word ptr [bp-08] 

OOOf :00000128 

dle3 

shl 

bx, 1 

OOOf :0000012a 

26ffb764d2 

push 

word ptr es : [bx+d264 

OOOf :0000012f 

9a0000abld 

call 

ldab: 0000 

OOOf :00000134 

894 6fe 

mov 

word ptr [bp-02], ax 

OOOf :00000137 

8e06ee09 

mov 

es,word ptr [09ee] 


— — nv up ei pi nz ac po nc 
cr2=00000000 cr3=001ac000 

ss : a43c=0dl 6 


# dg ldab 

ldab CallG32 Sel : Of f =014 8 : 000044 14 


DPL=3 P DWC=1 


# In 148:4414 

0148:00004414 OS2KRNL DOSCLOSE 


Slot 41 is waiting on Blockld 04085ca7. This is too low to be a linear address. We assume selector:offset. 

.M 408:5ca7 reveals the owner to be sft. This is a System File Table structure. 

The .D command will format STFs, so we do so using the Blockld as the SFT address. 

This SFT represents a device driver called DEMODEV2. We can tell because there is no MFT pointer in the SFT and the flags indicate a 
device. 

From the application side we unassemble back from the CS:IP. 

The application has just issued a call-gate instruction. 

Examination of the call-gate GDT descriptor show we were calling DOSCLOSE in the kernel. 

We are waiting for the close to complete, possibly the device driver has not returned completion status to the last I/O request. 

Named Pipes 

#.s 18 

Current slot number: 0018 

# .pb# 

Slot Sta BlockID Name Type Addr Symbol 

0018# blk 06700012 EPWPSI 

# 

#.m 670:12 

*har par cpg va fig next prev link hash hob hal 

00a8 %fef lfe7a 00000010 %7b563000 129 00a7 00a9 0000 0000 00b4 0000 sel=0670 

hob har hobnxt figs own hmte sown,cnt It st xf 

00b4 00a8 0000 0124 ff31 0000 0000 00 00 00 00 npipenp 

#.p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0018# 000c 0000 000c 0001 blk 0200 7bc70000 7bd79964 7bd5b5f0 0ec8 00 EPWPSI 

# . r 

eax=00000000 ebx=00005552 ecx=00050000 edx=0000f020 esi=00000446 edi=00000302 
eip=000014bb esp=000063da ebp=000063de iopl=2 — — — nv up ei pi nz na po nc 
cs=d01f ss=002f ds=beb7 es=0077 fs=150b gs=0000 cr2=00000000 cr3=001ac000 


dOlf : 000014bb c9 

leave 


# u.cs:ip-10 
Expression error 

# u cs:ip-10 
dOlf : 000014ab c9 

leave 


dOlf : 000014ac caOaOO 

retf 

000a 

DOSCALL1 DOSCONNECTNMPIPE : 
dOlf : 000014af C8000000 

enter 

0000,00 

dOlf : 000014b3 ff7606 

push 

word ptr [bpt06 

dOlf : 000014b6 9a0000131c 

call 

lcl3 : 0000 

dOlf : 000014bb c9 

leave 




dOlf : 000014bc 

ca0200 

retf 

0002 

DOSCALL1 DOSDISCONNECTNMPIPE : 


dOlf : 000014bf 

C8000000 

enter 

0000,00 

dOlf : 000014c3 

f f7606 

push 

word ptr [bp+06] 

dOlf : 000014c6 

9a00001blc 

call 

lclb: 0000 

dOlf : 000014cb 

c9 

leave 


dOlf : 000014cc 

ca0200 

retf 

0002 

# dg 1 c 1 3 

lcl3 CallG32 
# In 148:540c 

Sel :Off=0148 : 

: 0000540c 

DPL=3 P DWC= 

0148 : 0000540c 
# 

OS2KRNL DOSCONNECTNMPIPE 


In this example the Blockld is 06700012 . This is unlikely to be a linear address. We assume that it is 670 : 12 . 

.M 670:12 shows the owner to be npipenm. This is a named pipe name segment. Could the process be waiting for a pipe connection? 

Looking at the application side we see that the last ring 3 instruction to be executed was a call-gate, which turns out to be 
DOSCONNECTNMPIPE in the Kernel. 

These last two examples were reasonably revealing. More often than not we use .M against a Blockld ( and other system data) and we get 
one of: 

vmkshrw 

vmkshro 

vmkrhrw 

vmkrhro 

These are, so called Public Kernel Heaps. Fortunately each allocated heap block is imbedded in a structure that reveals the owner of the 
block. This is discussed next. 


Kernel Public Heaps 


The kernel has 7 heaps for general use by itself, device drivers and file system drivers. They have the following object id mnemonics: 

vmkshro Swappable read-only heap 

vmkshrw Swappable read/write heap 

vmkrhro Resident read-only heap 

vmkrhrw Resident read/write heap 

krhrol m Resident read-only < 1 Mb heap 

krhrwl m Resident read/write < 1 Mb heap 

kbdsym Resident kernel debugger symbol heap 

Not all heaps are always built. Note in particular: 

hdbsym is not present under the RETAIL kernel. 

vmkshrw is used for the krhrol m, krhrwl m, vmkshrw and vmkshro heaps under the RETAIL kernel, 
vmkrhrw is used for both vmkrhrw and vmkrhro under the RETAIL kernel. 

Notice that each of the heaps is either resident or swappable. 


Each heap is partitioned into blocks. 

Swappable heap blocks have an 8 byte prefix followed by the block data. 



Resident heap blocks have two forms: 


Regular: for smaller allocation. These have a 4 byte prefix. 

Attributed or extended: These use a 4 byte prefix and an 8 byte suffix. 


Swappable Heap Blocks 


Kernel swappable heap blocks for allocated blocks have the following layout: 

<size><owner><selectorxdata> 


Field Bits 

size in bytes 63-32 


owner 


31-16 


selector 15-0 


Description 

Size of the block including the 
header in bytes ORed with signature 
0x52000000. 

Owner of heap block. This is 
either a system owner (value between 
0xff2d and 0xfff8, or a 
memory handle/pseudo handle such as 
an MTE pseudo-handle . 

GDT selector mapping block's data 
else null. 


Finding the owner of a Swappable Head Selector 

# .m 8f 0 : 0 

*har par cpg va fig next prev link hash hob hal 

0021 %fef If2e0 00001400 %fca5f000 121 0020 0022 0000 0020 0022 0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0022 0021 0000 0225 ffef 0000 0000 00 04 00 00 vmkshrw 

# dl 8f 0 
GDT 

08f0 Code Bas=fca95000 Lim=00008ed3 DPL=0 P RE A 


# dd %fca 
%fca94f f 0 
%f ca95000 
%fca95010 
%f ca95020 
%f ca95030 
%fca95040 
%f ca95050 
%f ca95060 


000-10 

00000000 

08e8b81e 

le560000 

eb63a5e8 

468b017e 

13969af f 

74 000e7 f 

2616448b 


00000000 
32b8d88e 
8e08e8b8 
c02b9003 
10568b0e 
5f 3dl000 
0142e903 
8918548b 


52008ee0 
16calf 00 
a23e83d8 
0bfe4689 
52000805 
c4e77400 
0c47 f f 2 6 
5689fa46 


08f Of f 4 9 
06c89000 
06740009 
e90374c0 
6af f 6a50 
83260e5e 
261276c4 
0e4 68bf c 


# . mo f f 4 
f f 4 9 f sd2 

# . 1ml 
hmte=0 982 
hmte=097e 
hmte=0979 
hmte=096b 
hmte=0164 


pmte=%fe0elal4 

pmte=%fe0ela54 

pmte=%fe0elbac 

pmte=%fe0eld60 

pmte=%fe02cc40 


mflags=0408bl86 
mflags=0408bl86 
mflags=0408bl86 
mflags=0408bl86 
mf lags=04 98blc8 


e : \ibmlan\netlib\splla . dll 
e : \ibmlan\netlib\lrhml . dll 
e : \ibmlan\netlib\lrnsl . dll 
e : \ibmlan\netlib\netibm . dll 
e : \os2\dll\sysmono . fon 


hmte=0181 

hmte=031b 

hmte=0306 

hmte=0160 

hmte=0117 

hmte=00d2 


pmte=%fe02ccb0 
pmte=%fe02af 18 
pmte=%fe059f 90 
pmte=%fe01f f 4c 
pmte=%fdf5df 60 
pmte=%fdf53990 


mflags=4498bld5 

mflags=0428alc9 

mflags=0428alc9 

mflags=0428alc9 

mflags=0428alc9 

mflags=0428alc9 


e 

e 

e 

d 

e 

e 


\os2\dll\pmatm . dll 
\ibmlan\netprog\netwksta .200 
\netware\nwif s . if s 
\dataex2\iwsfsd2 . ifs 
\os2\cdf s . ifs 
\os2\hpf s . ifs 


=0000 



# . lmo 117 

hmte=0117 pmte=%fdf 5df 60 mf lags=0428alc9 e:\os2\cdfs.ifs 
seg sect psiz vsiz hob sel flags 

0001 0002 8ed3 8ed4 0000 08f0 8d60 code shr prel rel 

0002 004a 0964 OadO 0000 08e8 8c41 data prel 

# 


We use .M to find that the owner of 8f0:0 is vmkshrw. 

So, we look at the descriptor for 8f0 to find it's base address. Note that the selectors assigned to kernel heap blocks address the data 
portion only. 

We dump out 0x1 0 bytes before the selector base to show the block header to be 0x52008ee0 0x08f0ff49. This tells us the length of the 
block including header is 8ee0. (Data sizes are rounded up to the next quad-word). The user of the block is ff49. 

Note: 


The following short cut could have been used: 

dd % < 8 f 0 : 0) -10 


.MO ff49 shows fsd2. This is the second file system driver to initialise. 

.LML will list DLLs, Fonts, and FSDs, newest first. Counting back from the end we see FSD1 is FIPFS and FSD2 is CDFS. 
.LMO 117 confirms that 8f0:0 does belong to CDFS.IFS. 


Resident Heap Blocks 


Kernel resident heap blocks are of two types, regular and attributed. 

Regular blocks are the simplest and most common type. They have the form: 


<simple header><data> 

<simple header> is a dword (32-bits) having the following layout 
cownerxprev block free flagxsize in dwordsxyielded flagxtype flag> 


Field 


Bits 


Description 


owner 31-16 

previous block 15 
free flag 

size in dwords 14-2 
yielded flag 1 

type flag 0 


Owner of heap block. This is 
either a system owner (value between 
0xff2d and 0xfff8, or a 
memory handle/pseudo handle such as 
an MTE pseudo-handle. 

1 if previous block is free, else 0 

Size of the block including the 
header in dwords . 

1 if a free block search yielded 
the CPU while looking at this block, 
else 0 

0 (indicates Regular Block) 


Extended blocks contain a two-part header and have the following form: 

<size headerxdataxheader extension> 

<size header> is a dword (32-bits) having the following layout 
<extra flagsxsize in dwordsxyielded flagxtype flag>. 


Field 


Bits 


Description 



extra flags 


31-24 Additional flags. 

Bit 31 - set if block is free 
Bit 30 - set if prev block is free 
Bits 29-24 - reserved and 0 


size in dwords 
yielded flag 


type flag 


23-2 Size of the block including the 

header in dwords . 

1 1 if a free block search yielded 

the CPU while looking at this block, 
else 0 

0 1 (indicates Extended Block) 


<data> is the data area available for use by the client and is 
always dword granular and dword aligned. 


<header extension> is a dword-granular structure containing 
the following information 


<owner>< select or ><hmte><pad> 


Field 

Bits 

Description 

owner 

63-48 

Owner of heap block. This is 
either a system owner (value between 
0xff2d and 0xfff8, or a 
memory handle/pseudo handle such as 
an MTE pseudo-handle. 

selector 

47-32 

GDT selector mapping block's data 
else null. 

hmte 

31-16 

hmte associated with this heap block? 

pad 

15-0 

padding for double word alignment 


When a block is free, its data portion contains additional information. The first two dwords contain forward and backward pointers to the next 
and previous blocks on the free list. The last dword contains a copy of the previous block pointer. Note that extended free blocks do not 
have an owner field, so bit 31 of their header is set indicating that they are free. 

The hmte field of the header extension is no longer used for any specific purpose. 

Now for an example of a regular heap block. 

# .s 47 

Current slot number: 0047 


# . pb # 

Slot Sta BlockID Name Type Addr Symbol 

0047# blk fe04c8e8 PMSHL32 

# .m %fe04c8e8 


*har par cpg va fig next prev link hash hob hal 

0003 %fef If 04c 00001000 %fdflf000 001 0002 0020 0000 0000 0003 0000 


har hobnxt figs own hmte 
0003 f f 08 0000 f fee 0000 
%fe04c8e8-10 


sown,cnt It st 
0000 00 06 00 


hob 
0003 
# dd 
%fe04c8d8 
%fe04c8e8 
%fe04c8f 8 
%fe04c908 
%fe04c918 
%fe04c928 
%fe04c938 
%fe04c948 


00031c3f 

00000010 

00000010 

fe0c767c 

00000000 

00000000 

00000000 

00000000 


00000000 

00000000 

00000000 

feOcOeeO 

00000000 

00000000 

00000000 

00000000 


00000000 

fe040001 

fe040001 

00000000 

00000000 

00000000 

00000000 

00000000 


f fc20010 
f f C20010 
f fe900a8 
00000000 
00000000 
00000000 
00000000 
00000000 


xf 

00 vmkrhrw 


=0000 


# .mo ffc2 
ffc2 semstruc 


# .d sem32 %fe04c8e8 


Type: Private Event 
Flags : Reset 
pMuxQ: 00000000 
Post Count: 0000 
Open Count: 0001 
Create Addr: 0010fe04 



# .p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0047# OOOd 000a OOOd 0004 blk 0200 7bdlf000 7bdfal88 7bde06b8 11 PMSHL32 


In this example we are interested in slot 47. Its Blockld is owned by vmkrhrw 
We dump the heap block from 0x10 bytes before the start. 

Note that the low order bit of the header is 0, therefore a regular block. 

Since the two low order bit are flags and the size is in double words we conveniently ignore these to obtain the size in bytes, which happens 
to be 0x10. 


The block is owned by ffc2, which .mo tells us is semstruc. 

This is very good news because all the semstruc owner relates to the 32-bit semaphore APIs. The .D command formats these for us. 

Finally note that if we attempt to look at this from the application perspective we see from .P that the TSD is swapped out (Disp is blank). 
This means that the user registers for slot 47 can't be loaded. Furthermore attempts to look at the registers are unpredictable as DF and 
KDB will have not changed the values since they last loaded registers. 

This is a case where Blockld analysis will give us a clue even if the application data is unavailable. 

Lastly we look at an extended heap block. 

# .s 4b 

Current slot number: 004b 

# . pb # 

Slot Sta BlockID Name Type Addr Symbol 

004b# blk 21a0ade0 WKSTAHLP 

# .m 21a0:ade0 

*har par cpg va fig next prev link hash hob hal 

0003 %fef If 04c 00001000 %fdflf000 001 0002 0020 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 f f 08 0000 ffec 0000 0000 00 06 00 00 vmkrhrw 

# dg 21a0 

2 laO Code Bas=fe070000 Lim=0000bd5b DPL=0 P RE A 


# dd %fe07 

%fe06f f f 0 

%fe070000 

%fe070010 

%fe070020 

%fe070030 

%fe070040 

%fe070050 

%fe070060 


0000-10 

00000000 

10d0006b 

3c600104 

6aec8b55 

8d026a00 

Ie7ec41f 

27e2830e 

4000c2f7 


00000000 
9090cbcb 
6aec8b55 
8d026a02 
46c6d866 
f 714568b 
29558826 
C0330574 


fe06fd72 
90 90cb90 
8d026a01 
0aebd866 
561e00ee 
750001c2 
2605eb5a 
f70d39e9 


4000bd6d 
000af390 
16ebd866 
6aec8b55 
21906857 
568b520e 
002 945c6 
748000c2 


# dd %fe070000-4+bd6c-10 


%fe07bd58 

%fe07bd68 

%fe07bd78 

%fe07bd88 

%fe07bd98 

%fe07bda8 

%fe07bdb8 

%fe07bdc8 

# 


fee2e9de 
f fe9008c 
00000000 
00000000 
00000000 
fe07bd6a 
00000000 
00000000 


00000000 
fe06fd70 
00000000 
00000000 
00000000 
f fe90048 
00000000 
00000000 


f f4c21a0 
fe02aa70 
00000000 
00000000 
00000000 
00000201 
00000000 
00000000 


fdf If f 32 
00000000 
00000000 
00000000 
00000000 
00000000 
02010000 
OOOOOOed 


# .mo f f 4 c 
ff4c fsd5 


# . 1ml 

hmte=0982 pmte=%fe0elal4 
hmte=097e pmte=%fe0ela54 
hmte=0979 pmte=%fe0elbac 
hmte=096b pmte=%fe0eld60 
hmte=0164 pmte=%fe02cc40 


mflags=0408bl86 
mflags=0408bl86 
mflags=0408bl86 
mflags=0408bl86 
mf lags=04 98blc8 


e : \ibmlan\netlib\splla . dll 
e : \ibmlan\netlib\lrhml . dll 
e : \ibmlan\netlib\lrnsl . dll 
e : \ibmlan\netlib\netibm . dll 
e : \os2\dll\sysmono . fon 



hmte=0181 
hmte=031b 
hmte=0306 
hmte=01 60 
hmte=0117 
hmte=00d2 


pmte=%fe02ccb0 
pmte=%fe02af 18 
pmte=%fe059f 90 
pmte=%fe01f f 4c 
pmte=%fdf 5df 60 
pmte=%fdf 53990 


mf lags=4 4 98bld5 
mf lags=0428alc9 
mf lags=0428alc9 
mf lags=0428alc9 
mf lags=0428alc9 
mf lags=0428alc9 


e 

e 

e 

d 

e 

e 


\os2\dll\pmatm.dll 
\ibmlan\netprog\netwksta . 200 
\netware\nwif s . if s 
\dataex2\iwsf sd2 . if s 
\os2\cdf s . if s 
\os2\hpf s . if s 


# . lmo 31b 


hmte= 

=031b 

pmte= 

=%fe02af 18 

mf lags=0428alc9 e:' 

\ibmlan\netprog\netwksta . 200 

seg 

sect 

psiz 

vsiz 

hob 

sel 

flags 




0001 

0003 

2a8a 

ffdc 

0000 

2190 

8d4 1 

data 

prel rel 


0002 

0019 

ld93 

ld94 

0000 

2198 

8d60 

code 

shr 

prel 

rel 

0003 

0028 

bd5c 

bd5c 

0000 

2 laO 

8d60 

code 

shr 

prel 

rel 

0004 

0088 

f d62 

f d62 

0000 

21a8 

8d60 

code 

shr 

prel 

rel 

0005 

0108 

606a 

606a 

0000 

2 lbO 

8d60 

code 

shr 

prel 

rel 

0006 

0139 

3492 

3492 

0000 

21b8 

8d60 

code 

shr 

prel 

rel 

0007 

0154 

002e 

002f 

0000 

2 IcO 

8c4 1 

data 

prel 


0008 

0155 

04bb 

04bb 

0000 

2 lc8 

8d60 

code 

shr 

prel 

rel 


What does Blockld 0x21a0ade0 represent? 

We assume selectonoffset and discover the owner is vmkshrw. 

We dump the descriptor for selector 21 aO to find its base address. 

Next we dump 0x10 bytes before the descriptor base to see the heap block header. 

In this example the low order bit of the header is 1 so we have to look at the header extension for the owner information. 
Adding the length to the base and backing off 0x10 bytes again we uncover the block header extension. 

Note: 


The following short cut could have been used: 

dd % (21a0 : 0) -4+bd6c-10 


In this case the owner is ff4c or fsd5. This is the 5th FSD to initialise. 

We list the FSDs by using .LML and pick the 5th from the bottom. This turns out to be netwksta.200. 


Blocking on a ChildWait 

When a process calls DosWaitChild and blocks waiting for a child process to terminate, the Blockld is of the form: 

ffcapppp where pppp is the process id of the waiting 

thread. 


The Blockld doesn't help us pin-point the processes being waited for. 

All the child process have to be examined. The process status byte at offset Oxa into the Local information segment has either of the 
following bits set if the parent cares about termination of the child: 

0x10 The parent cares 

0x20 The parent did an exec-and-wait 

The local information segment is embedded in the PTDA at the following offsets: 



Ox7ee 


Retail 2.11 


0x7f6 


Debug 2.11 


0x5be 


Retail 3.0 


05c6 


Debug 3.0 


Blocking on a RAMSEM 


Potentially this is the most problematical type of wait to deal with. The Blockld is conventional and of the form: 


f f fexxxx 


where xxxx is taken from the low order word 
of the user's RAMSEM. 


There is no accountability associated with this type of semaphore. It is the responsibility of the user to manage their own accounting 
information. Accordingly most applications tend to imbed RAMSEMs into larger structures, which contain information such as use counts, 
owner identification, timeouts. 

Two structures in particular are in common use: 

The Fast Safe RAMSEM 

The PM Fast Safe RAMSEM 

The first step with RAMSEM Blocklds is to locate the user's RAMSEM address. 

Next check ownership just in case this gives a clue to the associated process. 

Ownership is indicated by a non-zero value in byte 0 of the RAMSEM. Very occasionally a RAMSEM is owned by the system. When this 
happens happens the ownership flags takes the value of the owning process. 

We hope that the RAMSEM is embedded in either a Fast Safe RAMSEM or PM Fast Safe RAMSEM. 

Both of these structures have a length prefix. The PM version is 0x12 and the non-PM version OxOe. 

Display storage before the RAMSEM and examine offset -0x12. Is this word 0x0012? If not then this is not a PM FSRS. Try -Oxe. Does that 
contain OxOOOe? if not then we will have to resort to more speculative analysis. 

If either of these lengths correspond, look at the next two words, these contain the owning PID and TID. See whether this process and 
thread exists and what it is doing. 

Note: 

Tid is sometimes 0 when there is only one thread in a process. 


If this technique fails us then check the owner of the semaphore address, which is saved in TCB_Semlnfo and displayed by the .PB 
command. The owner of the semaphore, if it has not died, has to one of its accessors. If the RAMSEM is located in a Private Arena, then the 
owner is limited to one of the threads of the process that has blocked, if it is in shared storage, then the owned will be a thread in one of the 
processes on the VMCO chain. If we are lucky, the number of possibilities will be small, though this is not guaranteed. 

The following example illustrates this technique: 


>>> Slot 31 is blocked. Why? 

.pb 31 

Slot Sta BlockID Name Type Addr Symbol 

0031 blk fffeOlba aires RamSem e69f :000a 


>>> Bad news! a RamSem. First check to see if its imbedded in a 
>>> FastSafeRamSem. We look at the RamSem address, back a few bytes 

##.s 31 

##dw e69f:000a-10 

Past end of segment: e69f : f f f f f f fa 
>>> It can't be a PM FSRamSem 


##dw e69f:000a-a 


e69f: 00000000 

OOOe 

0019 

0000 

0000 

0000 

Olff 

Olba 

0000 

e69f : 00000010 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f : 00000020 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f : 00000030 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f : 00000040 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f : 00000050 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f: 00000060 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e69f : 00000070 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 


>>> But it does look like a normal Fast Safe RamSem 

>>> Pid 19, Tid=0 (this is OK if just one thread in process 19) . 

##.p 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe3a000 

f fe3c7d4 

f fe3c620 

le7c 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

7b92a000 

f fe3c7d4 

7bb28020 

1 f 3c 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

7b92c000 

f fe3c7d4 

7bb281d4 

lf50 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

081f 

7b92e000 

f fe3c7d4 

7bb28388 

1 f 4 8 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

7b930000 

f fe3c7d4 

7bb2 853c 

1 f 2 0 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

7b932000 

f fe3c7d4 

7bb286f 0 

1 f 3c 

00 

*asyncr 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

OOOd 

0006 

0001 

0006 

0002 

blk 

0800 

7b940000 

7bb4 60d0 

7bb2 92dc 

led4 

01 

pmshell 

OOOe 

0006 

0001 

0006 

0003 

blk 

0800 

7b942000 

7bb4 60d0 

7bb2 94 90 


01 

pmshell 

OOOf 

0006 

0001 

0006 

0004 

blk 

0800 

7b944000 

7bb4 60d0 

7bb2 9644 


01 

pmshell 

0010 

0006 

0001 

0006 

0005 

blk 

0800 

7b946000 

7bb4 60d0 

7bb2 97f 8 


01 

pmshell 

0007 

0006 

0001 

0006 

0006 

blk 

0200 

7b934000 

7bb4 60d0 

7bb288a4 

lecc 

01 

pmshell 

0013 

0006 

0001 

0006 

0007 

blk 

0200 

7b94c000 

7bb4 60d0 

7bb2 9dl4 

lecc 

01 

pmshell 

0015 

0006 

0001 

0006 

0008 

blk 

0200 

7b950000 

7bb4 60d0 

7bb2a07c 


01 

pmshell 

0016 

0006 

0001 

0006 

0009 

blk 

0200 

7b952000 

7bb4 60d0 

7bb2a230 


01 

pmshell 

0017 

0006 

0001 

0006 

000a 

blk 

0800 

7b954000 

7bb4 60d0 

7bb2a3e4 


01 

pmshell 

0018 

0006 

0001 

0006 

000b 

blk 

0800 

7b956000 

7bb4 60d0 

7bb2a5 98 


01 

pmshell 

0019 

0006 

0001 

0006 

000c 

blk 

0800 

7b958000 

7bb4 60d0 

7bb2a74c 

leb8 

01 

pmshell 

001a 

0006 

0001 

0006 

OOOd 

blk 

0804 

7b95a000 

7bb4 60d0 

7bb2a900 

lea8 

01 

pmshell 

001b 

0006 

0001 

0006 

OOOe 

blk 

0804 

7b95c000 

7bb4 60d0 

7bb2aab4 

lebO 

01 

pmshell 

001c 

0006 

0001 

0006 

OOOf 

blk 

0500 

7b95e000 

7bb4 60d0 

7bb2ac68 

lea8 

01 

pmshell 

OOld 

0006 

0001 

0006 

0010 

blk 

0800 

7b960000 

7bb4 60d0 

7bb2aelc 

lbbO 

01 

pmshell 

OOle 

0006 

0001 

0006 

0011 

blk 

0800 

7b962000 

7bb4 60d0 

7bb2af dO 

lb8c 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

OOlf 

0006 

0001 

0006 

0012 

blk 

0200 

7b964000 

7bb4 60d0 

7bb2bl84 

leb8 

01 

pmshell 

0009 

0007 

0006 

0007 

0001 

blk 

0800 

7b938000 

7bb44020 

7bb28c0c 


00 

harderr 

0011 

0007 

0006 

0007 

0002 

blk 

0800 

7b948000 

7bb44020 

7bb2 99ac 


00 

harderr 

0012 

0007 

0006 

0007 

0003 

blk 

0800 

7b94a000 

7bb44020 

7bb2 9b60 


00 

harderr 

000a 

0003 

0000 

0003 

0001 

blk 

0200 

7b93a000 

7bb4484c 

7bb2 8dc0 


00 

lanmsgex 

000b 

0004 

0000 

0004 

0001 

blk 

080b 

7b93c000 

7bb45078 

7bb28f74 

lcf 0 

00 

landll 

000c 

0005 

0000 

0005 

0001 

blk 

0200 

7b93e000 

7bb458a4 

7bb2 912 8 


00 

lsdaemon 

0014 

0008 

0000 

0008 

0001 

blk 

0200 

7b94e000 

7bb468fc 

7bb2 9ec8 


01 

stoplan 

0020 

0009 

0006 

0009 

0001 

blk 

0200 

7b966000 

7bb47128 

7bb2b338 


10 

cmd 

0021 

000a 

0006 

000a 

0001 

blk 

0500 

7b968000 

7bb47954 

7bb2b4ec 

leb8 

11 

pmshell 

0023 

000a 

0006 

000a 

0002 

blk 

0200 

7b96c000 

7bb47954 

7bb2b854 

lecc 

11 

pmshell 

0024 

000a 

0006 

000a 

0003 

blk 

0200 

7b96e000 

7bb47954 

7bb2ba08 

leb8 

11 

pmshell 

0025 

000a 

0006 

000a 

0004 

blk 

0200 

7b970000 

7bb47954 

7bb2bbbc 


11 

pmshell 

0026 

000a 

0006 

000a 

0005 

blk 

0200 

7b972000 

7bb47954 

7bb2bd7 0 

lecc 

11 

pmshell 

0027 

000a 

0006 

000a 

0006 

blk 

0200 

7b974000 

7bb47954 

7bb2bf 24 


11 

pmshell 

0028 

000a 

0006 

000a 

0007 

blk 

0200 

7b976000 

7bb47954 

7bb2c0d8 


11 

pmshell 

0029 

000a 

0006 

000a 

0008 

blk 

0200 

7b978000 

7bb47954 

7bb2c28c 


11 

pmshell 

002a 

000a 

0006 

000a 

0009 

blk 

0200 

7b97a000 

7bb47954 

7bb2c440 


11 

pmshell 

002c 

000a 

0006 

000a 

000b 

blk 

0200 

7b97e000 

7bb47954 

7bb2c7a8 

leac 

11 

pmshell 

002d 

000a 

0006 

000a 

000c 

blk 

0200 

7b980000 

7bb47954 

7bb2c95c 

leb8 

11 

pmshell 

002b 

OOOd 

0006 

OOOd 

0001 

blk 

0200 

7b97c000 

7bb48180 

7bb2c5f 4 

leb8 

12 

mrf ilepm 

0022 

OOOd 

0006 

OOOd 

0002 

blk 

0200 

7b96a000 

7bb48180 

7bb2b6a0 

lecc 

12 

mrf ilepm 

002e 

OOOf 

OOOe 

OOOf 

0001 

blk 

0200 

7b982000 

7bb4 91d8 

7bb2cbl0 


13 

fvp 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

002f 

OOOe 

0006 

OOOe 

0001 

blk 

0200 

7b984000 

7bb4 8 9ac 

7bb2ccc4 


13 

cmd 

0030 

0010 

0006 

0010 

0001 

blk 

0200 

7b986000 

7bb4 9a04 

7bb2ce7 8 

led4 

14 

cmd 

0031 

0018 

0010 

0018 

0001 

blk 

0200 

7b988000 

7bb4a230 

7bb2d02c 

lfOO 

14 

aries 

0032 

0017 

0006 

0017 

0001 

blk 

0400 

7b98a000 

7bb4aa5c 

7bb2dle0 

led4 

15 

cmd 

0033 

0019 

0017 

0019 

0001 

blk 

0300 

7b98c000 

7bb4b288 

7bb2d394 

lfOO 

15 

orian 



>>> Pid 19 is single threaded and is blocked. See what its Block-Id is. 


##.pb 33 

Slot Sta BlockID Name Type Addr Symbol 

0033 blk fffeOlbb orian RamSem e66f:0000 

>>> Once again a RamSem. This time there's no point in looking back 
>>> a few bytes to see if it's imbedded in a FastSafeRamSem because 
>>> the RamSem is allocated at the beginning of segment e66f. 

>>> Our only hope is to see who else has access to this semaphore. 

##.m e66f : 0000 

*har par cpg va fig next prev link hash hob hal 

0420 %fed03aca 00000010 %lccd0000 369 03fl 0075 0000 0000 051b 0000 hco=007ff 
hob har hobnxt figs own hmte sown,cnt It st xf 

051b 0420 0000 4a2c ff82 04fl 0000 00 00 00 00 mshare 

hco=007ff pco=fe85f816 hconext=007b6 hptda=04dl f=16 pid=0019 arorian.exe 
hco=007b6 pco=fe85f6a9 hconext=00000 hptda=04fd f=17 pid=0018 araries.exe 

>>> The RamSem is allocated in Named Shared Storage (mshare is the 
>>> owner) . The only two processes able to access this are Pids 19 and 
>>> 18. Pid 19 is this thread, which we know doesn't own this RamSem 
>>> since it's waiting for it. The leaves 18. 

>>> We can't be certain from the evidence presented so far, but we can 
>>> say: 

>>> Either the RamSem is owned by 18, or it was owned by another 
>>> thread that has since terminated. If it is owned by 18 then we 
>>> have a deadlock between 18 and 19: 

>>> orian.exe owns the FSRamSem and is waiting for the RamSem. 

>>> aries.exe owns the RamSem and is waiting for the FSRamSem. 


Fortunately simple RAMSEMs are becoming something of the past. And now that PM is 32-bit we will not see many Fast Safe RAMSEM 
either. We will look in detail later on at the semaphore structure that has replaced the FSRSEM in PM: the PMSEM and GRESEM. 


The MUX Wait 


The last category of Blocklds to consider is the MUXWAIT. This has a Blockld of the form: 

fffdssss where ssss is the slot id of the waiting thread. 

A MUXWAIT is a multiplex semaphore wait. The semaphore comprising the MUX list may be: 

RAMSEMs 

SYSSEMs 

32-bit Event & Mutex SEMs 
We will consider each of these in turn. 

The first step is to format the muxtable. This comprises 9-byte entries. +0x2 is the slot number of the waiter. +0x5 indicates the type of 
semaphore. +5 is the semaphore handle, which is interpreted according to type as follows: 

0x00 Entry unused 

0x01 handle is offset of SYSSEM from selector 400 


0x02 


Entry is a hob:offset of RAMSEM 



0x03 


Entry is a physical address of a RAMSEM 
Entry points to a 32-bit Event SEM. 


0x04 

The following shows an example formatted MUXTABLE. There are up to 255 entries, but in practise the entries in use are grouped at the 
beginning of the table. 


# db muxtable+ (9*0) 19 


0400 : 000048be c7 48 

14 

00 

02 

la 

07 

be-00 

GH. . 

. . . > . 

# db muxtable+ ( 9*1 ) 

19 








0400 : 000048c7 dO 48 

15 

00 

02 

5c 

07 

be-00 

PH. . 


# db muxtablei ( 9*2 ) 

19 








0400 : 000048d0 ff ff 

15 

00 

02 

78 

07 

be-00 


.x.>. 

# db muxtablei (9*3) 

19 








0400 : 000048d9 e2 48 

If 

00 

02 

58 

07 

fa-03 

bH. . 

.X. z . 

# db muxtablei ( 9*4 ) 

19 








0400 : 000048e2 fd 48 

If 

00 

02 

5c 

07 

fa-03 

} H . . 

. \ . z . 

# db muxtablei (9*5) 

19 








0400 : 000048eb c3 49 

If 

00 

02 

50 

07 

fa-03 

Cl . . 

.P . z . 

# db muxtablei (9*6) 

19 








0400 : 000048f4 57 49 

58 

00 

02 

61 

01 

64-07 

WIX. 

.a.d. 

# db muxtablei ( 9*7 ) 

19 








0400 : 000048fd 06 49 

If 

00 

02 

60 

07 

fa-03 

. I . . 

. ' . z . 

# db muxtablei (9*8) 

19 








0400:00004906 Of 49 

If 

00 

02 

64 

07 

fa-03 

. I . . 

.d. z . 

# db muxtablei (9*9) 

19 








0400 : 0000490f 18 49 

If 

00 

02 

68 

07 

fa-03 

. I . . 

. h . z . 

# db muxtablei ( 9*a) 

19 








0400:00004918 a8 49 

If 

00 

02 

6c 

07 

fa-03 

(I. . 

. 1 . z . 

# db muxtablei ( 9*b) 

19 








0400:00004921 2a 49 

58 

00 

01 

fO 

53 

00-00 

*IX. 

•pS. . 

# db muxtablei ( 9*c) 

19 








0400:0000492a cc 49 

30 

00 

03 

02 

a7 

fl-00 

LI 0 . 

. . ’q. 

# db muxtablei ( 9*d) 

19 








0400:00004933 3c 49 

lb 

00 

01 

9c 

53 

00-00 

<1 . . 

. .s . . 

# db muxtablei ( 9*e) 

19 








0400:0000493c be 48 

lb 

00 

03 

da 

a6 

fl-00 

>H . . 

. Z & C[ . 

# db muxtablei ( 9*f ) 

19 








0400:00004945 4e 49 

63 

00 

01 

fc 

53 

00-00 

NIc. 

. IS. . 

# db muxtablei (9*10) 

19 








0400 : 0000494e eb 48 

63 

00 

01 

32 

54 

00-00 

kHc . 

. 2T . . 

# db muxtablei (9*11) 

19 








0400:00004957 60 49 

58 

00 

01 

e4 

53 

00-00 

' IX. 

.dS . . 

# db muxtablei ( 9*12 ) 

19 








0400:00004960 ba 49 

58 

00 

01 

ea 

53 

00-00 

: IX. 

. jS. . 

# db muxtablei (9*13) 

19 








0400:00004969 72 49 

57 

00 

01 

ba 

53 

00-00 

rlW . 

. :S . . 

# db muxtablei ( 9*14 ) 

19 








0400:00004972 7b 49 

57 

00 

01 

c0 

53 

00-00 

{ IW. 

• 0S. . 

# db muxtablei (9*15) 

19 








0400:0000497b 84 49 

57 

00 

01 

c6 

53 

00-00 

. IW. 

.FS . . 

# db muxtablei (9*16) 

19 








0400:00004984 8d 49 

57 

00 

01 

CC 

53 

00-00 

. IW. 

.LS . . 

# db muxtablei ( 9*17 ) 

19 








0400 : 0000498d 96 49 

57 

00 

01 

d2 

53 

00-00 

. IW. 

.RS . . 

# db muxtablei (9*18) 

19 








0400:00004996 9f 49 

57 

00 

01 

d8 

53 

00-00 

. IW. 

.XS . . 

# db muxtablei (9*19) 

19 








0400 : 0000499f f4 48 

57 

00 

01 

de 

53 

00-00 

tHW. 

. ~S . . 

# db muxtablei ( 9*la) 

19 








0400 : 000049a8 bl 49 

21 

00 

02 

a8 

07 

fa-03 

11 ! . 

. ( . z . 

# db muxtablei ( 9*lb) 

19 








0400 : 000049bl 33 49 

21 

00 

03 

ee 

a6 

fl-00 

31 ! . 

. n&q. 

# db muxtablei ( 9*lc) 

19 








0400 : 000049ba 45 49 

58 

00 

01 

f0 

53 

00-00 

EIX . 

• pS. . 

# db muxtablei ( 9*ld) 

19 








0400 : 000049c3 d9 48 

If 

00 

02 

54 

07 

fa-03 

YH. . 

. T . z . 

# db muxtablei ( 9*le) 

19 








0400 : 000049cc d5 49 

00 

00 

00 

00 

00 

00-00 

UI . . 


# db muxtablei ( 9*lf ) 

19 








0400 : 000049d5 de 49 

00 

00 

00 

00 

00 

00-00 

"I . . 


# db muxtablel (9*20) 

19 








0400 : 000049de el 49 

00 

00 

00 

00 

00 

00-00 

gl. . 


# db muxtablei (9*21) 

19 








0400 : 000049e7 fO 49 

00 

00 

00 

00 

00 

00-00 

pi. . 



# dp %%fla6da 12 



In this example there are only semaphore types 0,1,2 and 3. We will illustrate unravelling each of these in turn. For type 4 see the later 
section on 32-Bit Semaphores. 


The SYSSEM 


The SYSSEM 


The SYSSEM block id points to a SYSSEM Table Entry. 

Note: 


In a MUXWAIT only the offset is recorded in the MUX table entry. This should be used with selector 400. 

In a single SYSSEM, the Blockld is the selector:offset to the SYSSEM Table Entry. The .PB command will display the SYSSEM 
name. 


The example below is from a MUXWAIT which includes a SYSSEM 
>> The MUXTABLE entry for slot 58. SYSSEM offset = 53f0 

# db muxtablet ( 9*b) 19 

0400:00004921 2a 49 58 00 01 fO 53 00-00 *IX..pS.. 

# .p 58 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0058 0014 0000 0014 0004 blk 021f 7bd30000 7bdfd260 7bde23f0 Oeac 10 WKSTA 

# . pb 5 8 

Slot Sta BlockID Name Type Addr Symbol 

0058 blk fffd0058 WKSTA MuxWait 


>> The SYSSEM Data Table Entry 
>> slot = 0058 
>> flag = 02 

>> 01= waiting 

>> 02= mux waiting 

>> 04= owner (pid/tid) died 

>> 08= exclusive syssem 

>> 10= name entry needs removing 

>> 20= tid owner died 

>> 40= exit list thread owns this sem 


>> reference count = 01 

>> request count (by this owner) = 0 

>> padding=00 


# db 400 : 53f 0 16 

0400 : 000053f 0 58 00 02 01 00 00 


X 


>> SYSSEM names are stored in a Record Management Package (RMP) 
>> whose selector is the high word of: 

# dd syssemrmphdl 11 
0400:0000595a 04d00004 


>> The RMP has a 0x14 byte header followed by variable length entries. 

>> Each entry is prefixed with a word length followed by the entry data. 

>> The entry data is the word offset of the corresponding SYSSEM Data Table 
>> followed by offset 2 - n of the semaphore name, (the offset overlays 
>> the first two bytes of the name which are always 'SE') . 


>>Scan the table looking for 
# db 4d0 : 0 

04d0 : 00000000 00 06 dO 02 Od 
04d0 : 00000010 36 ff 00 00 10 
04d0 : 00000020 50 55 50 00 10 
04d0 : 00000030 54 53 43 00 12 
04d0 : 00000040 58 2e 45 52 52 
04d0 : 00000050 41 45 58 2e 4c 


entry with offset 53f0... 

01 5b 03-01 00 00 00 00 04 00 
00 5a 53-45 4d 5c 56 49 4f 50 
00 60 53-45 4d 5c 56 49 4f 50 
00 66 53-45 4d 5c 44 41 54 41 
00 12 00-6c 53 45 4d 5c 44 41 
4 f 47 00-14 00 72 53 45 4d 5c 


00 . .P . . . [ 

4 f 6 ZSEMWIOPO 

52 PUP . . . ' SEMWIOPR 
45 TSC . . . f SEM\DATAE 
54 X . ERR . . . 1SEM\DAT 
49 AEX.LOG. . ,rSEM\I 



04d0 : 00000060 

50 

43 

51 

55 

45 

55 

45 

2e-53 

45 

4d 

00 

12 

00 

78 

53 

PCQUEUE . SEM . . .xS 

04d0 : 00000070 
# d 

04d0 : 00000080 

45 

4d 

5c 

50 

4d 

44 

52 

41-47 

2e 

53 

45 

4d 

00 

14 

00 

EM\PMDRAG . SEM . . . 

7e 

53 

45 

4d 

5c 

4c 

4b 

4e-45 

44 

30 

30 

30 

2e 

53 

45 

~SEM\LKNED000 . SE 

04d0 : 00000090 

4d 

00 

14 

00 

84 

53 

45 

4d-5c 

4c 

4b 

4e 

45 

44 

30 

30 

M. . . . SEM\LKNED00 

04d0 : OOOOOOaO 

31 

2e 

53 

45 

4d 

00 

14 

00-8a 

53 

45 

4d 

5c 

4c 

4b 

4e 

1 . SEM. . . . SEM\LKN 

04d0 : OOOOOObO 

45 

44 

30 

30 

32 

2e 

53 

45-4d 

00 

14 

00 

90 

53 

45 

4d 

ED002 . SEM. . . . SEM 

04d0 : 000000C0 

5c 

4c 

4b 

4e 

45 

44 

30 

30-33 

2e 

53 

45 

4d 

00 

13 

00 

\LKNED003 . SEM. . . 

04d0 : OOOOOOdO 

96 

53 

45 

4d 

5c 

53 

4d 

47-43 

4 f 

4e 

54 

2e 

53 

45 

4d 

. SEM\SMGCONT . SEM 

04d0 : OOOOOOeO 

00 

13 

00 

9c 

53 

45 

4d 

5c-50 

4d 

48 

44 

45 

52 

52 

2e 

.... SEM\PMHDERR . 

04d0 : OOOOOOfO 
# d 

04d0 : 00000100 

53 

45 

4d 

00 

19 

00 

a2 

53-45 

4d 

5c 

4e 

50 

49 

50 

45 

SEM. . . ”SEM\NPIPE 

53 

5c 

52 

49 

50 

56 

41 

4e-2e 

57 

4e 

4b 

00 

19 

80 

00 

S \ RIP VAN . WNK . . . . 

04d0 : 00000110 

00 

79 

02 

5c 

49 

42 

4d 

4c-41 

4e 

5c 

53 

49 

4e 

47 

4c 

.y . \IBMLAN\SINGL 

04d0 : 00000120 

45 

2e 

52 

43 

46 

00 

19 

00-ae 

53 

45 

4d 

5c 

54 

49 

4d 

E.RCF. . . . SEM\TIM 

04d0 : 00000130 

45 

58 

45 

43 

5c 

49 

53 

5c-4c 

4 f 

41 

44 

45 

44 

00 

17 

EXEC\ IS \LOADED . . 

04d0 : 00000140 

00 

b4 

53 

45 

4d 

5c 

4d 

41-47 

4e 

55 

4d 

5c 

4d 

41 

49 

. 4SEM\MAGNUM\MAI 

04d0 : 00000150 

4e 

2e 

53 

45 

4d 

00 

16 

00 -ba 

53 

45 

4d 

5c 

4e 

45 

54 

N.SEM. . . :SEM\NET 

04d0 : 00000160 

5c 

42 

52 

4 f 

57 

53 

4e 

43-42 

2e 

30 

00 

16 

00 

cO 

53 

\BROWSNCB . 0 . . . 0S 

04d0 : 00000170 
# d 

04d0 : 00000180 

45 

4d 

5c 

4e 

45 

54 

5c 

42-52 

4 f 

57 

53 

4e 

43 

42 

2e 

EM\NET\BROWSNCB . 

31 

00 

16 

00 

c6 

53 

45 

4d-5c 

4e 

45 

54 

5c 

42 

52 

4 f 

1 . . . FSEM\NET\BRO 

04d0 : 00000190 

57 

53 

4e 

43 

42 

2e 

32 

00-16 

00 

cc 

53 

45 

4d 

5c 

4e 

WSNCB.2. . . LSEM\N 

04d0 : OOOOOlaO 

45 

54 

5c 

42 

52 

4 f 

57 

53-4e 

43 

42 

2e 

33 

00 

16 

00 

ET\BROWSNCB . 3 . . . 

04d0 : OOOOOlbO 

d2 

53 

45 

4d 

5c 

4e 

45 

54-5c 

42 

52 

4 f 

57 

53 

4e 

43 

RSEM\NET\BROWSNC 

04d0 : 000001C0 

42 

2e 

34 

00 

16 

00 

d8 

53-45 

4d 

5c 

4e 

45 

54 

5c 

42 

B . 4 . . ,XSEM\NET\B 

04d0 : OOOOOldO 

52 

4 f 

57 

53 

4e 

43 

42 

2e-35 

00 

16 

00 

de 

53 

45 

4d 

ROWSNCB . 5 . . . A SEM 

04d0 : OOOOOleO 

5c 

4e 

45 

54 

5c 

42 

52 

4 f-57 

53 

4e 

43 

42 

2e 

36 

00 

\NET\BROWSNCB . 6 . 

04d0 : OOOOOlfO 
# d 

04d0 : 00000200 

18 

00 

e4 

53 

45 

4d 

5c 

4e-45 

54 

5c 

48 

4 f 

53 

54 

41 

. . dSEM\NET\HOSTA 

4e 

4e 

43 

2e 

53 

45 

4d 

00-ld 

00 

ea 

53 

45 

4d 

5c 

4e 

NNC . SEM. . . jSEM\N 

04d0 : 00000210 

45 

54 

5c 

57 

4b 

53 

54 

41-5c 

49 

4e 

54 

45 

52 

47 

54 

ET\WKSTA\INTERGT 

04d0 : 00000220 

2e 

53 

45 

4d 

00 

Id 

00 

f 0-53 

45 

4d 

5c 

4e 

45 

54 

5c 

. SEM. . . pSEM\NET \ 

04d0 : 00000230 

57 

4b 

53 

54 

41 

5c 

52 

45-4c 

4 f 

47 

4 f 

4e 

2e 

53 

45 

WKSTA\ RELOGON . SE 

04d0 : 00000240 

4d 

00 

Of 

00 

f 6 

53 

45 

4d-5c 

4d 

53 

52 

56 

57 

55 

30 

M. . . vSEM\MSRVWU0 

04d0 : 00000250 

00 

14 

00 

a8 

53 

45 

4d 

5c-4c 

4b 

4e 

45 

44 

30 

30 

34 

. . . (SEM\LKNED004 

04d0 : 00000260 

2e 

53 

45 

4d 

00 

14 

00 

02-54 

45 

4d 

5c 

4c 

4b 

4e 

45 

. SEM. . . . TEM\LKNE 

04d0 : 00000270 

44 

30 

30 

35 

2e 

53 

45 

4d-00 

12 

80 

0d 

01 

5b 

03 

4e 

D005 . SEM [ .N 


>> We find the entry at 4d0:227 

>> The semaphore name is SEM\NET\WKSTA\RELOGON . SEM 


The MUX RAMSEM 


In a MUX wait the RAMSEM id is recorded as a hob:offset. 


In this example we look at the RAMSEM being waited on by slot 1 f. 

>> The MUX table entry: 

>> slot = If, type = 2, hob= 03fa, offset=0758 

0400 : 000048d9 e2 48 If 00 02 58 07 fa-03 bH...X.z. 

# db muxtablet ( 9*4 ) 19 


>> Use .MOC to find the linear address 

# .moc 3fa 

*har par cpg va fig next prev link hash hob hal 

039b %fef 23f 5c 00000010 %la350000 379 0413 039c 0000 0000 03fa 0000 hco=00c45 

hob har hobnxt figs own hmte sown,cnt It st xf 

03fa 039b 0000 082c 03fb 03fb 0000 00 00 00 00 shared e : pmshapi . dll 

hco=0c45 pco=ffe77d74 hconext=00ee0 hptda=0873 f=16 pid=00e0 e:cmd.exe 

>> This is owned by PMSHAPI. LN gives a lable. 

# In %la350758 

%la350750 PMSHAPI ASEMRS + 8 



MUX Physical RAMSEM 


In this example the MUX wait entry is for a physical address of a RAMSEM. A physical address would be used where the RAMSEM is 
instance data - that makes it unique among RAMSEMs providing the RAMSEM is not swappable. 

In this example the waiting slot is 1b 

>> Mux table entry for slot lb, type=3 (physical RAMSEM) 

>> The physical address of the RAMSEM is %%00fla6da 
>> We need to determine the owner of this address. 

# db muxtable+ ( 9*e) 19 

0400:0000493c be 48 lb 00 03 da a6 fl-00 >H...Z&q. 

>> Display the page frame structure for frame OOfla: 

# . mp fla 

ffe24538 InUse: pVP=ff4076ce RefCnt=0003 Flg=0 11=01 sl=00 Blk=0006a Frame=00fla 

>> Now display the virtual page structure to see who has backed this 
>> frame: 

# .mv %ff4076ce 

VPI=057b pVP=ff4076ce SOW Frame=0fla Flg=9d0 HobPg=0000 Hob=03df Ref=011 

>> Now we have the hob and page offset into the hob. Display the 
>> linear address of the Hob using .MOC, add the page offset and 
>> the byte index from the physical address to obtain the 
>> virtual address of the RAMSEM 


# .moc 3df 


*har par cpg va fig next prev link hash hob hal 

0382 %fef 23d36 00000010 %la260000 379 0381 0383 0000 0000 03df 0000 hco=00f37 

hob har hobnxt figs own hmte sown,cnt It st xf 

03df 0382 0000 082c 03da 03da 0000 00 01 00 00 shared e:pmwin.dll 

hco=0f37 pco=ffe78c2e hconext=00e8b hptda=0873 f=16 pid=00e0 e:cmd.exe 

>> RAMSEM is at %la2 60000+00000000+6da 
>> RAMSEM is owned by pmwin.dll 

# In %la2606da 
No Symbols Found 


>> LN doesn't work so thunk to a selector : of f set and try again 
>> cheat by looking up the selector assigned to pmwin in its 
>> segment table: 

# . lmo 3da 


hmte= 

=03da pmte=%fdf 21cl4 mflags= 

=0498bl94 

e : \os2\dll\pmwin . dll 





ob j 

vsize 

vbase 

flags 

ipagemap 

cpagemap 

hob 

sel 






0001 

OOOOf 6f 8 

lalbOOOO 

80005025 

00000001 

00000010 

03e9 

dOdf 

r-x 

shr 

alias 

conf 


0002 

0000c24e 

lalcOOOO 

80005025 

00000011 

OOOOOOOd 

03e8 

d0e7 

r-x 

shr 

alias 

conf 


0003 

00008c84 

laldOOOO 

80005025 

OOOOOOle 

00000009 

03e7 

dOef 

r-x 

shr 

alias 

conf 


0004 

0000b6e2 

laleOOOO 

80005025 

00000027 

0000000c 

03e6 

dOf 7 

r-x 

shr 

alias 

conf 


0005 

OOOOeblO 

lalfOOOO 

80005025 

00000033 

OOOOOOOf 

03e5 

dOff 

r-x 

shr 

alias 

conf 


0006 

00006292 

la200000 

8000d025 

00000042 

00000007 

03e4 

dl06 

r-x 

shr 

alias 

conf 

iopl 

0007 

00003738 

la210000 

8000d025 

00000049 

00000004 

03e3 

dlOe 

r-x 

shr 

alias 

conf 

iopl 

0008 

000010c5 

la220000 

80009025 

0000004d 

00000002 

03e2 

dll 6 

r-x 

shr 

alias 

iopl 


0009 

000124d4 

la230000 

80003025 

0000004f 

00000013 

03el 

dllf 

r-x 

shr 

alias 

big 


000a 

000070ca 

la250000 

80001025 

00000062 

00000008 

03e0 

dl2 f 

r-x 

shr 

alias 



000b 

OOOOOada 

la260000 

80001063 

0000006a 

00000001 

03df 

dl37 

rw- 

shr 

prel 

alias 


000c 

00001478 

la270000 

80003063 

0000006b 

00000002 

03de 

dl3f 

rw- 

shr 

prel 

alias 

big 

OOOd 

000023f 8 

la280000 

80001063 

0000006d 

00000003 

03dd 

dl47 

rw- 

shr 

prel 

alias 


OOOe 

00006444 

la290000 

80001063 

00000070 

00000002 

03dc 

dl4 f 

rw- 

shr 

prel 

alias 


OOOf 

00000142 

Ia2a0000 

80001063 

00000072 

00000001 

03db 

dl57 

rw- 

shr 

prel 

alias 


0010 

00000018 

Ia2b0000 

80002063 

00000073 

00000001 

03d9 

dl5f 

rw- 

shr 

prel 

big 


0011 

000003b8 

16100000 

80002079 

00000074 

00000001 

051e 

b087 

r — 

rsrc disc 

shr prel big 

0012 

OOOOOdcc 

161c0000 

80002069 

00000075 

00000001 

0509 

b0e7 

r — 

rsrc shr 

prel big 

0013 

OOOOffbc 

16210000 

80002029 

00000076 

00000010 

0504 

blOf 

r — 

rsrc shr 

big 


0014 

000002f 0 

00000000 

00002039 

00000086 

00000001 

0000 

0000 

r — 

rsrc disc 

shr big 

0015 

00003524 

16120000 

80002029 

00000087 

00000004 

051b 

b097 

r — 

rsrc shr 

big 



# In dl37 : 6dadl37 : 00000 6da PMWIN MSGQUEUESEM1 



Structured Semaphores 


We have discussed the following type of semaphore: 
RAMSEM 
SYSSEM 
FSRAMSEM 
PMFSRAMSEM 

There are three others that occur with regularity in the system: 
KSEM 
32-bit SEM 
GRESEM/PMSEM 


The Kernel Semaphore (KSEM) 


The kernel semaphore is a RAMSEM and EVENT SEM with accountability in-built. 

Many system control block have imbedded KSEMs. Included among these are the PTDA and MFT. 

Some KSEMs are allocated out of the kernel heaps and have the owner mnemonic KSEM. 

When a thread blocks on a KSEM the address (or handle) of the KSEM, or a field within the KSEM, is used as the Blockld depending upon 
the KSEM type. 

For MUTEX KSEMs The Blockld is the address of the beggining of the KSEM structure. 

For Shared KSEMs The Blockld is the address of the Pending Readers count field within the KSEM structure. 

For Exclusive KSEMs The Blockld is the address of the Pending Writers count field within the KSEM stucture. 

Under the debug (ALLSTRICT) kernel the KSEM contains an additional signature 'KSEM'. Always check a Blockld address to see if the 
'KSEM' signature is present. 

.D KSEM will format the KSEM. 

In this example we look at Slot 6c to find out why it will not run. 

# . pb 6 c 

Slot Sta BlockID Name Type Addr Symbol 

006c blk 7bdfc910 DEMOl 

# .m 7bdf c910 

*har par cpg va fig next prev link hash hob hal 

0087 %feflfba4 00000082 %7bdf5000 121 0085 0088 0000 0000 0089 0000 =0000 

hob har hobnxt figs own hmte sown, cnt It st xf 

0089 0087 0000 0325 ffcb 0000 0000 00 00 00 00 ptda 

>> This thread is blocked on an address in (its) PTDA. All PTDA 
>> semaphores are KSEMs . 

# .d KSEM %7bdf c910 

Signature : KSEM Nest: 0001 

Type : MUTEX 

Flags : 00 

Owner : 0041 


PendingWriters : 0001 


>> So the owner is Slot 41. Lets look at him to see what he's up to. 


# .pb 41 

Slot Sta BlockID Name Type Addr Symbol 

0041 blk 04085ca7 DEMOl 

# ,m #408:5ca7 

*har par cpg va fig next prev link hash hob hal 

0079 %fef If a7 0 00000010 %7bf27000 129 0078 0077 0000 0000 007b 0000 sel=0408 

hob har hobnxt figs own hmte sown,cnt It st xf 

007b 0079 0000 0324 ffal 0000 0000 00 00 00 00 sft 

# 

>> Slot 41 is blocked waiting for some file system activity to complete. 

>> We looked at this slot some time ago and found out that it was 
>> waiting to close a device driver. 


The 32-Bit Semaphore Event and Mutex Semaphores 


Block ids for 32-bit sems point to kernel heap allocated structure with object mnemonic semstruc. 

.PB under the KDB usually identifies these as SEM32, but DF doesn't. 

.D SEM32 will format a 32-bit semaphore structure. 

There are several structures that relate to 32-bit semaphores. Each of these is allocated from the kernel heaps and is assigned the following 
meaningful owner id mnemonics: 

semmuxq (Oxffbe) Semaphore Mux Queue. This records instances of single event or mutex semaphores being 

also waited on in a mux wait. 

Semaphore Open Queue. This tracks all processes that have opened a 32-bit semaphore. 

SemRecord. This is a system copy of the user's SemRecord structure, which was created 
when a Mux wait was declared. It correlates user semaphore Ids with semaphore handles. 

The semaphore name string. 

The main 32-bit structure. The address of this forms the Blockld when a thread waits on a 
32-bit semaphore. 

listed above the Open Queue and Mux Queue may be formatted using: 

.D MUXQ 


semopenq (Oxffbf) 
semrec (OxffcO) 

semstr (Oxffcl) 
semstruc (0xffc2) 

Of the associated structures 

.DOPENQ 


In this example we look at the Blockld slot 42 is waiting on. 

# .p 42 Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0042 OOOd 000a OOOd 0002 blk 0200 7bdla000 7bdfal88 7bddfe20 0ed4 11 PMSHL32 

# .pb42 

Slot Sta BlockID Name Type Addr Symbol 

0042 blk feObf 91c PMSHL32 

>> check owner of blockid 

# .m %fe0bf91c 

*har par cpg va fig next prev link hash hob hal 

0003 %fef If 04c 00001000 %fdflf000 001 0002 0020 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown, cnt It st xf 

0003 0003 f f 08 0000 ffec 0000 0000 00 06 00 00 vmkrhrw 

>> kernel swappable heap. Check current user of heap block. 

# dd %fe0bf 91c-10 

%fe0bf 90c ffbfOOOc 00010008 fe0bff20 ffc20014 
%fe0bf 91c 00000011 00000000 feflef94 fcae5a28 


%feObf 92c ffbfOOlO 00010006 fe08f24c fe0bf92e 

%feObf 93c ffbfOOOc 00010006 fe08f7c0 ffa4000c 

%feObf 94c fe0567d0 00010494 ffbfOOOc 0001000a 

%feObf 95c 00000000 ffa4000c fe0bf970 000104ec 

%feObf 96c f fa4000c feflef4c 000200ba ffbfOOOc 

%feObf 97c 00010005 fe0bf758 ffbfOOOc 00010005 

# .mo ffc2 
ffc2 semstruc 

>> This is a 32-bit Semaphore 

# .d sem32 %fe0bf91c 

Type: Shared Event 
Flags: Reset 
pMuxQ: 00000000 
Post Count: 0000 

pOpenQ: feflef94 
pName : fcae5a28 
Create Addr : ffbfOOlO 

# .d openq %feflef94 
PID Open Count 


OOOd 0001 

000a 0001 

# da %fcae5a28 

%fcae5a28 WORKPLAC\LAZYWRIT . SEM 

>> For interest look for the owner of the OPENQ: 

# .m %feflef94 

*har par cpg va fig next prev link hash hob hal 

0003 %fef If 04c 00001000 %fdflf000 001 0002 0020 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 f f 08 0000 ffec 0000 0000 00 06 00 00 vmkrhrw 

# dd %fef lef 94 -10 

%fef lef 84 00000000 00000000 feflOOOl ffbfOOOc 

%fef lef 94 OOOlOOOd fe0bf958 ffc20018 00000009 

%fef lefa4 00000000 00000000 feflef58 fcbl8478 

%fef lefb4 ffbfOOOc OOOlOOOd 00000000 ffc20018 

%fef lef c4 00000009 00000000 00000000 feflefb8 

%fef lefd4 fcbl8458 ff910024 00000007 00000000 

%fef lefe4 00000000 00000000 00000000 00000000 

%fef lef f 4 00000000 00000000 ffea0004 fef2al28 

# .mo ffbfffbf semopenq 

>> For interest look for the owner of the pName: 

# .m %fcae5a28 

*har par cpg va fig next prev link hash hob hal 

0021 %fef If2e0 00001400 %fca5f000 121 0020 0022 0000 0020 0022 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0022 0021 0000 0225 ffef 0000 0000 00 04 00 00 vmkshrw 

# dd %fcae5a28-10 

%f cae5al8 003fldla 0007004a 52000020 OOOOffcl 

%f cae5a28 4b524f57 43414c50 5a414c5c 49525759 

%f cae5a38 45532e54 5412004d 520000c8 0000ff60 

%fcae5a48 005d004a Ibl31bl2 Ibl51bl4 Ibl71bl6 

%f cae5a58 Ibl91bl8 lblblbla lbldlblc lblflble 

%f cae5a68 Ib211b20 Ib231b22 Ib251b24 Ib271b26 

%fcae5a78 Ib291b28 Ib2blb2a Ib2dlb2c Ib2flb2e 

%f cae5a88 Ib311b30 Ib331b32 Ib351b34 Ib371b36 

# .mo f f c 1 
ffcl semstr 


PMSEM/GRESEM 



32-bit PM (WARP) and Graphics Engine use a composite semaphore structure to serialise their resources. 

This semaphore has the structure: 

+0x0 7 byte Signature. 'PMSEM' for PMWIN and 'GRESEM' for PMGRE 

+0x7 386 semaphore byte (PM uses the bts instruction on this under 386 processors otherwise it uses the 486 cmpxchg 

on the pid/tid) 

+0x8 Owner pid (word) 

+0xa Owner tid (word) 

+0xc Owner nested use count (long) 

+0x1 0 Number of waiters 

+0x14 Number of times sem used (zero unless Debug version of PM) 

+0x1 8 Handle for event semaphore 

+0x1 c Address of caller (zero unless Debug version of PM) 

PM uses a technique of polling this semaphore by waiting on the imbedded event semaphore handle for a limited time. 

This technique has the advantage of speed combined with accountability but a thread waiting for a PMSEM or GRESEM may appear 
blocked, ready or running depending on the polling cycle. However it will be executing in a routine with a name such as 
PMRequestMutexSem. If the PMMERGE symbols are loaded this is readily detected. 

The PM and GRE SEMs are contiguous and located at label pmSemaphores. 

The handle (linear address) of the PM/GRE Semaphore is passed on entry to PMREquestMutexSem and tends to be retained in the EDX 
register. 

The following semaphores are defined by PM: 


0 

PMSEM ATOM 

1 

PMSEM USER 

2 

PMSEM VISLOCK 

3 

PMSEM DEBUG 

4 

PMSEM HOOK 

5 

PMSEM HEAP 

6 

PMSEM DLL 

7 

PMSEM THUNK 

8 

PMSEM XLCE 

9 

PMSEM UPDATE 

10 

PMSEM CLIP 

11 

PMSEM INPUT 

12 

PMSEM DESKTOP 

13 

PMSEM HANDLE 

14 

PMSEM ALARM 

15 

PMSEM STRRES 

16 

PMSEM TIMER 

17 

PMSEM CONTROLS 



18 


GRESEM Grelnit 


19 

GRESEM AutoHeap 

20 

GRESEM PDEV 

21 

GRESEM LDEV 

22 

GRESEM CodePage 

23 

GRESEM HFont 

24 

GRESEM FontCntxt 

25 

GRESEM FntDrvr 

26 

GRESEM ShMalloc 

27 

GRESEM GlobalData 

28 

GRESEM DbcsEnv 

29 

GRESEM SrvLock 

30 

GRESEM SelLock 

31 

GRESEM ProcLock 

32 

GRESEM DriverSem 

33 

GRESEM semlfiCache 

34 

GRESEM semFontTable 


In this example one of the shell threads seems to be getting very little CPU, though is frequently ready: 

# .p 3a 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*003a# OOOd 0005 OOOd 000a rdy 0200 abd61000 abe4b5b4 abe2ee60 0ee4 11 PMSHL32 

# . r 

eax=13e30025 ebx=00000000 ecx=000a000d edx=13e7b4d4 esi=ffffffff edi=0068e55c 
eip=lbd0d7ea esp=00637f44 ebp=00637f60 iopl=2 — — — nv up ei pi nz na po nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001ad000 

005b : Ibd0d7ea ff4al0 dec dword ptr [edx+10] ds : 13e7b4e4=00000006 

# In 

%lbd0d770 PMMERGE PMREQUESTMUTEXSEM + 7a 

# db %edx 


%13e7b4d4 

50 

4d 

53 

45 

4d 

00 

00 

00-10 

00 

01 

00 

02 

00 

00 

00 

PMSEM 

%13e7b4e4 

06 

00 

00 

00 

00 

00 

00 

00-05 

00 

01 

80 

00 

00 

00 

00 


%13e7b4f4 

50 

4d 

53 

45 

4d 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

PMSEM 

%13e7b504 

00 

00 

00 

00 

00 

00 

00 

00-06 

00 

01 

80 

00 

00 

00 

00 


%13e7b514 

50 

4d 

53 

45 

4d 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

PMSEM 

%13e7b524 

00 

00 

00 

00 

00 

00 

00 

00-07 

00 

01 

80 

00 

00 

00 

00 


%13e7b534 

50 

4d 

53 

45 

4d 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

PMSEM 

%13e7b544 

00 

00 

00 

00 

00 

00 

00 

00-08 

00 

01 

80 

00 

00 

00 

00 



>> PMSEM owner is pid 10 tid 1 and it has been requested twice by 
tid/pid 10/1. There are 6 waiting threads. 

# .p 42 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0042 0010 0005 0010 0001 blk 0500 abd69000 abe4cl9c abe2fe20 0ed8 13 MRFILEPM 

# . pb 4 2 

Slot Sta BlockID Name Type Addr Symbol 

0042 blk fdf 8841c MRFILEPM 


>> The owner is blocked. 

# .m %fdf 8841c 

*har par cpg va fig next prev link hash hob hal 



0003 %feeef 04c 00001000 %fdeef000 001 0002 0021 0000 0000 0003 0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 f f 05 0000 ffec 0000 0000 00 02 00 00 vmkrhrw 

# dd %fdf 8841c-10 14 

%fdf 8840c 000101c! 00000000 fdf88406 ffc20018 


# .mo ffc2 
ffc2 semstruc 


It .d sem32 %fdf8841c 

Type: Shared Event 
Flags: Reset 
pMuxQ: 00000000 
Post Count: 0000 

pOpenQ: fde305f8 
pName: NULL (anonymous) 
Create Addr : abe2fe20 


# .d openq %fde305f8 
PID Open Count 


0010 0001 

# 

# In pmsemaphores 

9f 3f : 0000b4b4 PMMERGE PMSEMAPHORES 

# dl 9f 3f 

9f3f Data Bas=13e70000 Lim=0000ffff DPL=3 P RW A 

# 

>> The sem we were waiting on was at %13e7b4d4 so must be the 
>> USER SEM. 


=0000 


Involuntary Suspension 


In this section we discuss the mechanisms involved when a thread involuntarily gives up CPU processing time. That is, another thread 
independently causes a thread not to receive or to give up its time-slice. 

The mechanisms available that cause suspension are: 

Pre-emption Another thread of a high priority becomes ready. 

The suspended thread becomes ready and the pre-empting thread runs. 

Note: 

Pre-emption is not possible when running in kernel-mode (specifically when 
InDos is non-zero, which is set shortly after entry to the kernel). Within the kernel 
co-operative multi-tasking operates: threads must yield explicitly (call the 
scheduler) to give up the processor. This applies equally to device drivers and file 
system drivers, which also run in kernel mode. Physical Device Drivers may use 
DevHlp_Yield and DevHlp_TCYield to give up the processor to other threads. 

Critical Section Another thread in the same process enters critical section. 

The critical section thread runs and none of the other threads will run except if a signal 
'fires'. If another ready thead in the same process is selected by the dispatcher for 
running it is held on a temporary queue with its status set to crt. 

Note: 


The Critical Section thread has run status. 

DosSuspendThread Another thread in the same process has issued DosSuspendThread. 


The suspending thread runs and the suspended thread enters frz state. 



Freeze Process Either a Session Manager switch is in progress, a new process has been created 

suspended, a Virtual Device Driver has called the VDHFreezeVDM helper routine or the 
DosDebug DBG_C_Freeze command has been executed against a debugee process. 

The frozen process has a state of frz in all its threads. 


Voluntary suspension is indicated by the blk state. 

When a thread is suspended involuntarily it will normally be in one of the following states: 

rdy Ready and waiting to run. 

crt Ready but prohibited from dispatch by a critical section thread. 

frz Frozen or Suspended by freeze-process or DosSuspendThread. 

The remaining six thread states related to transient system processing on behalf of a thread. These are: 

dly Delayed wake-up. Multiple threads have been woken from a blocked state because they were all waiting on the same 

Blockld and a multiple wake-up was specified to ProcRun. Each delayed thread is queued pending scheduling where 
priority recalculation and the thread's ring 0 stack is checked for presence in memory. If all is well then the thread is 
placed on the ready queue pending dispatch. If not, then the thread is placed on the TSD Daemon's queue for paging 
in the thread's TSD (ring 0 stack). 

tsd The thread is on the TSD Daemon's queue waiting for ring 0 stack page-in. The Daemon runs as an internal thread, 

which is labelled *tsd by the .P command. This thread is responsible for calling the page manager to page in a 
thread's TSD. Because a paging operation involves I/O and is therefore relatively slow, this operation is performed 
under the control of a separate thread. This allows other threads to be processed while the paging operation takes 
place. 

gsk Get Stack request in progress. The TSD Daemon is waiting for the Page Manager to signal completion of the paging 

I/O operation. Effectively a thread in this state is blocked waiting for completion of a TSD paging I/O request. 

bst Boosted Ready State. When the TSD page-in completes successfully, the thread is placed on the dispatchers ready 

queue with a priority boost. This condition is indicated by the boosted ready state. Strictly speaking this is not an 
independent state since no operation is required to take the thread from bst to rdy. 

bad TSD page-in request has failed. This is a serious and terminal condition, which is not expected to occur. It is possible 

that an I/O error has occurred during the TSD page-in request. 

The null state occurs very fleetingly during thread creation and termination. It signifies that the thread's environment 
is incomplete. 

The complete set of scheduler states for a finite state machine, which is illustrated in the following diagram. 



OS/2 Scheduler Finite State Machine 
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Pre-emption and Priority Calculation 


A thread is pre-empted when higher priority work becomes ready to process. Under normal circumstances the pre-empting thread will run 
then give up its time-slice and eventually the original thread will be re-scheduled. 

It is possible for a thread not to be re-scheduled if a higher priority thread will not give up the processor. However, the OS/2 scheduler 
applies dynamic boost to priorities according to resource requirements and makes priority comparisons based on a calculated priority. The 
elements involved in the priority calculation are the following: 

TCBPriClass 

The thread's priority class. There are four classes, which in order of priority are: 

3 Time-critical 

4 Foreground Server (or fixed high) 

2 Regular 

1 Idle 

TCBPriLevel 

The priority delta which may range from 0x00 to 0x1 f. 


TCBPriClassMod 

The priority boosts which may be any of the combined values: 


0x04 

Keyboard Boost 

0x08 

CPU Starvation Boost 

0x10 

Device I/O Boost 

0x20 

Foreground Boost 

0x40 

Window Boost 

0x80 

VDM Simulated Interrupt. 


TCBPriorityMin 

The minimum allowed priority. Normally 0 but set when priority inversion becomes a possibility. This is discussed 
later. 

Priority is calculated by forming an index by ORing TCBPriClass and TCBPriClassMod and reading a constant value from the priority table. 
The low byte of this is then further ORed with the TCBPriLevel. 

The following diagram shows the priority table. 


Table Index = (TCBPriClass | TCBPriClassMod) 


Starved 

08 

— 



+ 

Device I/O 

10 

— 



+ | 

Foreground 

20 

— 



+ | | 

Window 

40 

— 



+ 1 1 1 

VDM Interrupt 

80 

— 




+ — TCBPriClass 

1 





in 

in 

I Not Keyboard 



Keyboard 


in 

+-> Server Idle 

Regular TC 

! 1 

Server Idle 

Regular TC 

IWFDS 


0x300, 

0x100, 

0x200, 

0x800, 

0x300, 

0x100, 

0x200, 

0x800, // 


0x62 f , 

0x100, 

0x61f , 

0x800, 

0x62 f , 

0x100, 

0x61f , 

0x800, // 

s 

0x72f , 

0x100, 

0x71f , 

0x800, 

0x72f , 

0x100, 

0x71f , 

0x800, // 

D- 

0x72f , 

0x100, 

0x71f , 

0x800, 

0x72f , 

0x100, 

0x71f , 

0x800, // 

DS 

0x300, 

0x100, 

0x300, 

0x800, 

0x300, 

0x100, 

0x400, 

0x800, // 

— F — 

0x62 f , 

0x100, 

0x61f , 

0x800, 

0x62 f , 

0x100, 

0x61f , 

0x800, // 

— F-S 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

— FD- 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

— FDS 

0x500 , 

0x100, 

0x500 , 

0x800, 

0x500 , 

0x100, 

0x500 , 

0x800, // 

-W 

0x62 f , 

0x100, 

0x61f , 

0x800, 

0x62 f , 

0x100, 

0x61f , 

0x800, // 

-W — S 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

-W-D- 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

-W-DS 

0x500 , 

0x100, 

0x500 , 

0x800, 

0x500 , 

0x100, 

0x500 , 

0x800, // 

-WF — 

0x62 f , 

0x100, 

0x61f , 

0x800, 

0x62 f , 

0x100, 

0x61f , 

0x800, // 

-WF-S 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

-WFD- 

0x74f , 

0x100, 

0x73f , 

0x800, 

0x74f , 

0x100, 

0x73f , 

0x800, // 

-WFDS 


Notes 

VDM Simulated interrupts always result in a value of 0x800 
Foreground server class is not affected by the keyboard boost. 

Time-critical class is not affected by any boosts. 

Idle class is not affected by any boosts. 

By examining the priority table it is clear that idle class will always be pre-empted by any other class. 
Time-critical class can never be pre-empted by any other class. 

Time-critical threads can only be pre-empted by other time-critical threads with a higher delta. 

Server and Regular class threads may pre-empt each other depending on priority boosts and delta. 



The key to looking at pre-emption problems is to look for other CPU bound threads of a higher priority. In particular time-critical threads. 
.P displays the current calculated priority for each thread. 


Critical Sections 


When a thread enters critical section it effectively suspends all other threads in its process. There is an exception to this. If a signal is sent to 
the process and a signal handler is registered, then thread 1 will be dispatched to run the signal handler regardless of critical section. 

The critical section thread may voluntarily block. 

Other threads may attempt to become ready. If this happens the dispatcher will temporarily suspend them in crt state. 

The appearance of the crt state certainly guarantees that another thread in the same process is in critical section. However, the converse in 
not true: the absence of crt does not preclude another thread from being in a critical section. 

If a thread running in Critical Section blocks on a resource owned by any other thread in the same process then a deadlock will result. 
Because of this it is unwise to call any System API when in Critical Section. 

Thread running in Critical Section have their TCB address stored in their process's PTDA at ptda_pTCBCritSec. 

The following example illustrates locating the critical section thread in a process. 

# .p 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe4b000 

f fe4c7dc 

f fe4c624 

0e84 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

7a49e000 

f fe4c7dc 

7b49c020 

Of 44 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

7a4 9f 000 

f fe4c7dc 

7b4 9cld8 

Of 54 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

0800 

7a4a0000 

f fe4c7dc 

7b4 9c3 90 

Of 24 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

7a4al000 

f fe4c7dc 

7b4 9c54 8 

0f40 

00 

*lazyw 

000a 

0004 

0000 

0004 

0001 

blk 

0200 

7a4a6000 

7b655068 

7b4 9cde0 


00 

LANMSGEX 

*000c# 

0006 

0000 

0006 

0001 

blk 

0804 

7a4a8000 

7b6560b0 

7b4 9dl50 

0c94 

00 

CNTRL 

OOOd 

0006 

0000 

0006 

0002 

blk 

0804 

7a4a9000 

7b6560b0 

7b4 9d308 


00 

CNTRL 

OOOe 

0006 

0000 

0006 

0003 

blk 

0804 

7a4aa000 

7b6560b0 

7b4 9d4c0 

Of 04 

00 

CNTRL 

OOOf 

0006 

0000 

0006 

0004 

blk 

0804 

7a4ab000 

7b6560b0 

7b4 9d67 8 

Of 04 

00 

CNTRL 

0010 

0006 

0000 

0006 

0005 

blk 

0804 

7a4ac000 

7b6560b0 

7b4 9d830 


00 

CNTRL 

0011 

0006 

0000 

0006 

0006 

blk 

0804 

7a4ad000 

7b6560b0 

7b4 9d9e8 

0cc4 

00 

CNTRL 

0012 

0006 

0000 

0006 

0007 

blk 

0804 

7a4ae000 

7b6560b0 

7b4 9dba0 

Of 04 

00 

CNTRL 

0013 

0006 

0000 

0006 

0008 

blk 

0804 

7a4af 000 

7b6560b0 

7b4 9dd58 

OcbO 

00 

CNTRL 

0007 

0007 

0001 

0007 

0001 

blk 

0500 

7a4a3000 

7b6568d4 

7b4 9c8b8 

Oebc 

01 

PMSHL32 

000b 

0007 

0001 

0007 

0002 

blk 

0800 

7a4a7000 

7b6568d4 

7b49cf 98 


01 

PMSHL32 

0009 

0007 

0001 

0007 

0003 

blk 

0800 

7a4a5000 

7b6568d4 

7b4 9cc28 


01 

PMSHL32 

0014 

0007 

0001 

0007 

0004 

blk 

0800 

7a4b0000 

7b6568d4 

7b4 9df 10 


01 

PMSHL32 

0015 

0007 

0001 

0007 

0005 

blk 

0800 

7a4bl000 

7b6568d4 

7b49e0c8 


01 

PMSHL32 

0006 

0007 

0001 

0007 

0006 

blk 

0200 

7a4a2000 

7b6568d4 

7b49c700 


01 

PMSHL32 

0018 

0007 

0001 

0007 

0007 

blk 

0200 

7a4b4000 

7b6568d4 

7b4 9e5f 0 

0ed4 

01 

PMSHL32 

0019 

0007 

0001 

0007 

0008 

blk 

0200 

7a4b5000 

7b6568d4 

7b4 9e7a8 


01 

PMSHL32 

001a 

0007 

0001 

0007 

0009 

blk 

0200 

7a4b6000 

7b6568d4 

7b4 9e960 


01 

PMSHL32 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

001b 

0007 

0001 

0007 

000a 

blk 

0800 

7a4b7000 

7b6568d4 

7b49ebl8 


01 

PMSHL32 

001c 

0007 

0001 

0007 

000b 

blk 

0800 

7a4b8000 

7b6568d4 

7b49ecd0 


01 

PMSHL32 

OOld 

0007 

0001 

0007 

000c 

blk 

0800 

7a4b9000 

7b6568d4 

7b49ee88 


01 

PMSHL32 

OOle 

0007 

0001 

0007 

OOOd 

blk 

0804 

7a4ba000 

7b6568d4 

7b4 9f 04 0 


01 

PMSHL32 

OOlf 

0007 

0001 

0007 

OOOe 

blk 

0804 

7a4bb000 

7b6568d4 

7b4 9f If 8 


01 

PMSHL32 

0020 

0007 

0001 

0007 

OOOf 

blk 

0500 

7a4bc000 

7b6568d4 

7b4 9f 3b0 


01 

PMSHL32 

0021 

0007 

0001 

0007 

0010 

blk 

0200 

7a4bd000 

7b6568d4 

7b4 9f 5 68 

Oebc 

01 

PMSHL32 

002f 

0012 

0007 

0012 

0001 

blk 

0200 

7a4cb000 

7b658140 

7b4a0d7 8 


15 

CMD 

002e 

0011 

0007 

0011 

0001 

blk 

0200 

7a4ca000 

7b65791c 

7b4a0bc0 


14 

CMD 

0026 

000b 

0007 

000b 

0001 

blk 

0400 

7a4c2000 

7b6570f 8 

7b4 9fe00 

Oebc 

12 

CMD 

0023 

000a 

0007 

000a 

0001 

blk 

0500 

7a4bf 000 

7b654844 

7b4 9f 8d8 

Oebc 

11 

PMSHL32 

0024 

000a 

0007 

000a 

0002 

blk 

0200 

7a4c0000 

7b654844 

7b49fa90 


11 

PMSHL32 

0025 

000a 

0007 

000a 

0003 

blk 

0200 

7a4cl000 

7b654844 

7b4 9f c4 8 

Oebc 

11 

PMSHL32 

0022 

000a 

0007 

000a 

0004 

blk 

0200 

7a4be000 

7b654844 

7b4 9f 720 


11 

PMSHL32 

0027 

000a 

0007 

000a 

0005 

blk 

0200 

7a4c3000 

7b654844 

7b49ffb8 

0ed4 

11 

PMSHL32 

0028 

000a 

0007 

000a 

0006 

blk 

0200 

7a4c4000 

7b654844 

7b4a0170 


11 

PMSHL32 

0029 

000a 

0007 

000a 

0007 

blk 

0200 

7a4c5000 

7b654844 

7b4a032 8 


11 

PMSHL32 

002a 

000a 

0007 

000a 

0008 

blk 

0200 

7a4c6000 

7b654844 

7b4a04e0 


11 

PMSHL32 

002c 

000a 

0007 

000a 

000a 

blk 

0200 

7a4c8000 

7b654844 

7b4a0850 

OebO 

11 

PMSHL32 

002d 

000a 

0007 

000a 

000b 

blk 

0200 

7a4c9000 

7b654844 

7b4a0a08 

Oebc 

11 

PMSHL32 



0008 

0008 

0007 

0008 

0001 

blk 

0800 

7a4a4000 

7b654020 

7b4 9ca7 0 


00 

HARD ERR 

0016 

0008 

0007 

0008 

0002 

blk 

0800 

7a4b2000 

7b654020 

7b4 9e2 80 


00 

HARD ERR 

0017 

0008 

0007 

0008 

0003 

blk 

0800 

7a4b3000 

7b654020 

7b4 9e438 


00 

HARD ERR 

002b 

0013 

0011 

0013 

0001 

blk 

0200 

7a4c7000 

7b65588c 

7b4a0698 


14 

DEMORUN 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0030 

0014 

0013 

0014 

0001 

blk 

0200 

7a4cc000 

7b658964 

7b4a0f 30 


14 

CMD 

0031 

0015 

0014 

0015 

0001 

crt 

0809 

7a4cd000 

7b659188 

7b4al0e8 

Of 24 

14 

DEMOCRT 

0032 

0015 

0014 

0015 

0002 

crt 

080b 

7a4ce000 

7b659188 

7b4al2a0 

Of 0c 

14 

DEMOCRT 

0033 

0015 

0014 

0015 

0003 

blk 

080b 

7a4cf 000 

7b659188 

7b4al458 

0cc4 

14 

DEMOCRT 

0034 

0015 

0014 

0015 

0004 

crt 

Olle 

7a4d0000 

7b659188 

7b4al610 

0f20 

14 

DEMOCRT 

0035 

0015 

0014 

0015 

0005 

crt 

080f 

7a4dl000 

7b659188 

7b4al7c8 

Of 0c 

14 

DEMOCRT 

0036 

0015 

0014 

0015 

0006 

blk 

080a 

7a4d2000 

7b659188 

7b4al980 

0c04 

14 

DEMOCRT 

003c 

0015 

0014 

0015 

0007 

blk 

080a 

7a4d8000 

7b659188 

7b4a23d0 

0eb8 

14 

DEMOCRT 

0038 

0015 

0014 

0015 

0008 

blk 

080a 

7a4d4000 

7b659188 

7b4alcf 0 


14 

DEMOCRT 

0039 

0015 

0014 

0015 

0009 

blk 

080a 

7a4d5000 

7b659188 

7b4alea8 


14 

DEMOCRT 

003a 

0015 

0014 

0015 

000a 

crt 

080c 

7a4d6000 

7b659188 

7b4a2060 

Of 0c 

14 

DEMOCRT 

003b 

0015 

0014 

0015 

000b 

blk 

080c 

7a4d7000 

7b659188 

7b4a2218 

0c80 

14 

DEMOCRT 


# dd %7b659188+ptda_ptcbcritsec-ptda_start 11 

%7b6596c0 7b4a23d0 

# dw %7b4a23d0 12 

%7b4a23d0 0007 003c 

# . pb 3 c 

Slot Sta BlockID Name Type Addr Symbol 

003c blk f f fe0027 DEMOCRT RamSem 00bf:0024 


In this example pid 15 is stuck, threads are either blocked or suspended by critical section. 

From the PTDA we find the critical section TCB address. From this we can either scan the .P listing for the TCB address or look at the 
second word, which contains the slot number for the thread. 

The critical section thread has blocked on a RAMSEM whose address is 00bf:0024. Since the selector is less than 2007 this has to be in its 
private arena. This is significant: only another thread in the same process could possibly post this semaphore. 


Suspension and Freezing 


Suspension is achieved by any thread in a process calling DosSuspendThread. There is no accounting information associated with this API. 
One must examine all threads in the process to see if they are functioning correctly. 

Freezing occurs for a number of reasons: 

A new process has been created with the thread initially suspended. 

The Session Manager (Shell Process 1) has used DosSystemService to freeze all threads of a process while a screen group 
switch occurs. 

A Virtual Device Driver has called VDPIFreezeVDM. 

A Debug thread has called DosDebug using the DBG_C_Freeze command. 

Again, there is no accounting information kept for this state. 

If a single thread exists in the frozen process, check the parent process's threads for correct functioning. 

If all threads are frozen check the Shell Process 1 for correct processing. 


Priority Inversion 


Priority Inversion is a hybrid situation that involves both the involuntary and voluntary suspension of two threads. 
Consider the following: 



A high priority thread is blocked on a resource. 

A low priority thread owns the resource on which the high priority thread is blocked. 
An independent thread of intermediate priority is running. 


Thread 1 
High 
blk 


waits 



on 



SEM 


Thread 3 

owned 

< - - - - 

- - - - Medium 

by 

thd 2 


run 


V 


Thread 2 
Low 
rdy 


Thread 1 will not run until thread 2 gets a time-slice that allows it to run and release the semaphore thread 1 is waiting for. 

Since thread 3 is a higher priority than thread 2 and is CPU bound, thread 2 never runs, nor does thread 1 . 

Thread 1's priority has effectively been reduced to that of thread 2's by a lower priority thread - thread 3. Thread 1 is said to have its priority 
inverted with respect to thread 3. 

The Kernel implements an automatic inversion protection mechanism whenever a process blocks using a KSEM. Essentially this amounts to 
boosting the KSEM owner's thread priority by setting TCBPriorityMin to be just greater than the waiter's priority. This mechanism is 
implemented by the following three routines: 

TKEnterlnversion 

Called to protect against priority inversion. For example, when a mutex KSEM is obtained increments 
TCBcBoostLock. 

TKExitlnversion 

When an inversion protected KSEM is released TCBcboostlock is decremented. When TCBcBoostlock is zero and 
TCBPriorityMin and is not zero then it is set to zero and the priority recalculated. 

TKDeclarelnversion 

Used to set the minimum priority of a thread to be waited on. If owner's TCBPriorityMin < waiter's TCBPriority and 
owner is in ready state then the owner's TCBPriorityMin to the waiter's TCBPriority+1 . 

For this mechanism to work, it must be possible to determine ownership from the semaphore so that TKDeclarelnversion can determine 
which thread's priority to alter. It is also necessary to be able to determine whether raising the priority of thread will lead to other 
synchronisation problems or deadlocks through race conditions. Since the Kernel is a special case, and because pre-emption cannot occur 
while running in kernel mode, the kernel limits inversion protection to the KSEM only. Outside kernel mode, inversion is automatically 
protected against (for regular and foreground server threads) by application of the starvation priority boost. 


Program Design Issues and Weaknesses 


The following hit-list identifies potential weaknesses in program design that can lead to hang symptoms or serialisation problems: 



1 . Manipulation of thread priorities for the purpose of serialisation or sequencing execution is haphazard at best. At worst the 
performance of the entire system can be jeopardised. 

The following guidelines should be applied when considering priority manipulation: 

• Use priority delta to tell the system the relative importance of an application's threads. 

• Avoid priority class manipulation. Priority class tends to specify the relative importance of a thread with respect to all 
other threads in the system. 

• Avoid the use of time-critical priority. By setting this class, a thread is assuming the position of utmost importance in 
the system. This may not be a valid assumption for some system configurations and some users. 

• If priority class manipulation is desirable under some circumstances, then it should be parameterised so that it can be 
controlled as an option by the user. 

2. If a window of exposure exists it will be exposed. 

3. Any common resource that is ever modified must have an associated lock or serialisation mechanism. 

4. Locks (serialisation techniques such as semaphores) that are concurrently held and waited on must be obtained in an 
established order. 

5. Simplistic approach (one lock) forces work to be channelled through a single-queue. Therefore design locks at the lowest level of 
contention. 

6. Distinguish process/data/repository serialisation otherwise an inconsistent system of locks may result: 

• Process locks are required where a only single instance of a process is allowed to operate. For example: 

Finite State Machine state transitions; 

Some FSM state users; 

Any non-reentrant process. 

• Distinguishing Repository locks allows the repository is updated: 

disk/directory reorganisation while file data is in use. 

physical page assignments are allowed to change while data is in use - swapping 

7. Data optimisation: Artificial association of unrelated data items imposes serialisation constraints that will have two possible 
effects: 

• This necessitates unrelated processes to serialise. 

• Serialisation may lead to unavoidable deadlocks. 

8. Code optimisation: imposes process lock constraints in a similar way that data optimisation does. 

9. 0-0 tends to hide the data repository and structure. May even hide the process. Therefore designers need to consider whether 
locks are managed internally, within the object or explicitly. It may not be possible to handle the locks internally, because the 
context in which an instance method is being use (that is, the process) is not discernible from within the object. 


Worked Examples 


The following collection of worked examples illustrate how to use the debugging tools, in particular the Dump Formatter and Kernel 
Debugger to obtain information from a system under diagnosis. 

The following topics are included: 

Finding File System information 

This gives techniques for obtianing open file information and correlating open file names to handles and vice versa 
and finding out about record locking. 


Exploring Memory Management 

This gives techniques for obtaining memory owner ownership and discovering who allocated a particular memory 
object. Name shared memory and Kernel heap memory are also discussed. 

Exploring Presentation Manager 

This give techniques for finding Message Queues, Window Procedures and Window structures. 

Debugging Ring 0 Loops from a Dump 

Dealing with ring 0 loops is relatively straight forward from the Kernel Debugger. It is also possible to diagnose Ring 0 
problems from a dump if the current registers can be determined. This section given an example of using this 
technique in a File System Driver loop. 


How to Find File System Information 

This section gives a basic overview of the file system control blocks, and shows how to answer the following questions: 

1 . What file system objects are open in a given process? 

2. What file system objects are open in a VDM? 

3. What file corresponds to a given handle? 

4. What processes have opened a given file system object? 

If the reader is unfamiliar with this subject then the sections that follow should be read in order: 

These topics now follow: 

Finding files from handles 
Finding files from handles in a VDM 
Finding handles from file names 
The Record Lock Record 

Note: 

The examples included in this section are worked on an OS/2 2.1 1 system. For OS/2 WARP the same techniques work, however the 
SFTs, whilest they may be located from the SAS in the same manner, they are allocated in segments that are mapped by different 
selectors. The effect of this is that short-cut techniques used to locate WARP SFTs may need to be re-worked. 


Finding Files From Handles 

Open file system objects (files, named pipes, devices etc.) are represented by the SFT control block. The SFT contains three sections: 

• Kernel data 

• File system independent data 

• File system dependent data 

The kernel data section contains information to link the SFT to other system control blocks and to make the SFT usable by Kernel APIs. Of 
principle interest in this section are flags, handle, and pointer to the MFT and a chain pointer to other SFTs that represent other open 
instances of the same object. The kernel data is split into two discontiguous sections at each end of the SFT. 

The file system independent data section contains information common to all FSDs needed to drive the file system. Of principle interest are 
the file attributes, open mode flags, opening process id and handle to the associated VPB. 


The file system dependent data section is, as the name suggests, a work area private to the FSD that manages the file system object. 

Note: 


The .D SFT command formats the SFT always as if it is a FAT file. The information displayed in the file system dependent section 
may be misleading for non-FAT objects. The names of the fields formatted by .D SFT are prefixed sfdFAT_ for the file system 
dependent data so make it clear which information to treat with circumspection. The kernel and file system independent data name 
are prefixed with sf_ and sfi_ respectively. 


When a file system object is opened, DosOpen returns a handle that represents the open object for all subsequent file system manipulation 
by the process until the object is closed. This handle is unique only within process and is referred to as the JFN. In protect mode processes 
the JFN is a 16-bit entity. In VDMs, however, to be consistent with DOS the JFN is an 8-bit entity, which may be correlated to the reaf JFN 
through a table in the PDB. This is illustrated later. 

Each open file system object is also known by a system-wide unique handle, the SFN. Once the SFN is known then the corresponding SFT 
may be located and thence all file system information relating to the object. 

Each process is assigned by default a table of 20 words, which is indexed by the JFN. Each word of the JFN_table contains the 
corresponding SFN for the open file. The default JFN_table is imbedded within the PTDA. Prefixing the JFN_table is a double-word pointer 
(JFN_ptable) that points to this table. If the table is expanded (using DosSetMaxFH) then JFN_ptable is updated to point to the current 

JFNtable. 

The key to finding information about open object in a given process is to locate JFN_ptable and JFN_table. Since both of these fields are 
part of the PTDA they may be refered to by name as symbols for the current (system) context on/y . For other contexts we may still use 
the PTDA symbols but in a relative fashion. The PTDA symbols are defined for the current process, which means that to use them 
successfully for another process, one must relocate them to the PTDA one wishes to reference. This is easily done by subtracting the label 
PTDASTART from the desired symbol, then adding the address of the PTDA one wishes to see. For example: to see the jfn_table field, 
enter 


dw <ptda address>+ jfn_table-ptda_start L2 . 


The relationships between the JFN_table, PTDA and the SFT is illustrated in the following diagram: 


Open File - Application to System 



File System Control Block Relationships 


In the examples that follow, we explore the relationships between each of the major file-system control blocks. These relationships are 
illustrated in the following diagrams. 

Open File 



Open File - System View 



EA SFT 


DEV 



Open Device 





Finding Files From Handles - Example 



In the following example we choose to discover all the open file system objects in process 19, which happens to be running the IPFC 

compiler. 













>>> List all the 

thread slots in the system to find IPFC 




~ • F 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe3a000 

f fe3c7d4 

f fe3c61c 

le7c 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

7b7aa000 

f fe3c7d4 

7b9a8020 

1 f 3c 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

7b7ac000 

f fe3c7d4 

7b9a81d8 

lf50 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

081f 

7b7ae000 

f fe3c7d4 

7b9a83 90 

1 f 4 8 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

7b7b0000 

f fe3c7d4 

7b9a854 8 

lf20 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

7b7b2000 

f fe3c7d4 

7b9a8700 

1 f 3c 

00 

*asyncr 

0009 

0002 

0000 

0002 

0001 

blk 

021f 

7b7b8000 

7b9c4 02 0 

7b9a8c2 8 


00 

LOGDAEM 

0008 

0003 

0001 

0003 

0001 

rdy 

061f 

7b7b6000 

7b9c484c 

7b9a8a7 0 

leb8 

01 

PMSHL32 

000b 

0003 

0001 

0003 

0002 

blk 

0800 

7b7bc000 

7b9c484c 

7b9a8f 98 


01 

PMSHL32 

000c 

0003 

0001 

0003 

0003 

blk 

0800 

7b7be000 

7b9c484c 

7b9a9150 


01 

PMSHL32 

OOOd 

0003 

0001 

0003 

0004 

blk 

0800 

7b7c0000 

7b9c484c 

7b9a9308 


01 

PMSHL32 

OOOe 

0003 

0001 

0003 

0005 

blk 

0800 

7b7c2000 

7b9c484c 

7b9a94c0 


01 

PMSHL32 

0007 

0003 

0001 

0003 

0006 

blk 

0200 

7b7b4000 

7b9c484c 

7b9a88b8 

lecc 

01 

PMSHL32 

0011 

0003 

0001 

0003 

0007 

blk 

0200 

7b7c8000 

7b9c484c 

7b9a99e8 

lecc 

01 

PMSHL32 

0012 

0003 

0001 

0003 

0008 

blk 

0200 

7b7ca000 

7b9c484c 

7b9a9ba0 


01 

PMSHL32 

0013 

0003 

0001 

0003 

0009 

blk 

0200 

7b7cc000 

7b9c484c 

7b9a9d58 


01 

PMSHL32 

0014 

0003 

0001 

0003 

000a 

blk 

0800 

7b7ce000 

7b9c484c 

7b9a9f 10 


01 

PMSHL32 

0015 

0003 

0001 

0003 

000b 

blk 

0800 

7b7d0000 

7b9c484c 

7b9aa0c8 


01 

PMSHL32 

0016 

0003 

0001 

0003 

000c 

blk 

0800 

7b7d2000 

7b9c484c 

7b9aa280 


01 

PMSHL32 

0017 

0003 

0001 

0003 

OOOd 

blk 

0804 

7b7d4000 

7b9c484c 

7b9aa438 

lea8 

01 

PMSHL32 

0018 

0003 

0001 

0003 

OOOe 

rdy 

0804 

7b7d6000 

7b9c484c 

7b9aa5f 0 


01 

PMSHL32 

0019 

0003 

0001 

0003 

OOOf 

blk 

0500 

7b7d8000 

7b9c484c 

7b9aa7a8 


01 

PMSHL32 

001a 

0003 

0001 

0003 

0010 

rdy 

0801 

7b7da000 

7b9c484c 

7b9aa960 

lbac 

01 

PMSHL32 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

001b 

0003 

0001 

0003 

0011 

blk 

0800 

7b7dc000 

7b9c484c 

7b9aabl8 


01 

PMSHL32 

*001c# 

0003 

0001 

0003 

0012 

run 

0800 

7b7de000 

7b9c484c 

7b9aacd0 

lb8c 

01 

PMSHL32 

OOld 

0003 

0001 

0003 

0013 

blk 

0200 

7b7e0000 

7b9c484c 

7b9aae88 


01 

PMSHL32 

0023 

0018 

0003 

0018 

0001 

rdy 

061f 

7b7ec000 

7b9c7128 

7b9ab8d8 

leb8 

13 

EPM 

0038 

0018 

0003 

0018 

0002 

blk 

0200 

7b816000 

7b9c7128 

7b9adcf 0 

lecc 

13 

EPM 

0037 

0013 

0003 

0013 

0001 

blk 

0200 

7b814000 

7b9c9a04 

7b9adb38 


19 

IBMAVSD 

0033 

0012 

0003 

0012 

0001 

blk 

0200 

7b80c000 

7b9c89ac 

7b9ad458 

leb8 

17 

PMDRAW 

0035 

0012 

0003 

0012 

0002 

blk 

0200 

7b810000 

7b9c89ac 

7b9ad7c8 

leb8 

17 

PMDRAW 

0036 

0012 

0003 

0012 

0003 

blk 

0200 

7b812000 

7b9c89ac 

7b9ad980 


17 

PMDRAW 

0034 

0010 

0003 

0010 

0001 

blk 

0400 

7b80e000 

7b9c91d8 

7b9ad610 

led4 

12 

CMD 

002e 

OOOd 

0003 

OOOd 

0001 

blk 

0200 

7b802000 

7b9c8180 

7b9acbc0 

leb8 

16 

PULSE 

0030 

OOOd 

0003 

OOOd 

0002 

rdy 

0100 

7b806000 

7b9c8180 

7b9acf 30 

1 f 2 8 

16 

PULSE 

002f 

OOOd 

0003 

OOOd 

0003 

rdy 

081f 

7b804000 

7b9c8180 

7b9acd7 8 

lfOO 

16 

PULSE 

002d 

000c 

0003 

000c 

0001 

blk 

0200 

7b800000 

7b9c7 954 

7b9aca08 

leb8 

15 

DINFO 

0032 

000c 

0003 

000c 

0002 

rdy 

061f 

7b80a000 

7b9c7 954 

7b9ad2a0 

lfOO 

15 

DINFO 

002c 

000b 

0003 

000b 

0001 

blk 

0200 

7b7 feOOO 

7b9c58a4 

7b9ac850 

leb8 

14 

MRFILE32 

0031 

000b 

0003 

000b 

0002 

blk 

0200 

7b808000 

7b9c58a4 

7b9ad0e8 

lecc 

14 

MRFILE32 

0029 

000a 

0003 

000a 

0001 

rdy 

061f 

7b7f 8000 

7b9c68f c 

7b9ac32 8 

leb8 

10 

PMDIARY 

OOlf 

0006 

0003 

0006 

0001 

rdy 

062f 

7b7e4000 

7b9c60d0 

7b9ablf 8 

leb8 

11 

PMSHL32 

0021 

0006 

0003 

0006 

0002 

blk 

0200 

7b7e8000 

7b9c60d0 

7b9ab568 


11 

PMSHL32 

0022 

0006 

0003 

0006 

0003 

blk 

0200 

7b7ea000 

7b9c60d0 

7b9ab720 

leb8 

11 

PMSHL32 

0020 

0006 

0003 

0006 

0004 

blk 

0200 

7b7e6000 

7b9c60d0 

7b9ab3b0 


11 

PMSHL32 

OOle 

0006 

0003 

0006 

0005 

blk 

0200 

7b7e2000 

7b9c60d0 

7b9ab04 0 

lecc 

11 

PMSHL32 

0024 

0006 

0003 

0006 

0006 

blk 

0200 

7b7ee000 

7b9c60d0 

7b9aba90 


11 

PMSHL32 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0025 

0006 

0003 

0006 

0007 

blk 

0200 

7b7f 0000 

7b9c60d0 

7b9abc4 8 


11 

PMSHL32 

0026 

0006 

0003 

0006 

0008 

blk 

0200 

7b7 f 2 000 

7b9c60d0 

7b9abe00 


11 

PMSHL32 

0027 

0006 

0003 

0006 

0009 

blk 

0200 

7b7f4000 

7b9c60d0 

7b9abfb8 


11 

PMSHL32 

0028 

0006 

0003 

0006 

000a 

blk 

0200 

7b7f 6000 

7b9c60d0 

7b9acl70 


11 

PMSHL32 

002a 

0006 

0003 

0006 

000c 

blk 

021f 

7b7 faOOO 

7b9c60d0 

7b9ac4e0 

leac 

11 

PMSHL32 

002b 

0006 

0003 

0006 

OOOd 

blk 

0200 

7b7f cOOO 

7b9c60d0 

7b9ac698 

leb8 

11 

PMSHL32 

000a 

0004 

0003 

0004 

0001 

blk 

0800 

7b7ba000 

7b9c5078 

7b9a8de0 


00 

HARD ERR 

OOOf 

0004 

0003 

0004 

0002 

blk 

0800 

7b7c4000 

7b9c5078 

7b9a9678 


00 

HARD ERR 

0010 

0004 

0003 

0004 

0003 

blk 

0800 

7b7c6000 

7b9c5078 

7b9a9830 


00 

HARD ERR 

0039 

0019 

0010 

0019 

0001 

rdy 

061f 

7b818000 

7b9ca230 

7b9adea8 

If 0c 

12 

IPFC 

>>> IPFC is 

running in slot 39, 

. but 

this is not the current system 





>>> slot so we have to refer to PTDA symbols relative to pPTDA 
>>> First establish whether JFN_table has been expanded? 

# dw %7b9ca230 + jfn_ptable-ptda_start 12 
%7b9caal8 fd8a 0030 

>>> No it hasn't - it's still based on selector 30 and therefore 
>>> still imbedded in the PTDA at label JFN_table. 

>>> Note: we can't display it as 30:fd8a since selector 30 
>>> aliases the current system PTDA, hence: 

# dw %7b9ca230 + jfn_table-ptda_start 114 
%7b9ca7e6 0027 0027 0027 0074 002a 0072 0077 0068 
%7b9ca7 f 6 0015 0041 0069 007f ffff ffff ffff ffff 
%7b9ca80 6 ffff ffff ffff ffff 

>>> These are the SFNs that correspond to JFNs 0000 through 0014. 

>>> In fact the highest JFN currently open in this process is 000b 
>>> which corresponds to SFN 007f 

>>> Next we locate the STF. From the SAS we look for the SFT selector: 


# . a 

SAS Base Section 

SAS signature: SAS 
offset to tables section: 0016 
FLAT selector for kernel data: 0168 
offset to configuration section: 001E 
offset to device driver section: 0020 
offset to Virtual Memory section: 002C 
offset to Tasking section: 005C 
offset to RAS section: 006E 
offset to File System section: 0074 
offset to infoseg section: 0080 

SAS Protected Modes Tables Section 

selector for GDT: 0008 
selector for LDT: 0000 
selector for IDT: 0018 
selector for GDTPOOL : 0100 

SAS Device Driver Section 

offset for the first bimodal dd: 0CB9 
offset for the first real mode dd: 0000 
sel for Drive Parameter Block: 04C8 
sel for ABIOS prot . mode CDA: 0000 
seg for ABIOS real mode CDA: 0000 
selector for FSC: 00C8 

SAS Task Section 

selector for current PTDA: 0030 
FLAT offset for process tree head: FFF10910 
FLAT address for TCB address array: FFF06BB6 
offset for current TCB number: FFDFFB5E 
offset for ThreadCount : FFDFFB62 

SAS File System Section 

handle to MFT PTree: FE72CFBC 
selector for System File Table: 00C0 
sel. for Volume Parameter Bloc: 0788 
sel. for Current Directory Struc: 07B8 
selector for buffer segment: 00A8 

SAS Information Segment Section 

selector for global info seg: 0428 
address of curtask local infoseg: 03C80000 
address of DOS task's infoseg: FFFFFFFF 
selector for Codepage Data: 07CB 
SAS RAS Section 

selector for System Trace Data Area: 04B0 
segment for System Trace Data Area: 04B0 
offset for trace event mask: 0B28 

SAS Configuration Section 

offset for Device Config. Table: 0D50 

SAS Virtual Memory Mgt . Section 

Flat offset of arena records: FFF13304 
Flat offset of object records: FFF1331C 
Flat offset of context records: FFF1330C 
Flat offset of kernel mte records: FFF0A891 
Flat offset of linked mte list: FFF07934 
Flat offset of page frame table: FFF11A70 
Flat offset of page range table: FFF111EC 
Flat offset of swap frame array: FFF03BAC 



Flat offset of Idle Head: FFF10090 
Flat offset of Free Head: FFF10080 
Flat offset of Heap Array: FFF11B78 
Flat offset of all mte records: FFF12E04 

>>> We see this is assigned to selector cO . 

>>> This is not quite the SFT but a table of selectors that point to 
>>> each extent of the SFT. Each extent holds up to 500 STF entries. 
>>> All the SFN's we're interested in are less than 500 so occupy the 
>>> first extent. Note: we could have obtained the SFT selector from: 

# In GDT_SFT 

138 : OOOOOOcO os2krnl DOSGDTDATA : GDT_SFT 

# 

>>> List the table of extents: 


# dw c0:0 


00c0 : 00000000 

0438 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000010 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000020 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000030 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000040 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000050 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000060 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

OOcO : 00000070 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 


>>> Now list the first extent: 


# dw 438:0 


0438:00000000 

0000 

0000 

0000 

0000 

0001 

0000 

0000 

0001 

0438:00000010 

0000 

0000 

0800 

c800 

0000 

0000 

0000 

0000 

0438:00000020 

7000 

860e 

c6fe 

6821 

0008 

0000 

0000 

0000 

0438:00000030 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0438:00000040 

0000 

0000 

0000 

0000 

0000 

8a30 

007a 

0000 

0438:00000050 

0000 

0000 

0000 

aOOO 

0000 

1200 

0000 

0000 

0438:00000060 

0000 

0000 

0000 

0000 

e700 

0110 

6000 

OOee 

0438:00000070 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 


>>> There is an 8 byte header to each extent. It followed by one or 
>>> more 131 (hex 83) byte SFT entries. The first word of the header 
>>> contains the selector for the next extent. In this case there 
>>> isn't one. 

>>> To locate the SFT entry corresponding to SFN we use the formula 
»> 438: (8+ ( 83*SFN) ) 

>>> We can dump this out directly or by using the . D SFT command: 

>>> Start by examining SFN 0077 (JFN 0006 for slot 39) 


# .d sft 438: (8+(83*77) ) 


sf_ref_count : 

0001 

sf i_mode 

20a2 

sf_usercnt : 

0000 

sf i_hVPB 

0012 

reserved : 

00 

sf i_ctime 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate 

0000 

sf_devptr : 

#0000:0000 

sf i_atime 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate 

0000 

sf_chain : 

#0000:0000 

s f i_mt ime 

6000 

sf_MFT : 

fe87ebf 0 

sf i_mdate 

lbOb 

sfdFAT_f irFILEclus : 

57e4 

sf i_size 

00000000 

sfdFAT_cluspos : 

Of f 8 

sf i_position 

00000000 

sfdFAT_lstclus : 

0038 

sf i_UID 

0000 

sfdFAT_dirsec : 

00002cad 

s f i_P I D 

0019 

sfdFAT_dirpos : 

09 

sf i_PDB 

0000 

sfdFAT_name : 

FCLDLGP DLL 

sf i_ 

.self sfn : 

sfdFAT_EAHandle : 

0000 

sf i_tstamp 

00 

sf_plock : 

0000 

sf i_DOSattr 

20 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




>>> Fully qualified file system names are maintained in the Master 
>>> File Table entries. Lets check out the MFT for this SFT, which 
>>> is pointed to by sf_MFT. 

>>> Under the Kernel debugger we could use . D MFT to format an MFT 
>>> entry. Under the dump formatter . D MFT does not work correctly: 


# db %fe87ebf0 

%fe87ebf 0 4b 53 45 4d 01 02 00 00-00 00 00 00 00 00 00 00 KSEM. 
%fe87ec00 00 00 ed 3c 38 04 00 00-00 00 4b 53 45 4d 01 02 . .m<8 


KSEM 



%fe87ecl0 00 00 00 00 00 00 00 00-00 00 00 00 lc Oe 00 00 

%fe87ec20 6d 46 12 00 43 3a 5c 24-30 30 30 30 24 00 87 fe mF . . C : \$0000$ . . ~ 

%fe87ec30 14 00 9e ff 29 00 Ob OO-dc eb 87 fe 08 43 83 fe )...\k.~.C.~ 

%fe87ec40 fO eb 87 fe 48 00 9e ff-4b 53 45 4d 01 02 00 00 pk . ~H . . . KSEM . . . . 

%fe87ec50 00 00 00 00 00 00 00 00-00 00 5e 3a 38 04 00 00 A :8... 

%fe87ec60 00 00 4b 53 45 4d 01 02-00 00 00 00 00 00 00 00 ..KSEM 

>>> The file name is at MFT+34 in the ALLSTRICT kernel and 2a in the 
>>> RETAIL kernel. There are two imbedded KSEMs, which only only 
>>> contain the signature KSEM in the ALLSTRICT kernel, also the MFT 
>>> contains the signature mF at +30 in the ALLSTRICT kernel. 

>>> The first KSEM used for serialising read/single write access to 
>>> the file. The second KSEM is used for updating the cluster map. 


>>> These KSEMs can be 

formatted using .d KSEM 


# .d ksem %fe87ebf0 



Signature 

KSEM 

Nest : 

0000 

Type 

SHARE 

Readers : 

0000 

Flags 

01 

PendingReaders : 

0000 

Owner 

0000 

PendingWriters : 

0000 

# .d ksem %fe87ebf0+la 



Signature 

KSEM 

Nest : 

0000 

Type 

SHARE 

Readers : 

0000 

Flags 

01 

PendingReaders : 

0000 

Owner 

# 

0000 

PendingWriters : 

0000 


>>> In this case they are unowned. 


>>> The file name in the MFT does not agree with the sfdFAT_name. 

>>> We suspect that this is not a FAT file. This can be verified by 
>>> examining the file system control block entry for the FSD that's 
>>> managing this file. The FSC entry address appears in the SFT at 
>>> sf_FSC. In this case it is 00c8:0008. 


# dw c8:8 


00c8 : 00000008 

0b68 

0840 

0b6c 

0840 

0000 

0828 

Olfc 

0828 

00c8 : 00000018 

0010 

0828 

05b4 

0820 

0570 

0828 

0580 

0828 

00c8 : 00000028 

0634 

0828 

0640 

0828 

0e3c 

0828 

1120 

0828 

00c8 : 00000038 

0834 

0828 

090c 

0828 

09f 8 

0820 

1130 

0828 

00c8 : 00000048 

If 24 

0828 

If 6e 

0828 

2122 

0828 

1 6e4 

0828 

00c8 : 00000058 

lblO 

0828 

lb38 

0828 

lbec 

0828 

ldc8 

0828 

00c8 : 00000068 

0c60 

0820 

0d7 0 

0820 

1 f 14 

0828 

215c 

0828 

00c8 : 00000078 

22a0 

0828 

2294 

0828 

111c 

0820 

25f c 

0828 


>>> Each FSC enrty is a table of farl6 pointers. The first points the 
>>> The FSD attributes, the second to the name and the remainder are 
>>> standard FSD entry points. (See OEMI IFS Documentation) . 

>>> the name of this FSD is.... 

# da 840:b6c 

0840 : 00000b6c HPFS 

>>> The word prefixing the file name in the MFT is the handle to the 
>>> Volume Parameter Block (hVPB) . This also appears in the SFT under 
>>> sfi_hVPB. In this instance the hVPB is 0012. 

>>> To format the VPB we need to obtain the selector for the VPB 

>>> segment. N.B. this is not stored in the SAS under Volume Parameter 

>>> Block. We have to locate this using: 

# In GDT_VPB 

138:00000098 os2krnl DOSGDTDATA : GDT_VPB 

# 

>>> The hVPB is an offset into the VPB segment. Format a VPB 
>>> using .D VPB 

# .d vpb 98:12 


vpb_f link : 

0000 

vpdFAT_cluster_mask : 

02 

vpb_blink : 

008d 

vpdFAT_cluster_shift : 

00 

vpb_ref_count : 

0057 

vpdFAT_f irst_FAT : 

0000 

vpb_search_count : 

0004 

vpdFAT_FAT_count : 

00 

vpb_f irst_access : 

00 

vpdFAT_root_entries : 

0030 

vpb_signature : 

444a 

vpdFAT_f irst_sector : 

06001100 

vpb_f lags (2 ) : 

02:00 

vpdFAT_max_cluster : 

7d5c 

vpb_FSC : 

#00c8 : 0008 

vpdFAT_FAT_size : 

b2 13 

vpi_ID : 

25be2014 

vpdFAT_dir_sector : 

f c04b800 

vpi_pDPB : 

#04c8 : 0038 

vpdFAT_media : 

0a 

vpi_cbSector : 

0200 

vpdFAT_next_f ree : 

00b2 



# 


vpi_totsec : 
vpi_trksec : 
vpi_nhead : 
vpi_pDCS : 
vpi_pVCS : 
vpi_drive : 
vpi_unit : 
vpi_text : 
vpi_f lags 


00049020 

0023 

000c 

# 0000:0000 

# 0000:0000 

02 

02 

UNLABELED 

0003 


vpdFAT_f ree_cnt : 
vpdFAT_FATentrysize : 
vpdFAT_IDsector : 
vpdFAT_access : 
vpdFAT_accwait : 
vpdFAT_pEASFT : 


04b8 

b2 

00000000 

0000 

0000 

# 0000:0000 


>>> Two important pieces of information in the VPB: vpi_drive and 
>>> vpi_text . The drive number is the logical drive, numbering from 
>>> 0, Thus 02 is drive C: 

>>> vpi_text is the volume label, in this case UNLABELED. 

>>> The VPB contains a signature which when dumped as bytes appears as 
>>> JD . Each VPB is 7b bytes, the first starts at +12. Each VPB can 
>>> be dumped using the formula: 98 : (12+ (7b*entry) ) 


# db 98 : 12+ ( 7b*0 ) 17b 


0098:00000012 

00 

00 

8d 

00 

57 

00 

04 

00-00 

4a 

44 

02 

00 

08 

00 

c8 

.... W .... JD .... H 

0098:00000022 

00 

02 

00 

00 

00 

00 

30 

00-00 

11 

00 

06 

5c 

7d 

13 

b2 

0 \ } . 2 

0098:00000032 

00 

b8 

04 

fc 

0a 

b2 

00 

b8-04 

b2 

00 

00 

00 

00 

0a 

11 

CO 

K> 

00 

K> 

0098:00000042 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 


0098:00000052 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

9a 

7b 

4c 

5c 

00 

{ lA • 

0098:00000062 

00 

14 

20 

be 

25 

38 

00 

c8-04 

00 

02 

20 

90 

04 

00 

23 

.. >%8 . H # 

0098:00000072 

00 

0c 

00 

55 

4e 

4c 

41 

42-45 

4c 

45 

44 

00 

00 

00 

00 

. . .UNLABELED .... 

0098:00000082 

00 

00 

00 

00 

00 

00 

00 

02-02 

03 

00 








>>> The word at +2 is a chain pointer offset to the next VPB. In this case 
»> 008d (=7b+12 ) 


>>> We can also obtain a link to disk device driver information from 
>>> the VPB via vpi_pDPB (the disk parameter block) . Under the 
>>> kernel debugger this may be formatted using . D DPB, but gives 
>>> erroneous results under DF . 


. d dpb 4 c 8 : 3 8 


dpb_drive : 

02 

dpb_unit : 

02 

dpb_driver_addr : 

#0738:0000 

dpb_next_dpb : 

#04c8 : 0054 

dpb_cbSector : 

0200 

dpb_f irst_FAT : 

0001 

dpb_toggle_time : 

00000000 

dpb_hVPB : 

0012 

dpb_media : 

f 8 

dpb_f lags : 

20 

dpb_drive_lock : 

0000 

dpb_strategy2 : 

#0740 : 135e 


>>> From here we can locate the device driver header, but note that the 
>>> strategy2 routine address is located from the DPB. 


## . d dev 738:0 

DevNext : 
DevAttr : 
DevStrat : 
Devlnt : 
NumUnits : 
DevProtCS : 
DevProtDS : 
DevRealCS : 
DevRealDS : 


0588:0000 

2880 

0d7e 

0000 

08 

0740 

0738 

0000 

0000 


>>> Returning to the JFN_table for slot 36. We now examine JFN 0004 
>>> which correlates with SFN 002a 
>>> Dump the SFT as before: 


5ft 438: ( 8+ ( 83 

*2a) ) 



sf_ref_count : 

000c 

sf i_mode : 

0042 

sf_usercnt : 

0000 

sf i_hVPB : 

0000 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

OOcl : 0000 

sf i_cdate : 

0000 

sf_devptr : 

#04f 8 : 0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : f f40 

sf i_adate : 

0000 

sf_chain : 

#0438 : Of 62 

s f i_mt ime : 

3c83 

sf_MFT : 

fe73ecf c 

sf i_mdate : 

ld62 



sfdFAT_f irFILEclus : 

0000 

sf i_size 

00000000 

sfdFAT_cluspos : 

0000 

sf i_position 

00000000 

sfdFAT_lstclus : 

0000 

sf i_UID 

0000 

sfdFAT_dirsec : 

00000000 

s f i_P I D 

0003 

sfdFAT_dirpos : 

00 

sf i_PDB 

0000 

sfdFAT_name : 

KBD$ 

sfi_selfsfn: 002a 

sfdFAT_EAHandle : 

0000 

sf i_tstamp 

00 

sf_plock : 

0000 

sf i_DOSattr 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




>>> The first flag word is OOcl = 0000 0000 1100 0001 


>>> 

>>> 

>>> 

>>> 

>>> 

>>> 


Device 


console input dev 


>>> not console output dev 

>>> Note: the hVPB is 0000 but sf_devptr is not and points to the 
>>> device driver header for KDB$ thus: 


## . d dev 4f 8 : 0 

DevNext : 
DevAttr : 
DevStrat : 
Devlnt : 
DevName : 
DevProtCS : 
DevProtDS : 
DevRealCS : 
DevRealDS : 


04e8 : 0000 
c981 
0000 
2a2 9 
KBD$ 

0500 
04f 8 
0000 
0000 


>>> The MFT entry for this device is: 
# db %fe73ecfc 


%fe73ecf c 

4b 

53 

45 

4d 

01 

02 

00 

00- 

-00 

00 

00 

00 

00 

00 

00 

00 

KSEM 

%fe73ed0c 

00 

00 

33 

Id 

38 

04 

00 

00- 

-00 

00 

4b 

53 

45 

4d 

01 

02 

. .3. 

8 KSEM. . 

%fe73edlc 

00 

00 

00 

00 

00 

00 

00 

00- 

-00 

00 

00 

00 

2a 

00 

00 

00 


k 

%fe73ed2c 

6d 

46 

00 

00 

5c 

44 

45 

56- 

-5c 

4b 

42 

44 

24 

00 

73 

fe 

mF . . 

\DEV\KBD$ . s~ 

%fe73ed3c 

30 

00 

a6 

ff 

02 

00 

f 9 

00- 

-48 

2f 

lc 

fd 

60 

ed 

73 

fe 

0 . & . 

. . y . H/ . } 'ms~ 

%fe73ed4c 

94 

ed 

73 

fe 

88 

bl 

98 

04- 

-01 

00 

00 

00 

If 

00 

00 

00 

. ms~ 

. 1 

%fe73ed5c 

a4 

dc 

72 

fe 

08 

42 

4d 

53- 

-43 

41 

4c 

4c 

53 

ec 

73 

fe 

$\r~ 

.BMSCALLSls- 

%fe73ed6c 

18 

00 

9e 

ff 

3c 

00 

0b 

00- 

-d4 

ef 

73 

fe 

cc 

14 

86 

fe 


< . . . Tos~L . . ~ 


# 

>>> Note: the name of the KBD$ device driver known to the file system is 
>>> \DEV\KDB$ 


>>> Finally, using the . D MFT command (under the KDB) this MFT formats as: 


##.d mft %fe73ecfc 



mft_ksem: 

Signature 

: KSEM 

Nest: 0000 


Type 

: SHARE 

Readers: 0000 


Flags 

: 01 

PendingReaders : 0000 


Owner 

: 0000 

PendingWriters : 0000 


mf t_lptr 

0000 

mft_sptr: 0438:1586 


mft_pCMap 

00000000 

mft_serl : 002c 

mft_signature 

mf t_CMapKSem : 

mft_hvpb 

mft_name 

0000 

\DEV\KBD$ 

mft_opflags: 0000 

mft_f lags 


>>> Note: mft_sptr points to the associated SFT 


Finding Files From Handles in a VDM 


466d 

0000 


The situation in a VDM is slightly more complex, since it required the JFN to be compatible with DOS and therefore an 8-bit entity. 



Furthermore, the JFN_table in DOS is traditionally imbedded or chained from the DOS PDB (or PSP). For this reason a second level of 
indirection is employed. 

The JFN returned from a VDM open indexes the byte array of virtual system file number (VSFNs). The VSFN ranges from 0 - 255. The high 
47 (from OxdO though Oxfe) are used as real mode device handles. Oxff indicates an unused handle. When a VDM is created the initial PDB 
contains the default array of 20 handles at label PDB_JFN_table (PDB + 0x18). This current array's far segment address is at 
PDB_JFN_pointer (PDB + 0x34) and the size of the array is a word at PDB_JFN_Length (PDB + 0x32). The PDB lies on a paragraph 
boundary (16-byte boundary) and its segment address is saved in the PTDA at CurrentPDB (PTDA +0x2ea) Once again the usual 
precaution applies when referencing PTDA fields: their symbols are publicly defined for the current system context only. Therefore, to 
reference a CurrentPDB out-of-context must be done relative to the PTDA address for that context. 

These points are illustrated in the following example: 


## .p 46 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0046 OOld 0007 OOld 0001 blk 0200 7b732000 7b8c9a04 7b8af720 lf08 17 *vdm 
##.s 46 

>>> Slot 46 is a VDM but not the current context, so we locate the PDB 
>>> relative to the PTDA (otherwise we could have just used 
>>> dw currentpdb 11) 

##dw %7b8c9a04+currentpdb-ptda_start 11 
0030 : OOOOfdl 6 OeOl 


»> This is a segment address so use the & operator to display the 
»> PDB. 


##db &e01:0 
&0e01 : 00000000 

cd 

20 

00 

aO 

00 

9a 

fO 

fe-ld 

fO 

f 5 

01 

99 

Od 

08 

02 

M . . .p~ .pu 

S0e01 : 00000010 

28 

08 

65 

07 

28 

08 

99 

Od-dl 

dl 

dl 

dO 

d2 

ff 

ff 

ff 

< - e . < . . . QQQPR. . . 

sOeOl : 00000020 

ff 

ff 

ff 

ff 

ff 

ff 

ff 

ff-ff 

ff 

ff 

ff 

d7 

00 

e4 

03 

W.d. 

sOeOl : 00000030 

11 

Oe 

30 

00 

00 

00 

40 

09-ff 

ff 

ff 

ff 

00 

00 

00 

00 

. .0. . .0 

SOeOl : 00000040 

14 

0b 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 


SOeOl : 00000050 

cd 

21 

cb 

72 

6e 

6c 

20 

2d-2 0 

4e 

6f 

74 

00 

20 

20 

20 

MIKrnl - Not. 

SOeOl : 00000060 

20 

20 

20 

20 

20 

20 

20 

20-00 

00 

00 

00 

00 

20 

20 

20 


SOeOl : 00000070 

20 

20 

20 

20 

20 

20 

20 

20-00 

00 

00 

00 

e7 

08 

50 

03 

g.P. 

>>> Word at PDB+0x32 

is 

0030. 

This : 

is the 

number of file 

handles 

>>> supported in this 

; VDM. 

The default is 

0014 . 

So 

the 

! PDB_i 

JFN_ 

.table 


>>> has been expanded. 

>>> Far pointer at PDB+34 is &0940:0000. This is the current 
>>> PDB_JFN_table address. (By default this would have pointed to 
>>> PDB+0xl8, but the table has been expanded.) 

>>> Now dump the current PDB_JFN_table . 

##db & 940 : 0 


40940:00000000 

dl 

dl 

dl 

dO 

d2 

00 

01 

02-03 

04 

05 

06 

07 

08 

09 

ff 

QQQPR. 

40940:00000010 

0b 

ff 

ff 

ff 

ff 

ff 

ff 

ff-ff 

ff 

ff 

ff 

ff 

ff 

ff 

ff 


40940:00000020 

ff 

ff 

ff 

ff 

ff 

ff 

ff 

ff-ff 

ff 

ff 

ff 

ff 

ff 

ff 

ff 


40940:00000030 

4d 

00 

00 

08 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

M 

40940 : 00000040 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 


40940 : 00000050 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 


40940:00000060 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 


40940 : 00000070 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 



>>> JFNs 0-4 correspond to VSFNs dl, dl, dl, dO and d2 . Each of these 
>>> is greater than Oxcf and therefore a real mode device handle 
>>> and not managed by the protect mode file system. 

>>> JFN 5 is the first open file in this VDM. It has VSFN 00. This 
>>> may be used as an index into the protect mode JFN_table to 
>>> find the corresponding SFT, MFT and file name. The technique from 
>>> this point is the same as in the preceding section. 


>>> Dump the JFN_table from the PTDA. 

##dw %7b8c9a04 jfn_ptable-ptda_start 12 
0030 : OOOOf fbc 0000 lea8 

>>> We are no longer based on selector 30 so the JFN table has been 
>>> expanded. Now dump the current table... 

##dw #lea8:0 

lea8 : 00000000 006a 0069 0075 008c 008b 005e 0089 0088 


Iea8 : 00000010 
lea8 : 00000020 
lea8 : 00000030 
lea8 : 00000040 
lea8 : 00000050 
lea8 : 00000060 


008a 0097 ffff 008d ffff ffff ffff ffff 
ffff ffff ffff ffff ffff ffff ffff ffff 
ffff ffff ffff ffff ffff ffff ffff ffff 
ffff ffff ffff ffff ffff ffff ffff ffff 
ffff ffff ffff ffff ffff ffff ffff ffff 


Past end of segment: lea8 : 00000060 


>>> VSFN 00 corresponds to SFN 006a. Now dump the SFT... 


## .d sft 438 : (8+ (83*6a) ) 


sf_ref_count : 

0001 

sf i_mode : 

00a0 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0000:0000 

sf i_mtime : 

0000 

sf_MFT : 

fe7c8b54 

sf i_mdate : 

0000 

sf dFAT_f irFILEclus : 

4d58 

sf i_size : 

00000594 

sfTrap 13 (0DH) 

- General Protection 

Fault 0000 - In 

Debugger 


eax=90000000 ebx=ffdd55ba ecx=00000000 edx=013c0000 esi=00006373 edi=ffff2940 
eip=000054ae esp=00003b0a ebp=00003bl4 iopl=0 rf — — nv up di pi zr na pe nc 
cs=0120 ss=0128 ds=0128 es=0128 fs=0168 gs=0000 cr2=16ea2000 cr3=001d9000 

0120 : 000054ae ff56fe call word ptr [bp-02] ss:3bl2=b23b 


>>> Oops! the debugger had a problem. Not to worry, he told us 
»> the MFT address, so dump that . . . (this also appears at SFT+0xl9) 


>>> the SFT again . . . 
##dw 438 : (8+ (83*6a) ) 


0438:00003646 

0001 

0000 

0000 

0000 

0000 

0000 

0800 

c800 

0438:00003656 

0000 

0000 

0000 

0000 

5400 

7 c 8b 

58fe 

484d 

0438:00003666 

OOlf 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0438:00003676 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0438:00003686 

0000 

7830 

007a 

0000 

0000 

0000 

0000 

aOOO 

0438:00003696 

0000 

1200 

0000 

0000 

0000 

0000 

0000 

0000 

0438 : 000036a6 

9400 

0005 

9400 

0005 

0000 

ldOO 

0100 

6a0e 

0438 : 000036b6 

0000 

0000 

0000 

0000 

0020 

0000 

0000 

0000 


»> MFT 

##db %fe7c8b54 


%fe7c8b54 

4b 

53 

45 

4d 

01 

02 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

KSEM 

%fe7c8b64 

00 

00 

46 

36 

38 

04 

00 

00-00 

00 

4b 

53 

45 

4d 

01 

02 

. . F68 KSEM. . 

%fe7c8b74 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

ba 

Of 

00 

00 


%fe7c8b84 

6d 

46 

12 

00 

43 

3a 

5c 

4f-53 

32 

5c 

4d 

44 

4f 

53 

5c 

mF. .C:\OS2\MDOS\ 

%fe7c8b94 

57 

49 

4e 

4f 

53 

32 

5c 

53-59 

53 

54 

45 

4d 

5c 

4b 

42 

WINOS2\SYSTEM\KB 

%fe7c8ba4 

44 

55 

4b 

2e 

44 

4c 

4c 

00-52 

8b 

7c 

fe 

3c 

00 

7d 

ff 

DUK.DLL.R. | ~<. } . 

%fe7c8bb4 

00 

00 

00 

00 

00 

00 

00 

00-fO 

8b 

7c 

fe 

20 

f 7 

8a 

7b 

p. 1 ~ W. { 

%fe7c8bc4 

fO 

fl 

f 9 

78 

00 

04 

00 

00-48 

4f 

4f 

4b 

60 

bf 

f 9 

ff 

pqyx .... HOOK '?y . 


»> The file name is: C:\OS2\MDOS\WINOS2\SYSTEM\KBDUK.DLL 


Finding Flandles From File Names 


File system names are recorded in the MFT control block. Each MFT has a handle, which is its linear address and a key which is the 
concatenation of the hVPB with the file name considered as a string of bytes. The MFT keys are managed in a Patricia Tree structure 
similar to that described by Knuth in The Art of computer Programming, Volume 3, Sorting and Searching Algorithms Flowever, note that 
the implementation of the PTree in OS/2 is slightly modified from the Knuth treatment. 

The SAS gives us the address of the header node for the MFT PTree. The header node points to the first PTree entry. Each entry 
comprises a bit index, a key length, a left pointer, a right pointer and an MFT handle. The bit-index is used to specify the bit in the key to be 
tested. If the bit 0 then the left pointer is taken, otherwise the right pointer is taken. When the selected pointer points back to the same PTree 
entry then the search stops and the required MFT is found from the MFT handle. The bit index count the bits of each byte of the key from left 
to right. 


This technique is now illustrated in the following example: 


>>> Who's got C:\0S2\HELP\HMHELP.HLP open? 

>>> First look through VPBs to find hVPB for C: 

>>> Find the VPB segment and chain through them starting with the 
>>> first at offset 0x12. 


# In gdt_vpb 

0138:00000098 OS2KRNL GDT_VPB 

# .d vpb 98:12 


vpb_f link : 

0000 

vpdFAT_cluster_mask : 

02 

vpb_blink : 

008d 

vpdFAT_cluster_shift : 

00 

vpb_ref_count : 

0057 

vpdFAT_f irst_FAT : 

0000 

vpb_search_count : 

0004 

vpdFAT_FAT_count : 

00 

vpb_f irst_access : 

00 

vpdFAT_root_entries : 

0030 

vpb_signature : 

444a 

vpdFAT_f irst_sector : 

06001100 

vpb_f lags (2 ) : 

02:00 

vpdFAT_max_c luster : 

7d5c 

vpb_FSC : 

#00c8 : 0008 

vpdFAT_FAT_size : 

b2 13 

vpi_ID : 

25be2014 

vpdFAT_dir_sector : 

f c04b800 

vpi_pDPB : 

#04c8 : 0038 

vpdFAT_media : 

0a 

vpi_cbSector : 

0200 

vpdFAT_next_f ree : 

00b2 

vpi_totsec : 

00049020 

vpdFAT_f ree_cnt : 

04b8 

vpi_trksec : 

0023 

vpdFAT_FATentrysize : 

b2 

vpi_nhead : 

000c 

vpdFAT_IDsector : 

00000000 

vpi_pDCS : 

#0000:0000 

vpdFAT_access : 

0000 

vpi_pVCS : 

#0000:0000 

vpdFAT_accwait : 

0000 

vpi_drive : 

02 

vpdFAT_pEASFT : 

#0000:0000 

vpi_unit : 

02 



vpi_text : 

UNLABELED 




vpi_flags: 0003 

>>> We get lucky the first time. This VPD is for drive 2, that is C: 

>>> So the hVPB=0012 (i.e the offset into the VPD segment) . 

>>> We now need to form the MFT key for the file name we wish to 
>>> look up. So convert the file name to ASCII and concatenate to the 
>>> hVPB (as a byte pair, that is, reversed) 

>>> C : \ OS2\HELP\HMHELP . HLP 

»> 12 00 43 3a 5c 4f 53 32 5c 48 45 4c 50 5c 48 4d 48 45 4c 50 2e 48-4c 50 

>>> Locate the MFT PTree head from the SAS - in a dump use .A 
>>> otherwise unravel the SAS from selector 70 

# . a 

SAS Base Section 

SAS signature: SAS 
offset to tables section: 0016 
FLAT selector for kernel data: 0168 
offset to configuration section: 001E 
offset to device driver section: 0020 
offset to Virtual Memory section: 002C 
offset to Tasking section: 005C 
offset to RAS section: 006E 
offset to File System section: 0074 
offset to infoseg section: 0080 

SAS Protected Modes Tables Section 

selector for GDT: 0008 
selector for LDT: 0000 
selector for IDT: 0018 
selector for GDTPOOL : 0100 

SAS Device Driver Section 

offset for the first bimodal dd: 0CB9 
offset for the first real mode dd: 0000 
sel for Drive Parameter Block: 04C8 
sel for ABIOS prot . mode CDA: 0000 
seg for ABIOS real mode CDA: 0000 
selector for FSC: 00C8 

SAS Task Section 

selector for current PTDA: 0030 
FLAT offset for process tree head: FFF10910 
FLAT address for TCB address array: FFF06BB6 
offset for current TCB number: FFDFFB5E 
offset for ThreadCount : FFDFFB62 

SAS File System Section 

handle to MFT PTree: FE72CFBC 
selector for System File Table: 00C0 
sel. for Volume Parameter Bloc: 0788 
sel. for Current Directory Struc: 07B8 
selector for buffer segment: 00A8 



SAS Information Segment Section 

selector for global info seg: 0428 
address of curtask local infoseg: 03C80000 
address of DOS task's infoseg: FFFFFFFF 
selector for Codepage Data: 07CB 
SAS RAS Section 

selector for System Trace Data Area: 04B0 
segment for System Trace Data Area: 04B0 
offset for trace event mask: 0B28 

SAS Configuration Section 

offset for Device Config. Table: 0D50 

SAS Virtual Memory Mgt . Section 

Flat offset of arena records: FFF13304 
Flat offset of object records: FFF1331C 
Flat offset of context records: FFF1330C 
Flat offset of kernel mte records: FFF0A891 
Flat offset of linked mte list: FFF07934 
Flat offset of page frame table: FFF11A70 
Flat offset of page range table: FFF111EC 
Flat offset of swap frame array: FFF03BAC 
Flat offset of Idle Head: FFF10090 
Flat offset of Free Head: FFF10080 
Flat offset of Heap Array: FFF11B78 
Flat offset of all mte records: FFF12E04 

>>> MFT Ptree is at %fe72cfbc 

>>> each entry including the header has the following format: 

>>> +0 W Bit index 

>>> +2 W key length 

>>> +4 D left link 

>>> +8 D right link 

>>> +c D MFT handle (MFT pointer) 

>>> dump the header and the first entry pointed to by the left link 

# dd %FE72CFBC 14 

%fe72cfbc ffffffff fe8 67f 10 fe72cfbc 00000000 

# dd %FE8 67f 10 14 

%fe8 67f 10 00100000 fe861454 fe861470 fe721a04 

>>> .... 

>>> K1 BI left right MFT 

>>> 

>>> Note the word reversal of the Bit index and the Key length because 
>>> we dumped double-words . 

>>> BI tells us to test bit 0 of the key (numbering from the left 

>>> starting with 0) . 12 00 = 0001 0010 0000 0000 

>>> Bit zero is 0 so take the left link. 

# dd %FE8 61454 14 

%fe8 61454 00100001 fe73dl94 fe845370 fe72196c 

>>> Now test bit 1. This is still zero. Again take the left link. 

# dd %FE73dl 94 14 

%fe73dl94 00190003 fe72cf3c fe87ec34 fe72dea4 

>>> Now test bit 3. This is 1 so take the right link. 

# dd %FE87ec34 14 

%fe87ec34 000b0029 fe87ebdc fe834308 fe87ebf0 

>>> Now test bit 29 4f .... = 0100 1111 

>>> This is 1 so take the right link. 

# dd %FE834308 14 

%fe834308 0019002b fe869f30 fe834254 fe834274 

>>> Test bit 2b. This is 0. Turn left. 

# dd %FE8 6 9f 30 14 

%fe869f 30 0017002c fe885ac4 fe87ec90 fe869ee0 

>>> Test bit 2c. This is 1. Turn right. 

# dd %FE87ec90 14 

%fe87ec90 000f002d fe87ec90 fe834ac8 fe87ec48 

>>> Test bit 2d. This is 1. Turn right. 


# dd %FE834ac8 14 



%fe834ac8 001a0044 fe845ef8 fe724fe4 fe845c0c 

>>> Test bit 44 5c.... = 0101 1100. 

>>> This is 1. Turn right. 

# dd %FE724fe4 14 

%fe724fe4 001b004b fe801414 fe862de8 fe722fac 

>>> Test bit 4b 48 = 0100 1000 

>>> This is 0. Turn left. 

# dd %FE801414 14 

%fe801414 0017004c fe801d90 fe7cef84 fe7dffb0 

>>> Test bit 4c. This is 1. Turn right. 

# dd %FE7cef 84 14 

%fe7cef 84 00180073 fe7cef84 fe801414 fe7cef30 

>>> Test bit 73 48.... = 0100 1000 

>>> This is zero and the left link points to the same node. 

>>> Therefore the search ends and we should have found the MFT 
>>> for our file name. Dump the MFT to check 


# db %FE7cef 30 150 


%fe7cef 30 

4b 

53 

45 

4d 

01 

02 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 

KSEM 

%fe7cef 40 

00 

00 

28 

31 

38 

04 

00 

00-00 

00 

4b 

53 

45 

4d 

01 

02 

. . (18 KSEM. . 

%fe7cef 50 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

69 

03 

00 

00 


%fe7cef 60 

6d 

46 

12 

00 

43 

3a 

5c 

4 f-53 

32 

5c 

48 

45 

4c 

50 

5c 

mF. .C:\OS2\HELP\ 

%fe7cef70 

48 

4d 

48 

45 

4c 

50 

2e 

48-4c 

50 

00 

00 

16 

e6 

7c 

fe 

HMHELP . HLP . . . f | ~ 


>>> The MFT + 0x22 points is the SFT segment's offset. So dump the 
>>> SFT .... 

# In gdt_sft 

0138 : OOOOOOcO OS2KRNL GDT_SFT 
dw c 0 : 0 1 1 

#00c0 : 00000000 0438 


# .d sft 438:3128 


sf_ref_count : 

0001 

sf i_mode : 

OOaO 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0438 : 33b7 

s f i_mt ime : 

0000 

sf_MFT : 

fe7cef 30 

sf i_mdate : 

0000 

sfdFAT_f irFILEclus : 

3344 

sf i_size : 

00007058 

sfdFAT_cluspos : 

OflO 

sf i_position : 

00000a90 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

s f i_P I D : 

0012 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 


sfi_selfsfn: 0060 

sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sf i_DOSattr : 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




>>> sfi_PID tells us PID 12 has opened this file. But the 
>>> sf_chain is not zero, so other processes have also opened 
>>> this file. Follow the sf_chain 


# .d sft 438 : 33b7 


sf_ref_count : 

0001 

sf i_mode : 

00a0 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0438 : 2dl0 

s f i_mt ime : 

0000 

sf_MFT : 

fe7cef 30 

sf i_mdate : 

0000 

sfdFAT_f irFILEclus : 

284a 

sf i_size : 

00007058 

sfdFAT_cluspos : 

OflO 

sf i_position : 

00000a90 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

s f i_P I D : 

000c 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 


sfi_selfsfn: 0065 



sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sfi_DOSattr : 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




# .d sft 438 : 2dl0 




sf_ref_count : 

0001 

sf i_mode : 

00a0 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0438 : 2el6 

sf i_mtime : 

0000 

sf_MFT : 

fe7cef 30 

sf i_mdate : 

0000 

sf dFAT_f irFILEclus : 

1986 

sf i_size : 

00007058 

sfdFAT_cluspos : 

OflO 

sf i_position : 

00000a90 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

sf i_PID : 

000b 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 


sfi_selfsfn: 0058 

sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sf i_DOSattr : 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




# .d sft 438 : 2el6 


sf_ref_count : 

0001 

sf i_mode : 

00a0 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0000:0000 

s f i_mt ime : 

3ca2 

sf_MFT : 

fe7cef 30 

sf i_mdate : 

ld62 

sfdFAT_f irFILEclus : 

050c 

sf i_size : 

00007058 

sfdFAT_cluspos : 

OflO 

sf i_position : 

00000a90 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

sf i_PID : 

OOOd 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 

SINGLEQ$ 

sfi_selfsfn: 005 

sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sf i_DOSattr : 

00 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




>>> In all, PIDs 0012, 000c, 000b and OOOd have opened 
»> C:\OS2\HELP\HMHELP.HLP 


The Record Lock Record 


In this example we investigate the RLR and how it records a locked range within a file. We will also see how the Block-Id of a thread waiting 
for access to a locked file range directly leads to discovery of the RLR. 

We introduce the RLR by showing its relationship to other file-system control blocks in the following diagram. This depicts the following 
situation: 


Three processes have opened the same file, in the order process 1, 2, then 3. 

The MFT heads the chain of SFTs, each representing an open instance of the same file. The MFT points to the most recent SFT 
open instance. 

Process 1 and process 2 have each locked a range within the same file. RLRs 1 and 2 correspond to process 1 and 2. 

The MFT heads the chain of RLRs starting with the most recent. The pointer from the MFT (Iptr) is the offset within the RLR 
segment. 



A Hang Problem Involving Locked Records 


>>> Problem: Program "Pain" running in Slot 4d is hung with a blank 
>>> screen. Everything else in the system seems OK. Mouse moves, we 
>>> can change focus and so on.. 

>>> Lets take a look at slot 4d. 

# .p 4d 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

004d# 001c 001b 001c 0001 blk 0300 ab80f000 ab99e220 ab980620 le60 Id PAIN 

>>> Blocked! 

>>> We can approach this two ways: 

>>> 1) Take a look at what the application did 

>>> 2) Take a look at the Blockld and try see how far the system got 


>>> Looking at the application we examine its registers and determine 
>>> what API it called to cause it to block. 

# .s 4d 

Current slot number: 004d 


# . r 

eax=00023305 ebx=00000000 ecx=00000006 edx=0002004f esi=00000000 edi=00000000 
eip=00010181 esp=0002337c ebp=000233fc iopl=2 — — — nv up ei pi zr na pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001d9000 

005b : 00010181 83c414 add esp,+14 

# u %eip-10 


00010171 

e8508d45e0 

call 

%e04 68ec6 

00010176 

50 

push 

eax 

00010177 

f f 75f 8 

push 

dword ptr [ebp 

0001017a 

b005 

mov 

al, 05 

0001017c 

e8c762f 81b 

call 

%lbf 96448 

00010181 

83c4 14 

add 

esp, +14 

00010184 

ObcO 

or 

eax, eax 

00010186 

7404 

j z 

%0001018c 

00010188 

ebde 

jmp 

%00010168 

0001018a 

8bc0 

mov 

eax, eax 

0001018c 

b858000200 

mov 

eax, 00020058 

00010191 

e8fa000000 

call 

%000102 90 


# In %lbf 96448 

%lbf 9 64 4 8 DOSCALL1 DOS32SETFILELOCKS 

>>> The last call was to DosSetFileLocks and we haven't returned. If 
>>> we want any more information we have to analyse the Blockld. 


# .pb# 

Slot Sta BlockID Name Type Addr Symbol 

004d# blk 00b8002 9 PAIN 

# .m 0b8 : 2 9 

*har par cpg va fig next prev link hash hob hal 

OOdd %feaf 0308 00000010 %aa7a3000 129 OOdc OOde 0000 OOcb OOea 0000 sel=00b8 
hob har hobnxt figs own hmte sown,cnt It st xf 

OOea OOdd 0000 0124 ff47 0000 0000 00 00 00 00 fsreclok 



>>> Seems to be blocked on a File System Record Lock (RLR) . 
>>> This implies that someone else has already locked a 
>>> conflicting record range. 


>>> We need to dump the RLR and locate the System File Table Entry 
>>> associated with it. The Blockld is the address of the RLR. 


# dw 0b8:29 


00b8 : 0000002 9 

0000 

0000 

0020 

0000 

002f 

0000 

526b 

OOdO 

00b8 : 00000039 

0000 

0018 

0000 

0002 

0000 

2000 

0000 

2f 00 

00b8 : 0000004 9 

0000 

2000 

9806 

29ab 

IcOO 

0300 

0000 

006e 

00b8 : 00000059 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

00b8 : 00000069 

0000 

0000 

8500 

0000 

0000 

0000 

0000 

0000 

00b8 : 00000079 

0000 

0000 

0000 

0000 

0000 

0000 

009c 

0000 

00b8 : 00000089 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

00b8 : 00000099 

0000 

b300 

0000 

0000 

0000 

0000 

0000 

0000 


>>> RLR+c is a farl6 pointer to the associated System File Table entry 
>>> (SFT) . 

>>> RLR+4 and RLR+8 are the range of bytes locked. Offset +20 - +2f 
>>> has been locked. 

>>> We now format the SFT for the process that locked this range: 


# .d sft d0:526b 


sf_ref_count : 

0001 

sf i_mode 

0042 

sf_usercnt : 

0000 

sf i_hVPB 

04e0 

reserved : 

00 

sf i_ctime 

0000 

sf_f lags (2 ) : 

0040:0000 

sf i_cdate 

0000 

sf_devptr : 

#0000 : 04e0 

sf i_atime 

0000 

sf_FSC : 

#0000 : f f40 

sf i_adate 

0000 

sf_chain : 

#0000:0000 

sf i_mtime 

5df 6 

sf_MFT : 

fe87ca0c 

sf i_mdate 

If 3a 

sfdFAT_f irFILEclus : 

0197 

sf i_size 

00000061 

sfdFAT_cluspos : 

0000 

sf i_position 

00000030 

sfdFAT_lstclus : 

0197 

sf i_UID 

0000 

sfdFAT_dirsec : 

0000009f 

s f i_P I D 

0018 

sfdFAT_dirpos : 

0a 

sf i_PDB 

0000 

sfdFAT_name : 

VIN 

sf i_ 

.self sfn : 

sfdFAT_EAHandle : 

0000 

sf i_tstamp 

00 

sf_plock : 

0000 

sf i_DOSattr 

20 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




>>> The SFT contains a pointer to the MFT, which contains the fully 
>>> qualified file name. If the file is FAT then the short name in the 
>>> SFT is also meaningful. 

# .d mft % fe87ca0c 

mft_ksem: 

Signature : KSEM 

Type : SHARE 

Flags : 01 

Owner : 0000 

mft_lptr: 0029 
mft_pCMap: 00000000 
mf t_CMapKSem : 

mft_hvpb: 466d 
mft_name: A:\LAB19\VIN 

>>> So the locked File is a:\labl9\vin 


Nest: 0000 
Readers: 0000 
PendingReaders : 0000 
PendingWriters : 0000 

mft_sptr: 00d0:5600 
mft_serl : 128f 

mft_opflags: 0000 mft_flags: 0000 


>>> The SFT also contains the Pid of the process that opened, and in 
>>> this case locked, this file - Pid 18 


# .p 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0001 0001 0000 0000 0001 blk 0100 ffe3a000 ffe3ca00 ffe3c800 le7c 00 *ager 

0002 0001 0000 0000 0002 blk 0200 ab779000 ffe3ca00 ab977020 lf3c 00 *tsd 

0003 0001 0000 0000 0003 blk 0200 ab77b000 ffe3ca00 ab977220 lf50 00 *ctxh 



0004 

0001 

0000 

0000 

0004 

blk 

081f 

ab77d000 

f fe3ca00 

ab977420 

1 f 4 8 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

ab77f 000 

f fe3ca00 

ab977620 

1 f 2 0 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

ab7 81000 

f fe3ca00 

ab977820 

1 f 3c 

00 

*asyncr 

0009 

0002 

0000 

0002 

0001 

rdy 

0804 

ab787000 

ab997020 

ab977e20 

lc88 

00 

CNTRL 

0008 

0002 

0000 

0002 

0002 

blk 

0804 

ab785000 

ab997020 

ab977c20 


00 

CNTRL 

000b 

0002 

0000 

0002 

0003 

blk 

0804 

ab78b000 

ab997020 

ab978220 


00 

CNTRL 

000c 

0002 

0000 

0002 

0004 

rdy 

0804 

ab78d000 

ab997020 

ab978420 

lc9c 

00 

CNTRL 

000a 

0003 

0000 

0003 

0001 

blk 

0800 

ab789000 

ab997620 

ab978020 


00 

DOSCTL 

OOOd 

0004 

0001 

0004 

0001 

rdy 

0500 

ab78f 000 

ab997c20 

ab978620 

ledO 

01 

PMSHL32 

OOOf 

0004 

0001 

0004 

0002 

blk 

0800 

ab793000 

ab997c20 

ab978a20 

led4 

01 

PMSHL32 

0010 

0004 

0001 

0004 

0003 

blk 

0800 

ab795000 

ab997c20 

ab978c20 


01 

PMSHL32 

0011 

0004 

0001 

0004 

0004 

blk 

0800 

ab797000 

ab997c20 

ab978e20 


01 

PMSHL32 

0012 

0004 

0001 

0004 

0005 

blk 

0800 

ab799000 

ab997c20 

ab979020 


01 

PMSHL32 

0015 

0004 

0001 

0004 

0006 

blk 

0200 

ab7 9f 000 

ab997c20 

ab979620 

ledc 

01 

PMSHL32 

0016 

0004 

0001 

0004 

0007 

blk 

0200 

ab7al000 

ab997c20 

ab979820 

ledc 

01 

PMSHL32 

0017 

0004 

0001 

0004 

0008 

blk 

0200 

ab7a3000 

ab997c20 

ab97 9a2 0 


01 

PMSHL32 

0007 

0004 

0001 

0004 

0009 

blk 

0500 

ab783000 

ab997c20 

ab977a20 


01 

PMSHL32 

0018 

0004 

0001 

0004 

000a 

blk 

0800 

ab7a5000 

ab997c20 

ab979c20 


01 

PMSHL32 

0019 

0004 

0001 

0004 

000b 

blk 

0800 

ab7a7000 

ab997c20 

ab979e20 

leb8 

01 

PMSHL32 

001a 

0004 

0001 

0004 

000c 

blk 

0800 

ab7a9000 

ab997c20 

ab97a020 

leb8 

01 

PMSHL32 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

001b 

0004 

0001 

0004 

OOOd 

blk 

0804 

ab7ab000 

ab997c20 

ab97a220 

lea8 

01 

PMSHL32 

001c 

0004 

0001 

0004 

OOOe 

blk 

0804 

ab7ad000 

ab997c20 

ab97a420 

lebO 

01 

PMSHL32 

OOld 

0004 

0001 

0004 

OOOf 

blk 

0500 

ab7af 000 

ab997c20 

ab97a620 

lea8 

01 

PMSHL32 

OOle 

0004 

0001 

0004 

0010 

blk 

0801 

ab7bl000 

ab997c20 

ab97a820 

lbac 

01 

PMSHL32 

OOlf 

0004 

0001 

0004 

0011 

blk 

0801 

ab7b3000 

ab997c20 

ab97aa20 


01 

PMSHL32 

0020 

0004 

0001 

0004 

0012 

blk 

0801 

ab7b5000 

ab997c20 

ab97ac20 


01 

PMSHL32 

0021 

0004 

0001 

0004 

0013 

blk 

0800 

ab7b7000 

ab997c20 

ab97ae20 


01 

PMSHL32 

0022 

0004 

0001 

0004 

0014 

blk 

0800 

ab7b9000 

ab997c20 

ab97b020 

lb80 

01 

PMSHL32 

0024 

0004 

0001 

0004 

0015 

blk 

0200 

ab7bd000 

ab997c20 

ab97b420 

ledO 

01 

PMSHL32 

0030 

0004 

0001 

0004 

0016 

blk 

0800 

ab7d5000 

ab997c20 

ab97cc20 

leac 

01 

PMSHL32 

004c 

001b 

0004 

001b 

0001 

blk 

0400 

ab80d000 

ab99dc20 

ab980420 

led4 

Id 

CMD 

004b 

001a 

0004 

001a 

0001 

blk 

0200 

ab80b000 

ab99d620 

ab980220 

leb8 

lc 

CMD 

004a 

0019 

0004 

0019 

0001 

blk 

0200 

ab809000 

ab9 9d02 0 

ab980020 

leb8 

14 

CMD 

0048 

0017 

0004 

0017 

0001 

blk 

0200 

ab805000 

ab99a620 

ab97f c20 

led4 

04 

CMD 

0047 

0014 

0004 

0014 

0001 

blk 

0200 

ab803000 

ab99c420 

ab97fa20 

leb8 

11 

CMD 

003d 

0012 

0004 

0012 

0001 

blk 

0200 

ab7ef 000 

ab99be20 

ab97e620 

ledO 

la 

IBMAVSD 

0046 

0011 

0004 

0011 

0001 

blk 

0200 

ab801000 

ab99b820 

ab97f 820 

ledO 

19 

FPWMON 

003a 

0010 

0004 

0010 

0001 

blk 

0200 

ab7e9000 

ab99b220 

ab97e020 

ledO 

18 

PMFAX 

0041 

0010 

0004 

0010 

0002 

blk 

0800 

ab7 f 7000 

ab99b220 

ab97ee20 

ledc 

18 

PMFAX 

0043 

0010 

0004 

0010 

0003 

blk 

0500 

ab7 fbOOO 

ab99b220 

ab97 f 22 0 


18 

PMFAX 

0045 

0010 

0004 

0010 

0005 

blk 

0500 

ab7f f 000 

ab99b220 

ab97f 620 

ld24 

18 

PMFAX 

0039 

OOOf 

0004 

OOOf 

0001 

blk 

0200 

ab7e7000 

ab99ac20 

ab97de20 

ledO 

17 

FPWPIMX 

0040 

OOOf 

0004 

OOOf 

0002 

blk 

0200 

ab7f 5000 

ab99ac20 

ab97ec20 

ledO 

17 

FPWPIMX 

0042 

OOOf 

0004 

OOOf 

0003 

blk 

0200 

ab7f 9000 

ab99ac20 

ab97f 020 

ledO 

17 

FPWPIMX 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0038 

OOOe 

0004 

OOOe 

0001 

blk 

0200 

ab7e5000 

ab99a020 

ab97dc20 

ledO 

16 

DINFO 

003f 

OOOe 

0004 

OOOe 

0002 

blk 

0500 

ab7f 3000 

ab99a020 

ab97ea20 

lfOO 

16 

DINFO 

0037 

OOOd 

0004 

OOOd 

0001 

blk 

0200 

ab7e3000 

ab999a20 

ab97da20 

ledO 

15 

MRFILE32 

003e 

OOOd 

0004 

OOOd 

0002 

blk 

0200 

ab7 f 1 000 

ab999a20 

ab97e820 


15 

MRFILE32 

0033 

000c 

0004 

000c 

0001 

blk 

0200 

ab7db000 

ab998e20 

ab97d220 

ledO 

13 

PULSE 

*003b 

000c 

0004 

000c 

0002 

run 

0100 

ab7eb000 

ab998e20 

ab97e220 

1 f 2 8 

13 

PULSE 

003c 

000c 

0004 

000c 

0003 

blk 

081f 

ab7ed000 

ab9 98e2 0 

ab97e420 

lfOO 

13 

PULSE 

0026 

0008 

0004 

0008 

0001 

blk 

0500 

ab7cl000 

ab999420 

ab97b820 

ledO 

12 

PMSHL32 

002d 

0008 

0004 

0008 

0002 

blk 

0200 

ab7cf 000 

ab999420 

ab97c620 

ledc 

12 

PMSHL32 

002e 

0008 

0004 

0008 

0003 

blk 

0200 

ab7dl000 

ab999420 

ab97c820 


12 

PMSHL32 

002f 

0008 

0004 

0008 

0004 

blk 

0200 

ab7d3000 

ab999420 

ab97ca20 

ledO 

12 

PMSHL32 

0028 

0008 

0004 

0008 

0005 

blk 

0200 

ab7c5000 

ab999420 

ab97bc20 


12 

PMSHL32 

0025 

0008 

0004 

0008 

0006 

blk 

0200 

ab7bf 000 

ab999420 

ab97b620 

ledc 

12 

PMSHL32 

002c 

0008 

0004 

0008 

0007 

blk 

0200 

ab7cd000 

ab999420 

ab97c420 

ledO 

12 

PMSHL32 

0031 

0008 

0004 

0008 

0008 

blk 

0500 

ab7d7000 

ab999420 

ab97ce20 

ledc 

12 

PMSHL32 

0032 

0008 

0004 

0008 

0009 

blk 

0200 

ab7d9000 

ab999420 

ab97d020 

ledc 

12 

PMSHL32 

0034 

0008 

0004 

0008 

000b 

blk 

0500 

ab7dd000 

ab999420 

ab97d420 


12 

PMSHL32 

0035 

0008 

0004 

0008 

000c 

blk 

0200 

ab7df 000 

ab999420 

ab97d620 

leac 

12 

PMSHL32 

0036 

0008 

0004 

0008 

OOOd 

blk 

0500 

ab7el000 

ab999420 

ab97d820 

leb8 

12 

PMSHL32 

0044 

0008 

0004 

0008 

OOOe 

blk 

0200 

ab7 fdOOO 

ab999420 

ab97f 420 

ledO 

12 

PMSHL32 

0023 

0006 

0004 

0006 

0001 

blk 

0200 

ab7bb000 

ab998820 

ab97b220 


10 

PMSPOOL 

0027 

0006 

0004 

0006 

0002 

blk 

0500 

ab7c3000 

ab998820 

ab97ba20 


10 

PMSPOOL 

0029 

0006 

0004 

0006 

0003 

blk 

0200 

ab7c7000 

ab998820 

ab97be20 


10 

PMSPOOL 

002a 

0006 

0004 

0006 

0004 

blk 

0500 

ab7c9000 

ab998820 

ab97c020 


10 

PMSPOOL 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

002b 

0006 

0004 

0006 

0005 

blk 

0500 

ab7cb000 

ab998820 

ab97c220 


10 

PMSPOOL 

OOOe 

0005 

0004 

0005 

0001 

blk 

0800 

ab7 91 000 

ab998220 

ab978820 


00 

HARD ERR 

0013 

0005 

0004 

0005 

0002 

blk 

0800 

ab79b000 

ab998220 

ab979220 


00 

HARD ERR 

0014 

0005 

0004 

0005 

0003 

blk 

0800 

ab7 9d000 

ab9 98220 

ab979420 


00 

HARD ERR 

0049 

0018 

0017 

0018 

0001 

blk 

0200 

ab807000 

ab99ca20 

ab97 f e2 0 

lcd4 

04 

FROMAGE 

004d# 

001c 

001b 

001c 

0001 

blk 

0300 

ab80f 000 

ab99e220 

ab980620 

le60 

Id 

PAIN 


>>> Pid 18 is evidently FROMAGE . 



>>> FROMAGE has the VIN and PAIN wants it! 


>>> We had better find out why FROMAGE has blocked. 
# .s 49 

Current slot number: 0049 


# . r 

eax=00000001 ebx=00020366 ecx=lbf90000 edx=00020004 esi=13fa0000 edi=13fal052 
eip=0000a0c3 esp=0000324a ebp=00023270 iopl=2 — — — nv up ei ng nz ac pe cy 
cs=dfdf ss=0017 ds=9fe7 es=9fe7 fs=150b gs=0000 cr2=00000000 cr3=001d9000 

Invalid linear address: dfdf : 0000a0c3 

# In 

dfdf : 0000a053 DOSCALL1 GetCharln + 70 

>>> Looking at this from the application aspect may be difficult since 
>>> some of the code has been paged out (The invalid linear address 
>>> message) . 


>>> The near symbol gives a clue. We could try unwinding the stack and 
>>> hope that the stack is still paged in. 


dw %ebp 
00023270 

bl7e 

dfdf 

9fe7 

0000 

0000 

a97a 

dfdf 

0000 

00023280 

0000 

0366 

9fe7 

a8ec 

a48d 

1052 

a399 

32a6 

00023290 

203c 

0053 

9fdf 

1052 

1052 

32c8 

32a6 

0360 

000232a0 

0007 

4fa8 

32b4 

blf 0 

dfdf 

9fd7 

0000 

0005 

000232b0 

bb2b 

dfd7 

0000 

0000 

1044 

9fd7 

1052 

9fd7 

000232c0 

32c8 

0002 

0053 

lbf 9 

32f 0 

0002 

lcba 

lbf 9 

000232d0 

0000 

0000 

0000 

0000 

1044 

13fa 

1052 

13fa 

000232e0 

d 

0000 

0000 

0360 

0002 

0360 

0002 

0042 

0008 

000232f 0 

3334 

0002 

7 8cd 

0001 

0000 

0000 

0000 

0009 

00023300 

1000 

0000 

3330 

0002 

0000 

0000 

0360 

0002 

00023310 

0360 

0002 

0000 

0002 

0000 

0000 

0000 

0000 

00023320 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

00023330 

7000 

ab80 

3388 

0002 

2abc 

0001 

0360 

0002 

00023340 

0000 

0009 

1000 

0000 

33f 0 

0002 

0029 

0000 

00023350 

0020 

0000 

0001 

0000 

0000 

0000 

0000 

0000 

00023360 

0000 

0000 

3388 

0002 

02c5 

0001 

339c 

0002 


>>> This is going to be haphazard. Evidently the code we are currently 
>>> executing is not using EBP as a stack frame pointer. All we can do 
>>> is scan through the stack looking for a likely stack frame or a 
>>> return address to user code. 


>>> %232f0 looks like a candidate. Let's unassemble the return address 
>>> to see if it makes sense. 

# u %178cd-10 


%000178bd 

03ca 

add 

ecx, edx 


%000178bf 

51 

push 

ecx 


%000178c0 

8b5d08 

mov 

ebx, dword 

ptr [ebp+08] 

%000178c3 

f f 7320 

push 

dword ptr 

[ebx+20] 

%000178c6 

b004 

mov 

al, 04 


%000178c8 

e83ba3f71b 

call 

%lbf 91c08 


%000178cd 

83c410 

add 

esp, +10 


%000178d0 

8bc8 

mov 

ecx, eax 


%000178d2 

ObcO 

or 

eax, eax 


%000178d4 

741b 

jz 

%000178f 1 


%000178d6 

824b0802 

or 

byte ptr 

[ebx+08] , 02 

%000178da 

c705e81302003c000000 mov 

dword ptr [ 0002 13e8 ], 0000003c 


# In %lbf 91c08 

%lbf 91c08 DOSCALL1 DOS 3 2 READ 


>>> So far so good. We need to see if this is consistent with the 
>>> Blockld, which is the most up-to-date status indicator for this 
>>> process. 


# .pb# 

Slot Sta BlockID Name Type Addr Symbol 

0049# blk 05100604 FROMAGE 



# .m 0510:0604 


*har par cpg va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 fec5 0000 ffec 0000 0000 00 01 00 00 vmkrhrw 

>>> This blockid points to data within the kernel resident read/write 
>>> heap. Heap blocks have headers that tell us more about the user of 
>>> the data. The data portion of a help block is usually mapped to a 
>>> GDT selector. In this example, selector 510. 510:0 should 

>>> be the address of the beginning of the data and therefore point 
>>> just after the end of the header. We look at the data before 
>>> 510:0 to see the heap block header. 


# dg 510 

0510 Data Bas=fe6f3000 Lim=00000b2a DPL=0 P RW A 

# dd % fe6f 3000-10 

%fe6f 2f f 0 f fa4000c feaeef28 0002036f 00000b39 

%fe6f 3000 05000000 0000c981 424b2d29 20202444 

%fe6f 3010 05182020 00000510 00020000 00000000 

%fe6f 3020 a8030ec8 424b0170 19002444 00000000 

%fe6f 3030 00000000 00000000 00000000 00000000 

%fe6f 3040 00000000 00061400 001b0014 0a000003 

%fe6f 3050 00028101 81010500 OaOOOOOl 0003c747 

%fe6f 30 60 00000000 00000000 00000000 00000000 


>>> For resident heaps the header is a double-word. This one begins 

>>> at %fe6f2ffc. The low 2 bits are flags, the remainder is the 

>>> length of the heap block in double-words. 

>>> If the flag bit 0 is 1 then this is an extended heap. Which it is. 

>>> We need to look at the header extension at the end of the block. 

>>> The length of the block in bytes is b38 (by mentaly AND-ing b39 
>>> and Oxffc) 


# dd % fe6f3000-4+b38-10 

%fe6f 3b24 ffffOOOO OOOOffff ff530510 ff77bd64 

%fe6f 3b34 ffc2001c 00000008 00000000 00000000 

%fe6f 3b44 ab240001 4d5000a6 00005854 ff9e0014 

%fe6f 3b54 001b0083 fe6f3b80 fe701da0 fe8777b0 

%fe6f 3b64 ffa4000c fe6f3b74 000102e9 ffa4000c 

%fe6f 3b74 fe7ea73c 0001071f ff9e0014 001b005d 

%fe6f 3b84 fe83baa8 fe876eac fe877654 ffc2001c 

%fe6f 3b94 00000008 00000000 00000000 da680001 

>>> The header extension is in the last 2 double-words of the heap 
>>> block. The owner Id and the selector are in the first of these (at 
>>> %fe6f 3b2c) . 


# .mo f f 5 3 
f f 53 dd4 

>>> This tells us selector 510 was allocated by, or is part of the 4th 
>>> device driver to initialise. Listing the physical device driver 
>>> MTEs will find this. They are listed last initialised first. 

>>> Note: frequently we find that ddl6 is the owner. This refers to 
>>> all device drivers from the 16th and subsequent. The first 15 
>>> device drivers to initialise are assigned unique owner ids from 
>>> ddl to ddl5, where the numbers are in decimal. 

# . Imp 

hmte=0249 pmte=%fe848df 4 mf lags=0008f lc9 h:\faxpro\fmd.sys 
hmte=0242 pmte=%fe856f 04 mf lags=0008f lc9 c:\os2tools\theseus2.sys 
hmte=0240 pmte=%fe848e7c mf lags=0008f lc9 c:\os2\vdisk.sys 
hmte=0235 pmte=%fe848f 58 mf lags=0008f lc9 h:\os2\apps\sysios2.sys 
hmte=0234 pmte=%fe848f 08 mf lags=0008f lc9 h:\tcpip\bin\ifndisnl.sys 
hmte=011e pmte=%fe83f f 84 mf lags=0008f lc9 h:\tcpip\bin\inet.sys 
hmte=012b pmte=%fe83996c mf lags=0008f lc9 h:\mmos2\r0stub.sys 
hmte=012a pmte=%fe839da0 mf lags=0000f lcl h:\mmos2\ssmdd.sys 



hmte=0123 

hmte=0121 

hmte=0120 

hmte=011d 

hmte=0111 

hmte=0087 

hmte=0089 

hmte=0103 

hmte=00e2 

hmte=00el 

hmte=00de 

hmte=00a9 

hmte=00a7 

hmte=00a5 

hmte=009c 

hmte=009b 

hmte=009a 

hmte=0099 

hmte=0098 

hmte=0096 


pmte=%fe83df 4c 
pmte=%fe839e64 
pmte=%fe839ef 4 
pmte=%fe83afdc 
pmte=%fe83af 88 
pmte=%fe839fdc 
pmte=%fe839f 80 
pmte=%fe71095c 
pmte=%fe6fef c4 
pmte=%fe6fdf 64 
pmte=%fe6f 6fb0 
pmte=%fe6f 5fb0 
pmte=%fe6f 4f 3c 
pmte=%fe6f 3db4 
pmte=%feaeeeaO 
pmte=%fe6f lfb8 
pmte=%feaeeed8 
pmte=%feaeef 34 
pmte=%feaeef cO 
pmte=%fe6f lfdc 


mf lags=8008f lc9 
mf lags=8008f lc9 
mf lags=8008f lc9 
mf lags=8008f lc9 
mf lags=8008f lea 
mf lags=0008f lc9 
mf lags=8008f lc9 
mf lags=0008f lc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=0008elc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=8008elc9 
mf lags=0008elc9 
mf lags=8008elc9 
mf lags=0008elc9 


c : \os2\com. sys 
h : \os2\boot\mouse . sys 
h : \os2\boot\pointdd. sys 
h: \os2\boot\os2cdrom.dmd 
h : \os2\boot\pmdd. sys 
h : \os2\boot\dos . sys 
h : \os2\boot\testcfg . sys 
i : \brew\os20memu . sys 
h:\os2scsi. dmd 
h: \os2dasd.dmd 
h : \xdf loppy . fit 
h:\fdl6-700. add 
h:\ibmls506. add 
h : \ibmlf lpy . add 
h : \print01 . sys 
h : \ibmkbd . sys 
h : \kbdbase . sys 
h : \screen01 . sys 
h : \clock01 . sys 
h : \resource . sys 


>>> Counting backwards, the 4th device driver is kbdbase.sys. 


»> We dump its object table. 


# . lmo 9a 

hmte=009a pmte=%feaeeed8 mf lags=8008elc9 h:\kbdbase.sys 
seg sect psiz vsiz hob sel flags 

0001 0001 158c 17 Oe 0000 0510 8c41 data prel 

0002 000c 3270 3270 0000 0518 8d60 code shr prel rel 

0003 0026 1987 1988 0000 0520 8d60 code shr prel rel 

0004 0033 0743 0744 0000 0528 8d60 code shr prel rel 

»> Selector 510 is indeed the first data selector of kbdbase.sys and 
>>> will contain the device driver header at offset +0 


# 


. d dev 510:0 

DevNext : 
DevAttr : 
DevStrat : 
Devlnt : 
DevName : 
DevProtCS : 
DevProtDS : 
DevRealCS : 
DevRealDS : 


0500:0000 

c981 

0000 

2d29 

KBD$ 

0518 

0510 

0000 

0000 


>>> We conclude that FROMAGE is waiting for the device driver to 
>>> respond to the DosRead - i.e. A keyboard interrupt 


Exploring Memory Management 

This section gives a basic overview of memory management, and shows how to answer the following questions 

1 . Who owns and who allocated virtual memory? 

2. How to correlate named memory with its address and vice versa 

3. How memory aliasing works. 

If the reader is unfamiliar with this subject then these sections should be read in order. 


Who Owns Virtual Memory and Who Allocated it? 


In this section we take a look at the primary system structures used in memory management and how they are located using the Dump 
Formatter and Kernel Debugger. These structures are: 

The memory arena record (VMAR) 

The memory arena header record (VMAFi) 

The memory object record (VMOB) 

The memory context record (VMCO) 

The examples worked in this section illustrate: 

how to find all memory allocations made by a given process and what executable made the allocation. 

how to determine ownership of non-system memory. 

the use of memory objects, pseudo-objects and system objects. 

Memory allocations have many attributes, included among which are: 
data or content 
location or address 
size 

ownership 

requestor 

The composite set of attributes associated with a memory allocation is refered to as a memory object. OS/2's virtal memory manager tracks 
memory objects using arena, object and context records. 

We start by looking at the arena record, which is used to record virtual address assignements to memory objects. 

The entire system address space of 4 gigabytes is partitioned into three types of memory arena: 

System Arena 

This is the range of virtual addresses where system information and ringO code executes. Typically device drivers, 
file system drivers and the OS2 Kernel executes and uses data assigned to the System Arena. There is just one 
instance of the System Arena, it is assigned the virtual address range from 512 Mb to 4 Gb. 

Shared Arena 

This is the range of virtual addresses assigned to shared objects. Shared data objects come in two varieties: 

Global data Such objects exist as unique entities. Their address range and data 

content are common to all accessing processes. This is achieved by 
using common page tables in all processes. 

Instance data Such objects share the same address range, but exist as distinct data 

instances in each acccessing process. Page table entries for instance 
data are specific to each process. 

Code objects from DLL modules are also consigned to the shared arena. 

In general processes are not given automatic access to instance or global data. Access is granted either implicitly by 
the system loader because of calls to other DLLs or explicitly by use of the DosGiveXxxx and DosGetXxxx set of 
APIs. 

There is just one shared arena, which reserves initially virtual memory addresses from 304Mb to 512Mb. This may be 
expanded by lowering the lower bondary. The current address range assigned to the shared arena is managed by a 
special arena record called the boundary sentinel arena record. 

Private Arena 

This is the range of virtual addesses used to map objects that are unique to each process. A private arena therefore 
exists for each process. In general the page tables of each private arena will map to unique real storage frames. An 
exception to this is with code objects. Since code segments are always read-only then if more than one process is 
running the same executable module their page tables will map to a common set of real storage frames for the code 
segments of the executable module. 


Private arenas are assigned an initial address range from 64k to 64M. This may be expanded upwards as more 
memory is allocated. The current size of a private arena is tracked by a special arena record called the sentinel arena 
record. 

The private arena upper boundary and shared arena lower boundary may grow towards each other but not overlap. 

These worked examples now follow: 

Exploring arena records 
Exploring object records 
Finding who owns memory 


Exploring Arena Records 


The following example illustrates the use of arena records: 


>>> We start by asking the question: what ranges of addresses are 
>>> currently allocated in the private arena of the process that's 
>>> running the IPFC compiler. 

>>> List all processes to find the one of interest 
# .p 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe3a000 

f fe3c7d4 

f fe3c61c 

le7c 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

7b7aa000 

f fe3c7d4 

7b9a8020 

If 3c 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

7b7ac000 

f fe3c7d4 

7b9a81d8 

If 50 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

081f 

7b7ae000 

f fe3c7d4 

7b9a8390 

If 48 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

7b7b0000 

f fe3c7d4 

7b9a8548 

lf20 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

7b7b2000 

f fe3c7d4 

7b9a8700 

If 3c 

00 

*asyncr 

0009 

0002 

0000 

0002 

0001 

blk 

021f 

7b7b8000 

7b9c4020 

7b9a8c28 


00 

LOGDAEM 

0008 

0003 

0001 

0003 

0001 

rdy 

061f 

7b7b6000 

7b9c484c 

7b9a8a7 0 

leb8 

01 

PMSHL32 

000b 

0003 

0001 

0003 

0002 

blk 

0800 

7b7bc000 

7b9c484c 

7b9a8f 98 


01 

PMSHL32 

000c 

0003 

0001 

0003 

0003 

blk 

0800 

7b7be000 

7b9c484c 

7b9a9150 


01 

PMSHL32 

OOOd 

0003 

0001 

0003 

0004 

blk 

0800 

7b7c0000 

7b9c484c 

7b9a9308 


01 

PMSHL32 

OOOe 

0003 

0001 

0003 

0005 

blk 

0800 

7b7c2000 

7b9c484c 

7b9a94c0 


01 

PMSHL32 

0007 

0003 

0001 

0003 

0006 

blk 

0200 

7b7b4000 

7b9c484c 

7b9a88b8 

lecc 

01 

PMSHL32 

0011 

0003 

0001 

0003 

0007 

blk 

0200 

7b7c8000 

7b9c484c 

7b9a99e8 

lecc 

01 

PMSHL32 

0012 

0003 

0001 

0003 

0008 

blk 

0200 

7b7ca000 

7b9c484c 

7b9a9ba0 


01 

PMSHL32 

0013 

0003 

0001 

0003 

0009 

blk 

0200 

7b7cc000 

7b9c484c 

7b9a9d58 


01 

PMSHL32 

0014 

0003 

0001 

0003 

000a 

blk 

0800 

7b7ce000 

7b9c484c 

7b9a9f 10 


01 

PMSHL32 

0015 

0003 

0001 

0003 

000b 

blk 

0800 

7b7d0000 

7b9c484c 

7b9aa0c8 


01 

PMSHL32 

0016 

0003 

0001 

0003 

000c 

blk 

0800 

7b7d2000 

7b9c484c 

7b9aa280 


01 

PMSHL32 

0017 

0003 

0001 

0003 

OOOd 

blk 

0804 

7b7d4000 

7b9c484c 

7b9aa438 

lea8 

01 

PMSHL32 

0018 

0003 

0001 

0003 

OOOe 

rdy 

0804 

7b7d6000 

7b9c484c 

7b9aa5f 0 


01 

PMSHL32 

0019 

0003 

0001 

0003 

OOOf 

blk 

0500 

7b7d8000 

7b9c484c 

7b9aa7a8 


01 

PMSHL32 

001a 

0003 

0001 

0003 

0010 

rdy 

0801 

7b7da000 

7b9c484c 

7b9aa960 

lbac 

01 

PMSHL32 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

001b 

0003 

0001 

0003 

0011 

blk 

0800 

7b7dc000 

7b9c484c 

7b9aabl8 


01 

PMSHL32 

*001c# 

0003 

0001 

0003 

0012 

run 

0800 

7b7de000 

7b9c484c 

7b9aacd0 

lb8c 

01 

PMSHL32 

OOld 

0003 

0001 

0003 

0013 

blk 

0200 

7b7e0000 

7b9c484c 

7b9aae88 


01 

PMSHL32 

0023 

0018 

0003 

0018 

0001 

rdy 

061f 

7b7ec000 

7b9c7128 

7b9ab8d8 

leb8 

13 

EPM 

0038 

0018 

0003 

0018 

0002 

blk 

0200 

7b816000 

7b9c7128 

7b9adcf 0 

lecc 

13 

EPM 

0037 

0013 

0003 

0013 

0001 

blk 

0200 

7b814000 

7b9c9a04 

7b9adb38 


19 

IBMAVSD 

0033 

0012 

0003 

0012 

0001 

blk 

0200 

7b80c000 

7b9c89ac 

7b9ad458 

leb8 

17 

PMDRAW 

0035 

0012 

0003 

0012 

0002 

blk 

0200 

7b810000 

7b9c89ac 

7b9ad7c8 

leb8 

17 

PMDRAW 

0036 

0012 

0003 

0012 

0003 

blk 

0200 

7b812000 

7b9c89ac 

7b9ad980 


17 

PMDRAW 

0034 

0010 

0003 

0010 

0001 

blk 

0400 

7b80e000 

7b9c91d8 

7b9ad610 

led4 

12 

CMD 

002e 

OOOd 

0003 

OOOd 

0001 

blk 

0200 

7b802000 

7b9c8180 

7b9acbc0 

leb8 

16 

PULSE 

0030 

OOOd 

0003 

OOOd 

0002 

rdy 

0100 

7b806000 

7b9c8180 

7b9acf 30 

lf28 

16 

PULSE 

002f 

OOOd 

0003 

OOOd 

0003 

rdy 

081f 

7b804000 

7b9c8180 

7b9acd7 8 

lfOO 

16 

PULSE 

002d 

000c 

0003 

000c 

0001 

blk 

0200 

7b800000 

7b9c7 954 

7b9aca08 

leb8 

15 

DINFO 

0032 

000c 

0003 

000c 

0002 

rdy 

061f 

7b80a000 

7b9c7 954 

7b9ad2a0 

lfOO 

15 

DINFO 

002c 

000b 

0003 

000b 

0001 

blk 

0200 

7b7fe000 

7b9c58a4 

7b9ac850 

leb8 

14 

MRFILE32 

0031 

000b 

0003 

000b 

0002 

blk 

0200 

7b808000 

7b9c58a4 

7b9ad0e8 

lecc 

14 

MRFILE32 

0029 

000a 

0003 

000a 

0001 

rdy 

061f 

7b7f 8000 

7b9c68f c 

7b9ac328 

leb8 

10 

PMDIARY 

OOlf 

0006 

0003 

0006 

0001 

rdy 

062f 

7b7e4000 

7b9c60d0 

7b9ablf 8 

leb8 

11 

PMSHL32 

0021 

0006 

0003 

0006 

0002 

blk 

0200 

7b7e8000 

7b9c60d0 

7b9ab568 


11 

PMSHL32 


0022 0006 0003 0006 0003 blk 0200 7b7ea000 7b9c60d0 7b9ab720 leb8 11 PMSHL32 

0020 0006 0003 0006 0004 blk 0200 7b7e6000 7b9c60d0 7b9ab3b0 11 PMSHL32 

OOle 0006 0003 0006 0005 blk 0200 7b7e2000 7b9c60d0 7b9ab040 lecc 11 PMSHL32 

0024 0006 0003 0006 0006 blk 0200 7b7ee000 7b9c60d0 7b9aba90 11 PMSHL32 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0025 0006 0003 0006 0007 blk 0200 7b7f0000 7b9c60d0 7b9abc48 11 PMSHL32 

0026 0006 0003 0006 0008 blk 0200 7b7f2000 7b9c60d0 7b9abe00 11 PMSHL32 

0027 0006 0003 0006 0009 blk 0200 7b7f4000 7b9c60d0 7b9abfb8 11 PMSHL32 

0028 0006 0003 0006 000a blk 0200 7b7f6000 7b9c60d0 7b9acl70 11 PMSHL32 

002a 0006 0003 0006 000c blk 021f 7b7fa000 7b9c60d0 7b9ac4e0 leac 11 PMSHL32 

002b 0006 0003 0006 OOOd blk 0200 7b7fc000 7b9c60d0 7b9ac698 leb8 11 PMSHL32 

000a 0004 0003 0004 0001 blk 0800 7b7ba000 7b9c5078 7b9a8de0 00 HARDERR 

OOOf 0004 0003 0004 0002 blk 0800 7b7c4000 7b9c5078 7b9a9678 00 HARDERR 

0010 0004 0003 0004 0003 blk 0800 7b7c6000 7b9c5078 7b9a9830 00 HARDERR 

0039 0019 0010 0019 0001 rdy 061f 7b818000 7b9ca230 7b9adea8 lfOc 12 IPFC 

>>> From the name printed in the right hand column we see that slot 39 
>>> is the one of interest. 


>>> Imbedded in each PTDA at offset +0x40 is the VMAH that heads the 
>>> private arena. From the VMAH we can obtain the pointer to the 
>>> sentinel area record. 

>>> Dump out the VMAH for slot 39 using the pPTDA address from the 
>>> .p command output... 

# dd %7b9ca230+40 L10 

%7b9ca270 7b9c7168 fffl3190 feb24cae feb261bc 

%7b9ca280 fe79ba54 fe87e9a0 fff03e30 00000002 

%7b9ca2 90 00010000 00370000 00000000 00000000 

%7b9ca2a0 00000003 00000000 00000041 000005db 

>>> The third double word (feb24cae) is the address of the sentinel 
>>> record. To format this using the .MA command we need to determin 
>>> the handle for this record. Arena records are organised in a 
>>> table of 0x16 byte length entries. Their handles are their 

>>> corresponding table entry number. The address of the first 

>>> arena record is located at symbol _parvmone . . . 

# dd _parvmone 11 

%fff 13304 feblf 020 

>>> Arena record 1 is located at %feblf020. We wish to determine the 
>>> handle for the sentinal, whose address is %feb24cae. We use the 

>>> hex calculator facility of the Dump Formatter/Kernel Debugger thus.. 

# ? (%feb24cae-%feblf 020) /16 +1 
%00000436 

>>> The handle we require is 436. We can now format the sentinel 
>>> for slot 39 .... 

# .ma 436 

har par cpg va fig next prev link hash hob hal 

0436 %feb24cae 00000000 %00010000 003 050a 0526 0005 0000 4000 0000 max=%04000000 

>>> Note the max=%04000000 to the right indicating the current private 
>>> arena maximum address is 64M - 1 and incidentally distinguishing 
>>> this as a sentinel or boundary sentinel arena record. 

>>> Note also that this is merely a boundary marker and not an indication 
>>> of which addresses within the private arena have been allocated. 

>>> Regular arena record are chained to the sentinel in a circular 
>>> double linked list using the 'next' and 'prev' pointers. 

>>> We can format the entire chain using .MAL (or .MAR) but we have to 
>>> break in using Ctrl-C to stop the chain endlessly traversing the 
>>> circular chain. 

# .ma 50a 

har par cpg va fig next prev link hash hob hal 

050a %feb25ee6 00000030 %00010000 ld9 0509 0436 0000 0000 05e2 0000 hptda=050c 

# .ma 509 

har par cpg va fig next prev link hash hob hal 

0509 %feb25ed0 00000010 %00040000 179 050b 050a 0000 0000 05dd 0000 hptda=050c 

# .ma 50b 

har par cpg va fig next prev link hash hob hal 

050b %feb25ef c 00000010 %00050000 169 0507 0509 0000 0000 05e9 0000 hptda=050c 

# .mal 507 



har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0507 

%feb25ea4 

00000010 

%00060000 

169 

0506 

050b 

0000 

0000 

05ea 

0000 

hptda=050c 

0506 

%feb25e8e 

00000010 

%00070000 

169 

050f 

0507 

0000 

0000 

05eb 

0000 

hptda=050c 

050f 

%feb25f 54 

00000010 

%00080000 

169 

050c 

0506 

0000 

0000 

05ec 

0000 

hptda=050c 

050c 

%feb25f 12 

00000010 

%00090000 

169 

0511 

050f 

0000 

0000 

05ed 

0000 

hptda=050c 

0511 

%feb25f 80 

00000010 

%000a0000 

169 

050e 

050c 

0000 

0000 

05f 0 

0000 

hptda=050c 

050e 

%feb25f 3e 

00000010 

%000b0000 

lc9 

050d 

0511 

01c7 

0000 

05ee 

0016 

hptda=050c 

050d 

%feb25f28 

00000010 

%000c0000 

169 

0512 

050e 

0000 

0000 

05f 1 

0000 

hptda=050c 

0512 

%feb25f 96 

00000010 

%000d0000 

169 

0513 

050d 

0000 

0000 

05f 2 

0000 

hptda=050c 

0513 

%feb25fac 

00000010 

%000e0000 

169 

0514 

0512 

0000 

0000 

05f 3 

0000 

hptda=050c 

0514 

%feb25f c2 

00000010 

%000f0000 

169 

0515 

0513 

0000 

0000 

05f 4 

0000 

hptda=050c 

0515 

%feb25fd8 

00000010 

%00100000 

169 

0516 

0514 

0000 

0000 

05f 5 

0000 

hptda=050c 

0516 

%feb25fee 

00000010 

%00110000 

169 

0517 

0515 

0000 

0000 

05f 6 

0000 

hptda=050c 

0517 

%feb26004 

00000010 

%00120000 

169 

0519 

0516 

0000 

0000 

05f 7 

0000 

hptda=050c 

0519 

%feb26030 

00000010 

%00130000 

169 

0518 

0517 

0000 

0000 

05f 9 

0000 

hptda=050c 

0518 

%feb2601a 

00000010 

%00140000 

169 

051a 

0519 

0000 

0000 

05f 8 

0000 

hptda=050c 

051a 

%feb26046 

00000010 

%00150000 

169 

051b 

0518 

0000 

0000 

05fa 

0000 

hptda=050c 

051b 

%feb2605c 

00000010 

%00160000 

169 

051c 

051a 

0000 

0000 

05 fb 

0000 

hptda=050c 

051c 

%feb26072 

00000010 

%00170000 

169 

051d 

051b 

0000 

0000 

05f c 

0000 

hptda=050c 

051d 

%feb26088 

00000010 

%00180000 

169 

051e 

051c 

0000 

0000 

05fd 

0000 

hptda=050c 

051e 

%feb2609e 

00000010 

%00190000 

169 

0521 

051d 

0000 

0000 

05fe 

0000 

hptda=050c 

0521 

%feb260e0 

00000010 

%001a0000 

169 

0520 

051e 

0000 

0000 

0601 

0000 

hptda=050c 

0520 

%feb260ca 

00000010 

%001b0000 

169 

051f 

0521 

0000 

0000 

0600 

0000 

hptda=050c 

051f 

%feb260b4 

OOOOOOfO 

%001c0000 

169 

0523 

0520 

0000 

0000 

05f f 

0000 

hptda=050c 

har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0523 

%feb2610c 

00000010 

%002b0000 

169 

0527 

051f 

0000 

0000 

0603 

0000 

hptda=050c 

0527 

%feb26164 

00000010 

%002c0000 

169 

0522 

0523 

0000 

0000 

0607 

0000 

hptda=050c 

0522 

%feb260f 6 

00000020 

%002d0000 

169 

0525 

0527 

0000 

0000 

0602 

0000 

hptda=050c 

0525 

%feb26138 

00000010 

%002f 0000 

169 

0524 

0522 

0000 

0000 

0605 

0000 

hptda=050c 

0524 

%feb26122 

00000010 

%00300000 

169 

052a 

0525 

0000 

0000 

0604 

0000 

hptda=050c 

052a 

%feb261a6 

00000010 

%00310000 

169 

052d 

0524 

0000 

0000 

060a 

0000 

hptda=050c 

052d 

%feb261e8 

00000010 

%00320000 

169 

0529 

052a 

0000 

0000 

060d 

0000 

hptda=050c 

0529 

%feb26190 

00000010 

%00330000 

169 

052b 

052d 

0000 

0000 

0609 

0000 

hptda=050c 

052b 

%feb261bc 

00000020 

%00340000 

169 

0526 

0529 

0000 

0000 

060b 

0000 

hptda=050c 

0526 

%feb2614e 

00000010 

%00360000 

169 

0436 

052b 

0000 

0000 

0606 

0000 

hptda=050c 

0436 

%feb24cae 

00000000 

%00010000 

003 

050a 

0526 

0005 

0000 

4000 

0000 

max=%04000000 

050a 

%feb25ee6 

00000030 

%00010000 

ld9 

0509 

0436 

0000 

0000 

05e2 

0000 

hptda=050c 

0509 

%feb25ed0 

00000010 

%00040000 

179 

050b 

050a 

0000 

0000 

05dd 

0000 

hptda=050c 


>>> Each regular private arena record is distinguished by the appearence 
>>> hptda=nnn to the right of each line. This is the handle of the PTDA 
>>> of the process to which the arena record belongs. Each of the hptda 
>>> values is 50c indicating each of regular arena records above belongs 
>>> to the same process. More on the hptda later. 


>>> Each regular arena represents the address range reserved for a 
>>> memory object, cpg is the size reservation in pages, but note 
>>> that this is only an address space reservation, not necessarily what 
>>> is currently committed. Most objects reserve 0x10 

>>> pages or 64K, which corresponds to the maximum 16-bit segment size. 


>>> va shows the start address of each memory object. 

>>> By examining va and cpg we can see that the minimum and maximum 
>>> addresses allocated in the private arena of slot 39 is %10000 and 
>>> %36ffff (=%360000 + 0x10 pages -1) . We can also see that this 
>>> allocation is contiguous and therefore the total allocated private 
>>> arena virtual address space is 0x360000 bytes or 3.375M 


>>> The VMAH records the minimum and maximum +1 allocated addresses 
>>> at +0x20 and +0x24, but the allocation might be sparse so the VMAH 
>>> does not indicate directly the total memory in use. 

>>> We now move onto the shared arena. 

>>> The link field of each sentinel points to the boundary sentinel 


# ,ma 436 

har par cpg 

0436 %feb24cae 00000000 

# . ma 5 

har par cpg 

0005 %feblf 078 00011a20 


va 

fig 

next 

prev 

link 

hash 

hob 

hal 


00010000 

003 

050a 

0526 

0005 

0000 

4000 

0000 

max=%04000000 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


04000000 

007 

0508 

0075 

0000 

0000 

fffO 

0000 

max=%lf f f 0000 


>>> Once again each regular arena record in the shared arena is linked 
>>> in a circular double linked list. This time we enter the chain from 
>>> the boundry sentinel next and prev fields. 



# .mal 508 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0508 

%feb25eba 

00000010 

%15a20000 

369 

0437 

0005 

0000 

0000 

05df 

0000 

hco=008a8 

0437 

%feb24cc4 

00000010 

%15a40000 

369 

0438 

0508 

0000 

0000 

050d 

0000 

hco=00248 

0438 

%feb24cda 

00000010 

%15a50000 

369 

0444 

0437 

0000 

0000 

050e 

0000 

hco=0076e 

0444 

%feb24de2 

00000020 

%15a60000 

3d9 

0441 

0438 

0000 

0000 

0518 

0000 

hco=007aa 

0441 

%feb24da0 

00000010 

%15a80000 

3d9 

043b 

0444 

0000 

0000 

051a 

0000 

hco=007a9 

043b 

%feb24dlc 

00000010 

%15a90000 

3d9 

043a 

0441 

0000 

0000 

0517 

0000 

hco=002b7 

043a 

%feb24d06 

00000010 

%15aa0000 

3d9 

0443 

043b 

0000 

0000 

0511 

0000 

hco=007a8 

0443 

%feb24dcc 

00000010 

%15ab0000 

179 

0439 

043a 

0000 

0000 

0519 

0000 

=0000 

0439 

%feb24cf 0 

00000010 

%15ac0000 

369 

0433 

0443 

0000 

0000 

050f 

0000 

hco=00763 

0433 

%feb24c6c 

00000010 

%15ad0000 

369 

0432 

0439 

0000 

0000 

0509 

0000 

hco=00777 

0432 

%feb24c56 

00000010 

%15ae0000 

369 

04 le 

0433 

0000 

0000 

0508 

0000 

hco=00776 

04 le 

%feb24a9e 

00000030 

%15af 0000 

369 

041c 

0432 

0000 

0000 

04 f 4 

0000 

hco=007d8 

041c 

%feb24a72 

00000010 

%15b20000 

369 

03ee 

04 le 

0000 

0000 

04dl 

0000 

hco=0075c 

03ee 

%feb2467e 

00000010 

%15b30000 

349 

03eb 

041c 

0000 

0000 

04cl 

0000 

hco=001f 6 


0169 

%feb20f 10 

00000010 

%lacb0000 

179 

0168 

016a 

0000 

0000 

05e6 

0000 

=0000 

0168 

%feb20efa 

00000020 

%lacc0000 

379 

0077 

0169 

0000 

0000 

Olaf 

0000 

hco=007c0 

0077 

%feblfa44 

00000010 

%lbfe0000 

349 

0075 

0168 

0000 

0000 

0077 

0000 

hco=007a7 

0075 

%feblfal8 

00000010 

%lbf f 0000 

349 

0005 

0077 

0000 

0000 

0075 

0000 

hco=007b8 

0005 

%feblf 078 

00011a20 

%04000000 

007 

0508 

0075 

0000 

0000 

fffO 

0000 

max=%lf f f 0000 

0508 

%feb25eba 

00000010 

%15a20000 

369 

0437 

0005 

0000 

0000 

05df 

0000 

hco=008a8 

0437 

%feb24cc4 

00000010 

%15a40000 

369 

0438 

0508 

0000 

0000 

050d 

0000 

hco=00248 


>>> There are two types of regular arena record that appear in the 
>>> Shared arena. These are distinguished by the right-hand column: 

>>> hco=nnnnn 
»> =0000 

>>> The first type is global shared data. The hco is the context record 
>>> handle, which will be discussed later. 

>>> The second type represents instance data. Both of these will be 
>>> looked at in more detail in the next section. 


>>> Finally we look at the system arena. The sentinel for the system 
>>> arena is har=4 . Once again each regular arena record is linked 
>>> in a circular double-linked list. 

# ,ma 4 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0004 
# .mal 

%feblf 062 
. 504 

00000000 

%60000000 

003 

0504 

0016 

0000 

0000 

ffcO 

0000 

max=%f f f cOOOO 

har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0504 

%feb25e62 

00000010 

%79eb7000 

121 

03d2 

0004 

0000 

0081 

05el 

0000 

=0000 

03d2 

%feb24416 

00000010 

%79ec7000 

121 

0363 

0504 

0000 

0080 

04 9e 

0000 

=0000 

0363 

%feb23a8c 

00000010 

%79ed7000 

121 

0374 

03d2 

0000 

007f 

0434 

0000 

=0000 

0374 

%feb23c02 

00000010 

%79ee7000 

121 

02e4 

0363 

0000 

0095 

0422 

0000 

=0000 

02e4 

%feb22fa2 

00000010 

%79ef7000 

121 

02db 

0374 

0000 

OOdf 

0382 

0000 

=0000 

02db 

%feb22edc 

00000010 

%79f 07000 

121 

02cc 

02e4 

0000 

007c 

036e 

0000 

=0000 

02cc 

%feb22d92 

00000010 

%79f 17000 

121 

0405 

02db 

0000 

007b 

0350 

0000 

=0000 


0012 

%feblf 196 

00000016 

%f fefeOOO 

001 

0013 

0011 

0000 

0000 

0013 

0000 

=0000 

0013 

%feblf lac 

00000010 

%fff 14000 

009 

0014 

0012 

0000 

0000 

0014 

0000 

sel=0150 

0014 

%feblf lc2 

0000000a 

%fff24000 

009 

0015 

0013 

0000 

0000 

0015 

0000 

sel=0158 

0015 

%feblf ld8 

00000010 

%f f f 2e000 

009 

0016 

0014 

0000 

0000 

0016 

0000 

sel=0160 

0016 

%feblf lee 

00000082 

%f f f 3e000 

001 

0004 

0015 

0000 

0000 

0017 

0000 

=0000 

0004 

%feblf 062 

00000000 

%60000000 

003 

0504 

0016 

0000 

0000 

ffcO 

0000 

max=%fff cOOOO 

0504 

%f eb25e62 

00000010 

%79eb7000 

121 

03d2 

0004 

0000 

0081 

05el 

0000 

=0000 

03d2 

%feb24416 

00000010 

%79ec7000 

121 

0363 

0504 

0000 

0080 

04 9e 

0000 

=0000 


>>> Two types of regular record appear, distinguished by the right-hand 
>>> column: 

»> =0000 
>>> sel=nnnn 

>>> The first of these indicates heap data. The second GDT selector 



>>> assigned data. Device driver and IFS code and data objects will 
»> appear among these. 


Exploring Object Records 


We now explore the memory object record (VMOB) and the .MO command. 


»> There are two types of object managed by object records: 

»> pseudo-objects 

»> non-pseudo-object 

»> Non-pseudo-objects have an associated arena record. These are by 
>>> far the most common type of memory object. They include code and 
>>> data segments of application and system code. However, there is 
>>> a draw-back in that arena records deal with page size quantities. 
>>> For certain system control blocks it is useful to have distinct 
»> objects associated with each instance of them. But these objects 
>>> are generally very much smaller than a page. To overcome these 
»> difficulties such objects are sub-allocated from the system 
»> heap and given an object type of pseudo-object. They have 
>>> no associated arena record. 

»> We list a few pseudo-objects. Note the 'p' parameter of .mo to 
>>> do this. 


# .mop 


hob 

va 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 




0004 

%fff 13238 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 



0005 

%fff 13190 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 



0006 

%fff0a891 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


doscalls . dll 

0072 

%ffe3c7d4 

8000 

ffcb 

0000 

0000 

00 

00 

00 

00 

ptda 

0001 

*sysinit 

007a 

%fff0b3fa 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


mvdm.dll 

007b 

%fff0b26b 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


f shelper . dll 

007d 

%fe720f 60 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


a :mini_f sd. f sd 

0086 

%fe861ee0 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : pmdd . sys 

0087 

%fe861f30 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : dos . sys 

0088 

%fe861f58 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : testcfg . sys 

008a 

%fe860f 9c 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : pmshapim . dll 

0091 

%7b9c484c 

8000 

ffcb 

f f 79 

0000 

00 

00 

00 

00 

ptda 

0003 

c : pmshell . exe 

0096 

%fe721fb8 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : clockOl . sys 

0097 

%fe721f lc 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : screenOl . sys 

0098 

%fe721eb0 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : kbdOl . sys 

0099 

%fe7246bc 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c :print01 . sys 

009f 

%fe724f 84 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : ibmlf lpy . add 

00a! 

%fe725f 88 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 


c : ibmls506 . add 


# 

»> Pseudo-objects apply to four types of control block but in general 
>>> we will only be concerned with the PTDA and the MTE . 

>>> The pseudo-object record is distinugished by the presence of the 
>>> 'va' field. The control block name is shown in column 11. 

»> I I 

»> I 

»> I I 

»> V V 

# .mo 91 

hob va figs own hmte sown, cnt It st xf 

0091 %7b9c484c 8000 ffcb ff79 0000 00 00 00 00 ptda 0003 c rpmshell . exe 

>>> The 'va' field gives the address of the object itself. In this 
>>> it's a PTDA address. We can find the thread slots which correspond 
>>> to this PTDA either by using .P and looking for a match in the 
>>> pPTDA field or directly: 

# dw %7b9c484c+pid-ptda_start 11 

%7b9c5042 0003 

>>> This is the pid. Note .mo 91 extracts this for us - the pid appears 


>>> after 'ptda' 


# dd %7b9c484c+ptda_pTCBHead-ptda_start 11 

%7b9c486c 7b9a8a70 

>>> This is the head of the TCB tree for pid 3. 

# dw 7b9a8a7 0 12 

%7b9a8a7 0 0001 0008 

>>> Words 0 and 1 of the TCB contain the thread ordinal and its slot 
>>> number. This is tid 1 in slot 8. 

# .p8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0008 0003 0001 0003 0001 rdy 061f 7b7b6000 7b9c484c 7b9a8a70 leb8 01 PMSHL32 

>>> The PTDA for slot 8 has pid 3, is at %7b9c484c which is hob 91. 

>>> The handle of the PTDA (hptda) is defined to be the hob of the 

>>> object it occupies. Thus this ptda is also identified by hptda=91 

>>> The other most frequently encountered pseudo-object is the mte . 

hob va figs own hmte sown,cnt It st xf 

0193 %fe722dec 8000 ffa6 0000 0000 00 00 00 00 mte c :pmshell . exe 

>>> The MTE represents a loaded module. In this case the MTE control 
>>> block is located at %fe722dec and is assigned the mte handle of its 
>>> hob. In this case the MTE at %fe722dec is also referred to as 
>>> hmte=193. The . LM command will respond to either hmte or MTE address 
>>> and format the MTE for us ... 

# .lm 193 

hmte=0193 pmte=%fe722dec mflags=84 903150 c:\os2\pmshell.exe 

>>> .MO extracts the module name from the MTE and displays this to the 
>>> right of 'mte* 

>>> In each object record is the 'own' and 'hmte' fields. These are used 
>>> to attribute ownership and associate a module or part of the system 
>>> that was involved with the allocation request. In many cases 
>>> these fields contain hobs of related objects. In some cases 
>>> attribution needs to be made to a system resource. For this a 
>>> number of generic system object Ids have been defined. They all 
>>> are greater then OxffOO. .MO will translate system object Ids into 
>>> a more meaningful text string. For example: in hob 193 the 
>>> owner id ffa6 

# .mo ffa6 
ffa6 ldrmte 

>>> Similarly in hob 91 the owner is ffcb 

# .mo ffcb 
ffcb ptda 

>>> Both of these give an indication of the type of system object. 

>>> In the first case a load MTE, in the second a PTDA. The 'own' and 
>>> 'hmte* interpretation is used to form the description that appears 
>>> to the right of each .MO line. 


>>> We now turn our attention to non-pseudo obects or normal 
>>> memory objects: 


mon 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. ent 

It 

St 

xf 


0001 

0001 

fec8 

0000 

fffl 

0000 

0000 

00 

00 

00 

00 

vmob 

0002 

0002 

fec8 

0000 

f fe3 

0000 

0000 

00 

00 

00 

00 

vmar 

0003 

0003 

fec8 

0000 

f fee 

0000 

0000 

00 

01 

00 

00 

vmkrhrw 

0007 

0006 

0000 

0000 

f f 6d 

0000 

0000 

00 

00 

00 

00 

doshlp 

0008 

0007 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0009 

0008 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000a 

0009 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000b 

000a 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

000c 

000b 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

OOOd 

000c 

0000 

0325 

f fba 

0000 

0000 

00 

00 

00 

00 

lock 

OOOe 

OOOd 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

OOOf 

OOOe 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0010 

0087 

0000 

402c 

0091 

019f 

0000 

00 

00 

00 

00 

priv 0003 c :pmshell . exe 

0011 

0010 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0012 

0011 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0013 

0012 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 



009d 

0096 

0000 

0225 

f f 8c 

0000 

0000 

00 

00 

00 

00 

per fview 


009e 

0097 

0000 

0524 

f f 88 

f f 54 

0000 

00 

00 

00 

00 

ptogdt 

dd5 

OOaO 

0098 

0000 

0524 

f f 88 

f f 56 

0000 

00 

00 

00 

00 

ptogdt 

dd7 

00a3 

0099 

0000 

0524 

f f 88 

f f 56 

0000 

00 

00 

00 

00 

ptogdt 

dd7 

00a4 

009a 

0000 

0524 

f f 88 

f f 56 

0000 

00 

00 

00 

00 

ptogdt 

dd7 

00a5 

009b 

0000 

0524 

f f 88 

f f 56 

0000 

00 

00 

00 

00 

ptogdt 

dd7 

00a6 

009c 

0000 

0524 

f f 88 

f f 56 

0000 

00 

00 

00 

00 

ptogdt 

dd7 


OOel 

00d5 

0000 

0324 

f f 93 

0000 

0000 

00 

00 

00 

00 

fsbuf 


00e2 

00d6 

0000 

482c 

f f f 7 

019f 

0000 

00 

00 

00 

04 

giveget 


00e3 

00d7 

0000 

0124 

f f 8f 

0000 

0000 

00 

00 

00 

00 

resource 


00e4 

01c8 

0000 

0824 

0131 

0131 

0000 

00 

00 

00 

00 

shared 

c : display . dll 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 



00e6 

00d9 

0000 

082c 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

00e7 

OOda 

0000 

0838 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

00e8 

OOdb 

0000 

0838 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

00e9 

OOdc 

0000 

0838 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

OOea 

OOdd 

0000 

0838 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

OOeb 

OOde 

0000 

0830 

00e5 

00e5 

0000 

00 

00 

00 

00 

shared 

c : doscalll . dll 

OOec 

OOfl 

0000 

422c 

0091 

OlbO 

0000 

00 

00 

00 

00 

priv 0003 

c : pmshell . exe 

OOed 

OlOd 

0000 

402c 

0091 

OlbO 

0000 

00 

00 

00 

00 

priv 0003 

c : pmshell . exe 

OOee 

OOel 

0000 

082c 

OOfl 

OOfl 

0000 

00 

00 

00 

00 

shared 

c : os2char . dll 

OOf 2 

01c9 

0000 

0824 

0131 

0131 

0000 

00 

00 

00 

00 

shared 

c : display . dll 

OOf 3 

00e3 

0000 

0838 

OOfl 

OOfl 

0000 

00 

00 

00 

00 

shared 

c : os2char . dll 

OOf 4 

00e4 

0000 

482c 

f f f 7 

OOfl 

0000 

00 

00 

00 

00 

giveget 


OOf 6 

00e5 

0000 

082c 

OOfb 

OOfb 

0000 

00 

00 

00 

00 

shared 

c : sesmgr . dll 

OOf c 

00e6 

0000 

082c 

OOfb 

OOfb 

0000 

00 

00 

00 

00 

shared 

c : sesmgr . dll 

OOfd 

00e7 

0000 

0838 

OOfb 

OOfb 

0000 

00 

00 

00 

00 

shared 

c : sesmgr . dll 

OOfe 

00e8 

0000 

0838 

OOfb 

OOfb 

0000 

00 

00 

00 

00 

shared 

c : sesmgr . dll 

OOff 

00e9 

0000 

082c 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0101 

OOea 

0000 

082c 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0102 

OOeb 

0000 

082c 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0103 

OOec 

0000 

0838 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0104 

OOed 

0000 

0838 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0105 

OOee 

0000 

0838 

0100 

0100 

0000 

00 

00 

00 

00 

shared 

c : quecalls . dll 

0106 

Olcd 

0000 

1024 

0091 

0131 

0000 

00 

00 

00 

00 

priv 0003 

c : pmshell . exe 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 



0107 

00f0 

0000 

0124 

ffc4 

0000 

0000 

00 

00 

00 

00 

smdf h 


0108 

OlOf 

0000 

4a2c 

f f f 5 

OlbO 

0000 

00 

00 

00 

00 

give 


0109 

0085 

0000 

0524 

f f 88 

f f 5b 

0000 

00 

00 

00 

00 

ptogdt 

ddl2 

010b 

0084 

0000 

0524 

f f 88 

f f 5b 

0000 

00 

00 

00 

00 

ptogdt 

ddl2 

010c 

0083 

0000 

0524 

f f 88 

f f 5b 

0000 

00 

00 

00 

00 

ptogdt 

ddl2 

OlOd 

OOf 2 

0000 

0524 

f f 88 

f f 5b 

0000 

00 

00 

00 

00 

ptogdt 

ddl2 


# 

>>> Many of these objects have a system ID owners but those of current 
>>> interest are objects allocated within the shared and private arenas 
>>> by application programs. 


>>> Private arena private data: 
>>> 


>>> We start by examining hob 10 in more detail. 

>>> We list the object and its associated arena record using the 'c' 

>>> parameter of .MO 
# .moc 10 

*har par cpg va fig next prev link hash hob hal 

0087 %feblfba4 00000010 %00070000 169 OlaO 019a 0000 0000 0010 0000 hptda=0091 
hob har hobnxt figs own hmte sown,cnt It st xf 

0010 0087 0000 402c 0091 019f 0000 00 00 00 00 priv 0003 c rpmshell . exe 

>>> We can tell from its location (%70000) that this is a private 
>>> arena address in process hptda=91. The 'own' field of the object 
>>> record is also hob 91 which again implies an object owned by the 
>>> process. That means the object is either a dynamic allocation or 



>>> a non-shared segment of the EXE load module, for example it's 
>>> stack segment . 


# . mo 9 1 

hob va figs own hmte sown,cnt It st xf 

0091 %7b9c4 84c 8000 ffcb ff79 0000 00 00 00 00 ptda 0003 c: pmshell.exe 

>>> This tells us the owner is a PTDA (that is, a process private arena) 

>>> and the PID is 3, which is executing PMSHELL.EXE 

>>> Note: the PID and executable have been extracted from hob 91 and 
>>> displayed in the description area of hob 10. 

>>> Now look at the hmte for hob 10. 

# .mo 1 9 f 

hob va figs own hmte sown,cnt It st xf 

019f %fe8629e0 8000 ffa6 0000 0000 00 00 00 00 mte c:pmwin.dll 

>>> This is the MTE for pmwin.dll. 

>>> The 'own' and 'hmte' of hob 10 tell us that hob 10 was allocated in 
>>> the private arena of process PID 3 by pmwin.dll as a result of a 
>>> direct or indirect call to pmwin from pmshell. 

>>> The flags in hob 10 can give us more information on the 
>>> characteristics of hob 10 
>>> 402c 

0100 0000 0010 1100 

' ' ' ' . writeable 

' ' ' . . .user storage 

' ' executable 

' API located 

>>> The combination writeable + executable should be interpreted as 
>>> R/W storage rather than executable storage. Looking at the page 
>>> table entry for %7000 in slot 8 (pid 3) will confirm this: 

# . s8 

Current slot number: 0008 

# .p8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0008 0003 0001 0003 0001 rdy 061f 7b7b6000 7b9c484c 7b9a8a70 leb8 01 PMSHL32 

# dp %70000 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00070000* 012f3 frame=0120d 0 0 D A U W P pageable 

%00070000 0120d frame=0120d 0 0 D A U W P pageable 

# 

>>> Private arena shared data: 

>>> 

# .moc 192 

*har par cpg va fig next prev link hash hob hal 

0249 %feb22250 00000010 %00010000 lc9 024a 0247 014e 0000 0192 0000 hptda=02a6 
014e %feb20cbe 00000010 %00010000 ld9 014f 008e 0000 0000 0192 0000 hptda=0091 
hob har hobnxt figs own hmte sown,cnt It st xf 

0192 0249 0000 0838 0193 0193 0000 00 00 00 00 shared c :pmshell . exe 

>>> Object 192 has two private arena records pointing to it. One 

>>> associated with hptda=2a6 and the other with hptda=91. We established 

>>> earlier that hptda=91 is pid 3 and was running pmshell.exe 

# . mo 2 a 6 

hob va figs own hmte sown,cnt It st xf 

02a6 %7b9c60d0 8000 ffcb 0000 0000 00 00 00 00 ptda 0006 c :pmshell . exe 

>>> So hptda=2a6 refers to pid 6, which is also running pmshell.exe 
>>> Note the use of the 'link' field in har=249 to point to har=14e. The two 
>>> arena records are chained in this way to link all arena records that 
>>> share a private data object. The object record points to the head of 
>>> the chain. 

>>> The 'own' and 'hmte' fields both point to object 193. This tells us 
>>> that object 193 is a shared segment of the load module whose 
>>> handle is 193. 

>>> This may be verified as follows... 

#.mo 193 

hob va figs own hmte sown,cnt It st xf 



0193 %fe722dec 8000 ffa6 0000 0000 00 00 00 00 mte 


c : pmshell . exe 


# . lmo 193 

hmte=0193 pmte=%fe722dec mflags=84903150 c:\os2\pmshell.exe 
obj vsize vbase flags ipagemap cpagemap hob sel 

0001 00000600 00010000 80002025 00000001 00000001 0192 OOOf r-x shr big 

0002 0000005c 00020000 80002003 00000002 00000001 0000 0017 rw- big 

0003 0000fa20 00030000 80002003 00000003 00000001 0000 OOlf rw- big 

>>> We actually discover this is object 1 of the pmshell.exe load 
>>> module. 


>>> Examining the flags from hob 192 we see: 
»> 0 8 3 8 

»> 0000 1000 0011 1000 

>>> ' ' ' ' 

>>> ' User storage 

>>> ' ' ' Readable 

>>> ' ' Execuable 

>>> ' Shared 

>>> 


>>> This is information summarised in the description field of hob 192. 

>>> Finally we take a look at the page table entries for %10000 in pid 3 
>>> and 6. We should see the same real storage frame being accessed by 
>>> both processes: 

# . s8 

Current slot number: 0008 

# . p8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0008 0003 0001 0003 0001 rdy 061f 7b7b6000 7b9c484c 7b9a8a70 leb8 01 PMSHL32 

# dp %10000 


linaddr 

frame 

pteframe state 

res 

Dc 

Au 

CD WT 

Us 

rW 

Pn 

state 


%00010000* 

012f3 

f rame=011cb 

0 

0 

c 

A 


U 

r 

P 

pageable 


%00010000 

Ollcb 

f rame=011cb 

0 

0 

c 

A 


U 

r 

P 

pageable 


# .s If 













Current slot number: OOlf 











# .p if 













Slot Pid 

Ppid 

Csid Ord Sta 

Pri 

pTSD 


pPTDA 


pTCB 

Disp SG 

Name 

OOlf# 0006 

0003 

0006 0001 rdy 

062f 

7b7e4000 

7b9c60d0 

7b9ablf 8 leb8 11 

PMSHL32 

# dp %10000 













linaddr 

frame 

pteframe state 

res 

Dc 

Au 

CD WT 

Us 

rW 

Pn 

state 


%00010000* 

0093d 

f rame=011cb 

0 

0 

c 

A 


U 

r 

P 

pageable 


%00010000 

Ollcb 

f rame=011cb 

0 

0 

c 

A 


U 

r 

P 

pageable 



# 

>>> In both processes %00010000 translates to %%011cb000 


>>> Shared Arena, Global Data: 
>>> 


# .moc e6 


*har par cpg va fig next prev 

00d9 %feb202b0 00000010 %la060000 379 00d8 OOda 


hob har hobnxt figs own hmte sown,cnt It st 

00e6 00d9 0000 082c 00e5 00e5 0000 00 00 00 


hco=075d 
hco=084c 
hco=06de 
hco=0660 
hco=04 97 
hco=036b 
hco=0327 
hco=01a0 
hco=02c6 
hco=014c 
hco=00a2 
hco=0033 
hco=002 9 


pco=fe6804ec 
pco=fe680997 
pco=fe680271 
pco=fe67f f fb 
pco=fe67f70e 
pco=fe67f 132 
pco=fe67efde 
pco=fe67e83b 
pco=fe67edf 9 
pco=fe67e697 
pco=fe67e345 
pco=fe67ella 
pco=fe67e0e8 


hconext=0084c 
hconext=006de 
hconext=00660 
hconext=004 97 
hconext=0036b 
hconext=00327 
hconext=001a0 
hconext=002c6 
hconext=0014c 
hconext=000a2 
hconext=00033 
hconext=0002 9 
hconext=00000 


hptda=050c 

hptda=04c6 

hptda=049c 

hptda=0410 

hptda=0420 

hptda=0380 

hptda=036c 

hptda=034e 

hptda=0317 

hptda=02a6 

hptda=0205 

hptda=0091 

hptda=0169 


link 

hash hob 

0000 

0000 00e6 

xf 

00 shared c 

f =1 6 

pid=0019 

f =1 6 

pid=0018 

f =1 6 

pid=0013 

f =1 6 

pid=0012 

f =1 6 

pid=0010 

f =1 6 

pid=000d 

f =1 6 

pid=000c 

f =1 6 

pid=000b 

f =1 6 

pid=000a 

f =1 6 

pid=0006 

f =1 6 

pid=0004 

f =1 6 

pid=0003 

f =1 6 

pid=0002 


hal 

0000 hco=0075d 

doscalll . dll 
e : ipf c . exe 
c : epm . exe 
d : ibmavsd . exe 
c : pmdraw . exe 
c : cmd . exe 
c :pulse . exe 
c : dinf o . exe 
c : mr f ile32 . exe 
c : pmdiary . exe 
c : pmshell . exe 
c : harder r . exe 
c : pmshell . exe 
c : logdaem.exe 


>>> We can tell immediately that this is shared arena global data from the 
>>> presence of hco= in the arena record. The hco is the handle to the 
>>> context record. These record the hptda of the process that is accessing 
>>> shared global data. Each of the VMCOs, that's sharing the same object 
>>> is chained in a single linked list from the arena record. 



>>> The description to the right of each VMCO is derived from the hptda object. 


>>> Note: the ,MC command formats a VMCO. Under the Dump Formatter the VMCO 

>>> chain is not run to completion so we must run the chain 

>>> manually by using the hconext= field as the VMCO chain pointer. 

>>> The 'own' and 'hmte' fields being equal indicate that the object is 
>>> part of D0SCALL1.DLL. We can check out which object in D0SCALL1 using 
>>> . lmo 

# . lmo e5 

hmte=00e5 pmte=%fe72df ac mf lags=84 98b594 c:\os2\dll\doscalll.dll 
obj vsize vbase flags ipagemap cpagemap hob sel 

0001 00001354 laOlOOOO 80009025 00000001 00000002 OOeb dOOe r-x shr alias iopl 

0002 OOOOcedO la020000 80002025 00000003 OOOOOOOd OOea d017 r-x shr big 

0003 00001928 la030000 80001025 00000010 00000002 00e9 dOlf r-x shr alias 

0004 000002ce la040000 80001025 00000012 00000001 00e8 d027 r-x shr alias 

0005 000054f 8 la050000 8000d025 00000013 00000006 00e7 d02e r-x shr alias conf iopl 

0006 00000280 la060000 80001023 00000019 00000001 00e6 d037 rw- shr alias 

0007 00001b40 la070000 80001003 0000001a 00000002 0000 d03f rw- alias 

>>> hob e6 is load module object 6 of doscalll.dll. Furthermore it is a 
>>> read/write object. We can illustrate this by looking at the page table 
>>> entries for two of the processes that are accessing hob e6. 

# . s8 

Current slot number: 0008 

# .p8 Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0008# 0003 0001 0003 0001 rdy 061f 7b7b6000 7b9c484c 7b9a8a70 leb8 01 PMSHL32 

# dp %la0 60000 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%la060000* 012fe frame=00ele 0 0 D u U W P pageable 

%la060000 OOele frame=00ele 0 0 D u U W P pageable 

# . slf 

Current slot number: OOlf 

# .plf 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

OOlf# 0006 0003 0006 0001 rdy 062f 7b7e4000 7b9c60d0 7b9ablf8 leb8 11 PMSHL32 

# dp %la0 60000 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%la060000* 0093e frame=00ele 0 0 c A U W P pageable 

%la060000 OOele frame=00ele 0 0 c A U W P pageable 

# 

>>> As expected the same page frame (OOele) is being referenced. 

>>> Note also: frame ele of slot 8 is dirty (Dc=D) and unaccessed (Au=u) 

>>> while in slot If it is clean and accessed. This tends to suggest 
>>> that frame ele and therefore page %la060000 was most recently 
>>> updated by slot 8 and read by slot If before the update took place. 

>>> Shared Arena, Instance Data: 

>>> 

#.moc 5ef 

*har par cpg va fig next prev link hash hob hal 

01c6 %feb2170e 00000010 %la890000 139 01c5 01c7 0000 0000 05ef 0000 =0000 


hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 




05ef 

01c6 

04e8 

0024 

050c 

0131 

0000 

00 

00 

00 

00 

priv 

0019 

e : ipf c . exe 

04e8 

01c6 

02ec 

0024 

04c6 

0131 

0000 

00 

00 

00 

00 

priv 

0018 

c : epm . exe 

02ec 

01c6 

0457 

0024 

049c 

0131 

0000 

00 

00 

00 

00 

priv 

0013 

d : ibmavsd . exe 

0457 

01c6 

0432 

0024 

0410 

0131 

0000 

00 

00 

00 

00 

priv 

0012 

c : pmdraw . exe 

0432 

01c6 

03d6 

0024 

0420 

0131 

0000 

00 

00 

00 

00 

priv 

0010 

c : cmd . exe 

03d6 

01c6 

0390 

0024 

0380 

0131 

0000 

00 

00 

00 

00 

priv 

OOOd 

c :pulse .exe 

0390 

01c6 

03c8 

0024 

036c 

0131 

0000 

00 

00 

00 

00 

priv 

000c 

c : dinf o . exe 

03c8 

01c6 

03a7 

0024 

034e 

0131 

0000 

00 

00 

00 

00 

priv 

000b 

c : mrf ile32 . exe 

03a7 

01c6 

02c7 

0024 

0317 

0131 

0000 

00 

00 

00 

00 

priv 

000a 

c : pmdiary . exe 

02c7 

01c6 

0112 

0024 

02a6 

0131 

0000 

00 

00 

00 

00 

priv 

0006 

c :pmshell . exe 

0112 

01c6 

0000 

0024 

0091 

0131 

0000 

00 

00 

00 

00 

priv 

0003 

c :pmshell . exe 


>>> Object 5ef is an example of shared arena instance data. Each instance 
>>> of the object has its own object record (VMOB) , but they all share the 
>>> same arena record. Each of these VMOBs is chained from the 'hob' 

>>> field of the arena record via their ' hobnxt ' field. 

>>> The VMOBs appear as private arena objects, but the arena record 
>>> does not point to a specific hptda, which distinguishes this case as 
>>> shared instance data. 

>>> As would be expected with shared instance data the owners would differ 
>>> for each instance object. They are infact the hptda 's for each owner. 



>>> The hmte's we would expect to be common to all the VMOBs. 


# . mo 131 

hob va figs own hmte sown,cnt It st xf 

0131 %fe860978 8000 ffa6 0127 0000 00 00 00 00 mte c : display . dll 

>>> So, %la890000 has been allocated by display.dll 

>>> Again we can illustrate that we are really looking at instance data by 
>>> examining the page tables of two examples: 


. s8 

Current slot number: 0008 


# . p8 


Slot Pid Ppid Csid Ord Sta Pri pTSD 

0008# 0003 0001 0003 0001 rdy 061f 7b7b6000 

# dp %la890000 

linaddr frame pteframe state res Dc Au 

%la890000* 01291 frame=01066 0 0 D u 

%la890000 01066 frame=01066 0 0 D u 

# . slf 

Current slot number: OOlf 

# .plf 

Slot Pid Ppid Csid Ord Sta Pri pTSD 

OOlf# 0006 0003 0006 0001 rdy 062f 7b7e4000 

# dp %la890000 

linaddr frame pteframe state res Dc Au 

%la890000* 0093c frame=008e4 0 0 D u 

%la890000 008e4 frame=008e4 0 0 D u 

# 


pPTDA 

7b9c484c 

CD WT Us 
s 
s 


pPTDA 

7b9c60d0 

CD WT Us 
s 
s 


pTCB Disp SG Name 

7b9a8a7 0 leb8 01 PMSHL32 

rW Pn state 
W P pageable 
W P pageable 


pTCB Disp SG Name 

7b9ablf 8 leb8 11 PMSHL32 

rW Pn state 
W P pageable 
W P pageable 


>>> In PID 3, 
>>> in PID 6, 


%la890000 translates to physical address %01066000, but 
%la890000 translates to physical address %008e4000. 


Finding Who Owns Memory 


Having examined various types of arena, object and context record we now turn our attention to a more commonly asked question: "Who 
owns a particular location of memory?" To answer this we need to explore the match parameter of the .MA command. 

.MAM seach for arena records that encompass a given address: 


# . mam % 12 34 5 6 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


008c 

%feblf cl2 

00000080 

%00110000 

169 

OOfl 

0073 

0000 

0000 

008f 

0000 

hptda=0091 

023b 

%feb2211c 

00001000 

%000c0000 

le9 

0238 

0266 

0000 

0000 

02 9f 

0000 

hptda=02a6 

02 fc 

%feb231b2 

00000010 

%00120000 

169 

02 fd 

02a2 

0000 

0000 

0318 

0000 

hptda=036c 

0306 

%feb2328e 

00000010 

%00120000 

169 

0309 

0321 

0000 

0000 

03ba 

0000 

hptda=0380 

0312 

%feb23396 

00000010 

%00120000 

169 

0313 

0311 

0000 

0000 

03cd 

0000 

hptda=034e 

032 f 

%feb23614 

00000080 

%00110000 

169 

034b 

02 fa 

0000 

0000 

03e4 

0000 

hptda=0317 

0393 

%feb23eac 

00000010 

%00120000 

169 

0394 

038d 

0000 

0000 

0452 

0000 

hptda=0410 

0412 

%feb24 996 

00000010 

%00120000 

169 

0414 

0411 

0000 

0000 

04ef 

0000 

hptda=04c6 

0517 

%feb26004 

00000010 

%00120000 

169 

0519 

0516 

0000 

0000 

05f 7 

0000 

hptda=050c 

>>> Dump Formatter "hard- 

-wires" the 

: 'A' 

1 parameter 

■ so , 

. mam= , 

.mama 

(or 

. maam) 


>>> Kernel Debugger needs 'A' explicitly if all contexts are to be searched. 
>>> This only affects results from searching private arena addresses. 

>>> Note: after fix pack 29 for Warp 3.0 and GA 4.0, .mam under the 

>>> Dump Formatter behaves correctly. That is, the 'A' parameter is no longer 

>>> "hard-wired" . 


>>> We can also add the ' C' parameter to chain through the related VMOBs 
>>> and VMCOs at the same time. 

# .mamc %123456 

*har par cpg va fig next prev link hash hob hal 



008c %feblfcl2 00000080 %00110000 169 OOfl 0073 0000 0000 008f 0000 hptda=0091 
hob har hobnxt figs own hmte sown,cnt It st xf 

008f 008c 0000 422c 0091 OlcO 0000 00 00 00 00 priv 0003 c: pmshell.exe 

*har par cpg va fig next prev link hash hob hal 

023b %feb2211c 00001000 %000c0000 le9 0238 0266 0000 0000 029f 0000 hptda=02a6 

hob har hobnxt figs own hmte sown,cnt It st xf 

02 9f 023b 0000 423c 02a6 01d7 0000 00 00 00 00 priv 0006 c :pmshell . exe 

*har par cpg va fig next prev link hash hob hal 

02f c %feb231b2 00000010 %00120000 169 02fd 02a2 0000 0000 0318 0000 hptda=036c 

hob har hobnxt figs own hmte sown,cnt It st xf 

0318 02f c 0000 422c 036c 0371 0000 00 00 00 00 priv 000c cidinfo.exe 

*har par cpg va fig next prev link hash hob hal 

0306 %feb2328e 00000010 %00120000 169 0309 0321 0000 0000 03ba 0000 hptda=0380 

hob har hobnxt figs own hmte sown,cnt It st xf 

03ba 0306 0000 422c 0380 035c 0000 00 00 00 00 priv OOOd cipulse.exe 

*har par cpg va fig next prev link hash hob hal 

0312 %feb23396 00000010 %00120000 169 0313 0311 0000 0000 03cd 0000 hptda=034e 

hob har hobnxt figs own hmte sown,cnt It st xf 

03cd 0312 0000 422c 034e 0354 0000 00 00 00 00 priv 000b c: mrfile32.exe 

*har par cpg va fig next prev link hash hob hal 

032f %feb23614 00000080 %00110000 169 034b 02fa 0000 0000 03e4 0000 hptda=0317 

hob har hobnxt figs own hmte sown,cnt It st xf 

03e4 032f 0000 422c 0317 OlcO 0000 00 00 00 00 priv 000a c: pmdiary.exe 

*har par cpg va fig next prev link hash hob hal 

0393 %feb23eac 00000010 %00120000 169 0394 038d 0000 0000 0452 0000 hptda=0410 

hob har hobnxt figs own hmte sown,cnt It st xf 

0452 0393 0000 402c 0410 ff3e 0000 00 00 00 00 priv 0012 cipmdraw.exe 

*har par cpg va fig next prev link hash hob hal 

0412 %feb24 996 00000010 %00120000 169 0414 0411 0000 0000 04ef 0000 hptda=04c6 

hob har hobnxt figs own hmte sown,cnt It st xf 

04ef 0412 0000 422c 04c6 04f3 0000 00 00 00 00 priv 0018 ciepm.exe 

*har par cpg va fig next prev link hash hob hal 

0517 %feb2 6004 00000010 %00120000 169 0519 0516 0000 0000 05f7 0000 hptda=050c 

hob har hobnxt figs own hmte sown,cnt It st xf 

05f 7 0517 0000 422c 050c 05de 0000 00 00 00 00 priv 0019 eiipfc.exe 

>>> .MAMC is such a frequently used command that it is made the default 
>>> specification for .M 

>>> Further more, .M will take the default CS:EIP as the match 
>>> address if no address is given. 

>>> Suppose we wish to find out what code is being currently executed in 
>>> in slot 39 . . . 

# .s 39 

Current slot number: 0039 

# .p # 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0039 0019 0010 0019 0001 rdy 061f 7b818000 7b9ca230 7b9adea8 lfOc 12 IPFC 

# . r 

eax=00000000 ebx=00307d90 ecx=00320000 edx=00000000 esi=00001000 edi=00001000 
eip=la022240 esp=0004d098 ebp=0004d0b4 iopl=2 — — — nv up ei pi nz na pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001d6000 

005b : la022240 83c418 add esp,+18 

# In 

No Symbols Found 

# .m 

*har par cpg va fig next prev link hash hob hal 

OOdd %feb20308 00000010 %la020000 3d9 OOdc OOde 0000 0000 OOea 0000 hco=007ba 
hob har hobnxt figs own hmte sown,cnt It st xf 

OOea OOdd 0000 0838 00e5 00e5 0000 00 00 00 00 shared c : doscalll . dll 

hco=07ba pco=fe6806bd hconext=00822 hptda=050c f=lc pid=0019 e:ipfc.exe 

>>> The current cs:eip for slot 39 is executing in doscalll.dll and 
>>> has been called either directly or indirectly by ipfc.exe 



Finally in this section we answer, "What is the hptda given the PTDA address?" 

This required the use of the match parameter with .MO. 

.MOM is more restrictive and .MAM. It will only return a result if the supplied address is a precise match for the beginning of a 
pseudo-object. Since the PTDA is a pseudo-object we can use its address with .MOM: 


# .p 2a 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

002a 0006 0003 0006 000c blk 021f 7b7fa000 7b9c60d0 7b9ac4e0 leac 11 PMSHL32 

# .mom %7b9c60d0 

hob va figs own hmte sown,cnt It st xf 

02a6 %7b9c60d0 8000 ffcb 0000 0000 00 00 00 00 ptda 0006 c : pmshell . exe 
>>> The hptda for Pid 6 is therefore 2a6. 


How to Correlate Named Memory With its Address 


Plere's how to locate named shared memory, answer who's sharing it and whether a particular address in the shared arena is named. 

Named memory is managed using a RMP (Record Management Package). This is a generalised kernel facility for managing global data of 
variable length. The RMP facility provides allocation, deletion, add and find services. Each RMP user references his RMP structure using a 
handle. The RMP itself is limited to a maximum of 64K. 


>>> First locate the handle of named shared memory's RMP: 


##dw sharermpstruc 12 
0400:00004506 0004 0178 


Selector for RMP 
Flags xxxxxxxx 

1 = 

1 . = 


segment 

Segment busy 
Somebody's waiting 
Segment allocated 


>>> The RMP handle is used as the blockid (by ProcBlock) for serialising 
>>> RMP manipulations. 

>>> 


>>> Now display the 
##db 178:0 
0178:00000000 00 06 

named 
a2 03 

memory RMP segment : 
5e 02 5e 02-03 00 00 

00 

00 

00 

00 

00 

)( A A 

0178:00000010 

83 

ff 

00 

00 

11 

00 

00 

00-9b 

06 

01 

00 

44 

4f 

53 

5c 

DOS\ 

0178:00000020 

43 

44 

49 

42 

00 

13 

00 

88-01 

47 

bd 

04 

00 

50 

4d 

44 

CDIB G= . . PMD 

0178:00000030 

52 

41 

47 

2e 

4d 

45 

4d 

00-08 

00 

9f 

00 

88 

01 

01 

00 

RAG . MEM 

0178 : 00000040 

14 

00 

91 

01 

d7 

be 

02 

00-53 

4d 

47 

5c 

53 

47 

54 

49 

. . . .W<. ,SMG\SGTI 

0178:00000050 

54 

4c 

45 

00 

08 

00 

9f 

00-91 

01 

01 

00 

12 

00 

93 

01 

TLE 

0178:00000060 

b7 

be 

02 

00 

42 

56 

53 

5c-42 

56 

53 

30 

30 

00 

08 

00 

7< . . BVS\BVS00 . . . 

0178 : 00000070 

9f 

00 

93 

01 

01 

00 

12 

00-a8 

01 

8f 

be 

01 

00 

42 

56 

BV 

##d 

0178:00000080 

53 

5c 

42 

56 

53 

30 

31 

00-08 

00 

9f 

00 

a8 

01 

01 

00 

S\BVS01 ( . . . 

0178:00000090 

12 

00 

ab 

01 

67 

be 

01 

00-42 

56 

53 

5c 

42 

56 

53 

30 

. . + . g< . .BVS\BVS0 

0178 : OOOOOOaO 

33 

00 

08 

00 

9f 

00 

ab 

01-01 

00 

18 

00 

c4 

01 

3f 

be 

3 + D.?< 

0178 : OOOOOObO 

02 

00 

53 

4d 

47 

5c 

50 

4d-48 

44 

45 

52 

52 

2e 

44 

41 

. . SMG\PMHDERR . DA 

0178 : OOOOOOcO 

54 

00 

08 

00 

af 

01 

c4 

01-01 

00 

08 

00 

af 

01 

91 

01 

T. . ./.D /. . . 

0178 : OOOOOOdO 

01 

00 

08 

00 

af 

01 

93 

01-01 

00 

08 

00 

9f 

00 

c4 

01 

/ D. 

0178 : OOOOOOeO 

01 

00 

12 

00 

43 

02 

2 f 

a0-02 

00 

42 

56 

53 

5c 

42 

56 

. . . .C ./ . . BVS \BV 

0178 : OOOOOOfO 

53 

31 

30 

00 

08 

00 

9f 

00-43 

02 

01 

00 

08 

00 

4c 

02 

S10 C L. 

##d 

0178:00000100 

43 

02 

01 

00 

08 

00 

58 

02-88 

01 

01 

00 

17 

00 

9c 

02 

C X 

0178 : 00000110 

cf 

9f 

01 

00 

50 

4d 

57 

50-5c 

43 

4c 

41 

53 

53 

2e 

54 

O. . . PMWP\ CLASS . T 

0178:00000120 

42 

4c 

00 

08 

00 

58 

02 

9c-02 

01 

00 

08 

00 

fa 

02 

88 

BL. . .X z . . 

0178:00000130 

01 

01 

00 

18 

00 

13 

04 

e7-9e 

01 

00 

45 

50 

4d 

5c 

45 

g. . . EPM\E 

0178 : 00000140 

54 

4b 

45 

36 

30 

30 

2e 

45-50 

4d 

00 

08 

00 

fa 

02 

13 

TKE600 . EPM . . . z . . 

0178 : 00000150 

04 

01 

00 

10 

00 

15 

04 

f f-9d 

01 

00 

45 

50 

4d 

47 

4e 

EPMGN 

0178:00000160 

4c 

53 

00 

08 

00 

fa 

02 

15-04 

01 

00 

18 

00 

03 

04 

e7 

LS . . . z g 

0178 : 00000170 

9d 

01 

00 

31 

35 

35 

30 

32-33 

33 

33 

5c 

45 

50 

4d 

2e 

. . . 15502333XEPM. 


##d 


0178:00000180 

45 

58 

00 

08 

00 

fa 

02 

03-04 

01 

00 

08 

00 

56 

03 

88 

EX. . . z V. . 

0178:00000190 

01 

01 

00 

lb 

00 

f 6 

02 

bf-9d 

01 

00 

31 

35 

33 

39 

34 

v. ? . . . 15394 

0178 : OOOOOlaO 

39 

31 

34 

5c 

45 

33 

45 

4d-55 

4c 

2e 

45 

58 

00 

08 

00 

914 \E3EMUL . EX 


0178 : OOOOOlbO 

fa 

02 

f 6 

02 

01 

00 

12 

00-90 

03 

8f 

9d 

03 

00 

42 

56 

Z . V 

BV 

0178 : 000001C0 

53 

5c 

42 

56 

53 

31 

34 

00-08 

00 

9f 

00 

90 

03 

01 

00 

S\BVS14 


0178 : OOOOOldO 

08 

00 

32 

04 

90 

03 

01 

00-12 

00 

43 

04 

6f 

9d 

03 

00 

..2 C.o 


0178 : OOOOOleO 

42 

56 

53 

5c 

42 

56 

53 

31-35 

00 

08 

00 

9f 

00 

43 

04 

BVS\BVS15 .... 

C. 

0178 : OOOOOlfO 
##d 

01 

00 

08 

00 

48 

04 

43 

04-01 

00 

08 

00 

57 

04 

90 

03 

. . . .H.C W 


0178:00000200 

01 

00 

08 

00 

62 

04 

43 

04-01 

00 

12 

00 

87 

04 

4 f 

9d 

. . . .b.C 

0. 

0178:00000210 

03 

00 

42 

56 

53 

5c 

42 

5 6-53 

31 

36 

00 

08 

00 

9f 

00 

. . BVS\BVS1 6 . . 


0178 : 00000220 

87 

04 

01 

00 

08 

00 

8b 

04-87 

04 

01 

00 

08 

00 

99 

04 



0178:00000230 

87 

04 

01 

00 

12 

00 

0a 

03-ef 

9c 

03 

00 

42 

56 

53 

5c 

o. . . BVS \ 

0178:00000240 

42 

56 

53 

31 

38 

00 

08 

00-9 f 

00 

0a 

03 

01 

00 

08 

00 

BVS 18 


0178:00000250 

d6 

04 

0a 

03 

01 

00 

08 

00 -bb 

04 

0a 

03 

01 

00 

a2 

83 

V ; . . . . 

. " . 

0178:00000260 

00 

00 

5e 

02 

00 

00 

9a 

83-00 

00 

66 

02 

00 

00 

00 

00 

. . A f . . 


0178 : 00000270 

00 

00 

00 

00 

00 

00 

00 

00-00 

00 

00 

00 

00 

00 

00 

00 




>>> The first 20 bytes form the RMP header, the remainder is a series of 
>>> variable length records. 

>>> Examining the header first we have: 

>>> +00 00 06 = total size of segment (0600) 

>>> +02 a2 03 = amount of free space (03a2) 

>>> +04 5e 02 = link to first free block (025e) 

>>> +06 5e 02 = start of last free block (025e) 

>>> +08 03 00 00 00 = heap handle (0003 is kernel heap handle from which 
>>> RMP is alloc' d) 

>>> +0c 00 00 00 00 = PG alloc/realloc flags 

>>> +10 83 ff = hobowner (handle of user of this RMP is ff83) 

>>> +12 00 00 = hobmte (hmte of user of this RMP. It's the kernel so 0000) 

>>> Check out the owner of this RMP 

# # . mo f f 8 3 
ff83 mshrmp 

>>> 'mshrmp' is named shared memory management 

>>> Records follow the header. They are prefixed by a word length that includes 
>>> 2 bytes for the length field itself. If the record is free then the high 
>>> order bit of the length is set. The data within the record is private to 
>>> the owner. 

>>> The first record in this RMP is: 

length 0011 

I I I I 

»> 0178:00000010 11 00 00 00-9b 06 01 00 44 4f 53 5c 

»> 0178:00000020 43 44 49 42 00 

>>> The second record in this RMP is: 

»> 0178:00000020 13 00 88-01 47 bd 04 00 50 4d 44 

»> 0178:00000030 52 41 47 2e 4d 45 4d 00- 

>>> Named shared memory management uses two forms of RMP record: 

>>> Global - to keep the name, handle, selector and total reference count 

>>> Local - One for each process sharing the named memory. Contains 

>>> hptda, hob and ref count for within the given process. 

>>> 

>>> Breaking down record 2 we have: 

>>> +00 0013 length of record 

>>> +02 0188 hob of shared object 

>>> +04 bd47 selector of shared object 

>>> +06 0004 reference count 

>>> +08 PMDRAG.MEM name (with \SHAREMEM\ prefix omitted) and terminated with 
>>> a null byte (that is, it's an ASCIIZ string) 

>>> Check out hob 188 
##.moc 188 

*har par cpg va fig next prev link hash hob hal 

0140 %fecf fb8a 00000010 %17a80000 369 OOOf 0141 0000 0000 0188 0000 hco=00291 

hob har hobnxt figs own hmte sown,cnt It st xf 

0188 0140 0000 482c ff82 017d 0000 00 00 00 00 mshare 

hco=00291 pco=fe85dcf0 hconext=003c8 hptda=02fa f=16 pid=0013 c:epm.exe 
hco=003c8 pco=fe85e303 hconext=0024 6 hptda=0356 f=16 pid=0009 c :mrf ile32 . exe 



hco=00246 pco=fe85db79 hconext=00070 hptda=0258 f=16 pid=0005 c : pmshell . exe 
hco=00070 pco=fe85d24b hconext=00000 hptda=009f f=17 pid=0002 c : pmshell . exe 


>>> We see 4 owners in accordance with the reference count 
>>> note: the owner of the object is 'mshare' 

>>> Check out the selector in record 2 : 

##dl bd47 

bd47 Data Bas=17a80000 Lim=00000067 DPL=3 P RW A 


>>> In this case it's within the compatibility region so could have used the 
>>> CRMA to get %17a80000 directly 


>>> The processes sharing the named storage may be obtained directly 
>>> records in the RMP . A local record is of the following form: 

>>> 

>>> +00 word - length of record (always 0008) 
hptda of user 

handle of shared memory object 
reference count for this ptda. 


>>> +02 word 
>>> +04 word 
>>> +06 word 


from local 


>>> Scanning through the RMP (for object 0188) we find the following local 
>>> records : 


»> 0178:00000030 

»> 0178:00000100 

»> 0178:00000120 
»> 0178:00000130 

»> 0178:00000180 
»> 0178:00000190 


01 01 00 


-08 00 9f 00 88 01 01 00 

08 00 58 02-88 01 01 00 

- 08 00 fa 02 88 


01 01 00 


08 00 56 03 88 


>>> This confirms what was shown in the .mo 188 display, but we have in addition 
>>> the reference count for each process. 


>>> Finally, we can cut the cake a different way by asking what is all the 
>>> named storage being referenced by a particular process. For example 
>>> EPM . 

>>> Start by finding its slot nos. 

•P 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 


0027 0013 0002 0013 0001 blk 0200 7b974000 7bb460d0 7bb2bf24 leb8 12 epm 
0020 0013 0002 0013 0002 blk 0200 7b966000 7bb460d0 7bb2b338 lecc 12 epm 


>>> EPM's pPTDA is %7bb460d0. Now find the hptda of this PTDA 
ll.mom %7bb460d0 

hob va figs own hmte sown,cnt It st xf 

02fa %7bb460d0 8000 ffcb 035b 0000 00 00 00 00 ptda 0013 c:epm.exe 


>>> Answer: 2fa. 

>>> Now look through the RMP for local records that begin: 

>>> 08 00 fa 02 

»> 0178:00000120 - 08 00 fa 02 88 

»> 0178:00000130 01 01 00 - 

»> 0178:00000140 - 08 00 fa 02 13 

»> 0178:00000150 04 01 00 - 

»> 0178:00000160 08 00 fa 02 15-04 01 00 

»> 0178:00000180 08 00 fa 02 03-04 01 00 

»> 0178:000001a0 - 08 00 

»> 0178 : OOOOOlbO fa 02 f 6 02 01 00 . . ..- 


>>> So, 5 named objects, with hobs=0188, 0413, 0415, 0403 and 02f6 



>>> Scanning the the RMP for Global records for these objects will reveal 
»> their names: PMDRAG.MEM, EPM\ETKE600 . EPM, EPMGNLS , 15502333\EPM.EXE, 

»> 153 94 914\E3EMUL . EX . 

>>> issuing .mo against each of the hobs will reveal whether these are shared 
>>> and with whom: 

.moc 188 


*har par cpg va fig 

0140 %fecf fb8a 00000010 %17a80000 369 

hob har hobnxt figs own hmte sown, 

0188 0140 0000 482c ff82 017d 0000 

hco=00291 pco=fe85dcf0 hconext=003c8 
hco=003c8 pco=fe85e303 hconext=00246 
hco=00246 pco=fe85db79 hconext=00070 
hco=00070 pco=fe85d24b hconext=00000 
##.moc 413 


next prev link hash hob hal 

OOOf 0141 0000 0000 0188 0000 hco=00291 

cnt It st xf 

00 00 00 00 mshare 

hptda=02fa f=16 pid=0013 c:epm.exe 

hptda=0356 f=16 pid=0009 c :mrf ile32 . exe 

hptda=0258 f=16 pid=0005 c : pmshell . exe 

hptda=009f f=17 pid=0002 c : pmshell . exe 


*har par cpg va fig next prev link hash hob hal 

0367 %fed02ae4 00000010 %13dc0000 369 025e 0372 0000 0000 0413 0000 hco=00293 

hob har hobnxt figs own hmte sown, cnt It st xf 

0413 0367 0000 4a2c ff82 030c 0000 00 00 00 00 mshare 

hco=00293 pco=fe85dcfa hconext=00000 hptda=02fa f=17 pid=0013 c:epm.exe 

##.moc 415 


*har par cpg va fig next prev link hash hob hal 

0307 %fed022a4 00000010 %13bf0000 369 037e 02c2 0000 0000 0415 0000 hco=003cc 
hob har hobnxt figs own hmte sown, cnt It st xf 

0415 0307 0000 4a2c ff82 0407 0000 00 00 00 00 mshare 

hco=003cc pco=fe85e317 hconext=00000 hptda=02fa f=17 pid=0013 c:epm.exe 

##.moc 403 


*har par cpg va fig next prev link hash hob hal 

02c2 %fed01cb6 00000030 %13bc0000 369 0307 0262 0000 0000 0403 0000 hco=00309 

hob har hobnxt figs own hmte sown, cnt It st xf 

0403 02c2 0000 4a2c ff82 0407 0000 00 00 00 00 mshare 

hco=00309 pco=fe85df48 hconext=00000 hptda=02fa f=17 pid=0013 c:epm.exe 

##.moc 2f6 


*har par cpg va fig next prev link hash hob hal 

0273 %fed015ec 00000010 %13b70000 369 027c 02ed 0000 0000 02f6 0000 hco=00308 

hob har hobnxt figs own hmte sown, cnt It st xf 

02f 6 0273 0000 4a2c ff82 0407 0000 00 00 00 00 mshare 

hco=00308 pco=fe85df43 hconext=00000 hptda=02fa f=17 pid=0013 c:epm.exe 

## 


>>> We see that except for hob=188 all the others are for the private use of 
»> EPM. 


How Memory Aliasing Works 


Aliasing is a facility in virtual memory management whereby one or more pages of a memory object may be referenced from an alternative 
virtual address, possibly from a different process or arena and possibly with different read/write/execute characteristics. It is used 
extensively by device drivers debugging applications and VDMs. 

This example shows how aliasing is represented in the system for a debugging application and how shared storage becomes privatized. 
There are many ways of creating aliases. The application in this example is IPMD, which uses DosDebug function MapWRAIias to alias the 
debugee's storage and DosCreateCSAIias to map a code selector to one of his own data segments. 

We introduce the memory alias record (VMAL) and the .ML command. 


>>> For reference list the thread slots in the system. . . 

•P 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 


001c 0004 0002 0004 0001 blk 0200 7b95e000 7bb45078 7bb2ac68 


10 cmd 


0020 0008 0002 0008 0002 blk 0200 7b966000 7bb460d0 7bb2b338 12 mrfile32 

002b# 000b 0002 000b 0001 blk 0200 7b97c000 7bb468fc 7bb2c5f4 leb8 14 ipmd 

002a 000b 0002 000b 0002 blk 0200 7b97a000 7bb468fc 7bb2c440 leb8 14 ipmd 

002c OOOd 0002 OOOd 0001 blk 0200 7b97e000 7bb47954 7bb2c7a8 leb8 16 cmd 

002d 000c 0002 000c 0001 blk 0200 7b980000 7bb47128 7bb2c95c le98 15 dpmlines 

002e OOOe 0002 OOOe 0001 blk 0300 7b982000 7bb48180 7bb2cbl0 leb8 17 epm 

002f OOOe 0002 OOOe 0002 blk 0300 7b984000 7bb48180 7bb2ccc4 lecc 17 epm 


>>> Now list all the busy alias records: 

## .ml 

hal=0001 pal=%ffe61020 har=00b8 hptda=009f pgoff=00000 f=001 

hal=0002 pal=%ffe61028 har=00b9 hptda=009f pgoff=00000 f=001 

hal=0003 pal=%ffe61030 har=001b hptda=009f pgoff=00000 f=001 

hal=0004 pal=%f fe61038 har=0183 cs=00e6 ds=d446 cref=001 f=13 

hal=0005 pal=%ffe61040 har=0199 hptda=009f pgoff=00006 f=001 

hal=0006 pal=%ffe61048 har=01b8 hptda=009f pgoff=00000 f=021 

hal=0007 pal=%ffe61050 har=01b9 hptda=009f pgoff=00000 f=021 

hal=0008 pal=%f fe61058 har=01ba hptda=009f pgoff=00000 f=021 

hal=0009 pal=%ffe61060 har=01e7 hptda=009f pgoff=00000 f=001 

hal=000a pal=%f fe61068 har=0208 cs=0056 ds=d446 cref=001 f=13 

hal=000b pal=%f fe61070 har=020b cs=0056 ds=d446 cref=001 f=13 

hal=000c pal=%f fe61078 har=026f cs=007e ds=d446 cref=001 f=13 

hal=000d pal=%f fe61080 har=02bf cs=00ae ds=d446 cref=001 f=13 

hal=000e pal=%f fe61088 har=02df cs=01ae ds=0077 cref=001 f=13 

hal=000f pal=%ffe61090 har=0305 hptda=0389 pgoff=00000 f=049 

hal=0010 pal=%ffe61098 har=0306 hptda=0389 pgoff=00000 f=049 

hal=0011 pal=%f fe610a0 har=030e cs=0056 ds=d446 cref=001 f=13 

hal=0012 pal=%ffe610a8 har=0323 cs=0056 ds=d446 cref=001 f=13 

hal=0013 pal=%f fe610b0 har=032e cs=007e ds=d446 cref=001 f=13 

»> hal f & 10 have f=049 = 0000 0100 1001 

>>> I | | . . . Busy 

»> I I 

>>> I Debug 

>>> | Privatized 

>>> 

>>> har=305 is an alias for a linear address in hptda=389 

>>> similarly har=306 is an alias for a linear address in hptda=389 

>>> Now look closer at hal=f. 

##.mlc f 

>>> chaining doesn't always work so., 
tt.mac 305 

*har par cpg va fig next prev link hash hob hal 

0305 %fed02278 00000010 %00520000 169 0307 0304 00b5 0000 OOcl OOOf hptda=031a 

hal=000f pal=%ffe61090 har=0305 hptda=0389 pgoff=00000 f=049 

har par cpg va fig next prev link hash hob hal 

00b5 %fecfef 98 00000010 %la030000 3d9 00b4 00b6 0000 0000 OOcl 0000 hco=00502 

hob har hobnxt figs own hmte sown,cnt It st xf 

OOcl 0305 0000 1838 OObd OObd 0000 00 00 00 00 shared c : doscalll . dll 

hco=00502 pco=fe85e925 hconext=00473 hptda=03cb f=lc pid=000e c : epm . exe 

hco=00473 pco=fe85e65a hconext=00455 hptda=03b9 f=lc pid=000d c:cmd.exe 

hco=00455 pco=fe85e5c4 hconext=0045a hptda=0389 f=9c pid=000c d : dpmlines . exe 

hco=0045a pco=fe85e5dd hconext=00283 hptda=031a f=lc pid=000b d:ipmd.exe 

hco=00283 pco=fe85dcaa hconext=0014a hptda=02d6 f=lc pid=0008 c :mrf ile32 . exe 

hco=0014a pco=fe85d68d hconext=00133 hptda=0257 f=lc pid=0005 c : pmshell . exe 

hco=00133 pco=fe85d61a hconext=00092 hptda=0248 f=lc pid=0004 c:cmd.exe 

hco=00092 pco=fe85d2f5 hconext=00020 hptda=01ae f=lc pid=0003 c : harderr . exe 

hco=00020 pco=fe85d0bb hconext=00000 hptda=009f f=lc pid=0002 c : pmshell . exe 


>>> Ignoring hco=455 for the moment. har=b5 represents linear address range 
>>> %la030000 in the shared arena. This is in fact a shared object (hob=lc) 

>>> which is being accessed by 9 different processes. The hco chain lists those 
>>> processes that access this object. hob=lc is one of the objects in doscalll.dll 

>>> Let's verify that %la030000 is indeed that same data in each of the contexts. 
>>> hco=133 is for pid=4, slot=lc, cmd. exe (1) 

## . s lc 

##dp %la030000 12 
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>>> %la030000 equates to real 

address 

%%a22000 






>>> hco=473 

■ is for 

■ pid=d, slot 

=2c, 

cmd 

.exe (2) 






##.s 2c 













##dp %la030000 12 
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>>> %la030000 equates to real 

address 

%%a22000 






>>> hco=502 

is for 

■ pid=e, slot 

’-2c, 

epm 

. exe 







##.s 2e 













##dp %la030000 12 
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>>> In each of these cases looked so far, linear address %la030000 is 
>>> mapped to the same real address %%a22000. 

>>> Now examine the hco flags: 9c = 1001 1100 


>>> I | | | ... . User 

>>> I | | Executable 

>>> I | Read 

>>> | Privatized 


>>> now turn our attention to har=305, hal=f, address %520000 and hco=455. 


>>> hco=455 has the additional Privatized flag set. 

>>> Now look at the PTE for this storage in slot=2d, pid=c, dpmlines.exe 
##.s 2d 

##dp %la030000 12 


linaddr 

frame 
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state 
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>>> This is no-longer the same storage as in the other contexts. After DPMLINES 
>>> was loaded, IPMD created an alias to object lc reference by DMPLINES. 

>>> The loader/memory had to make a private copy to protect the integrity 
>>> of other contexts who were sharing the same object. Having privatized 
>>> this object for the one context, the loader will not share it with 
>>> other contexts. 

>>> If we hadn't started with the alias record we could have done a .ml now 
>>> and looked for the records which referenced hptda=389. As it happens we 
>>> know already that har=305 is an alias of har=b5 . We can check this out 
>>> by looking at the page tables for %520000 in hptda=031a (pid=b, slot=2c) 


##.s 2c 
##dp %520000 
## . i %520000 
##dp %520000 12 
linaddr frame 
%00520000* 00390 
%00520000 OObda 
%00521000 


pteframe 

state 

res 
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>>> %520000 is %%bda000 which is the same real address as %la030000 in slot= 
>>> 2d. We had to page in %520000 so we should check %la030000 in slot=2d 
>>> again, in case it was discarded. 


##.s 2d 

##dp %la030000 12 


linaddr 

frame 

pteframe 

state 

res 

Dc 
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Pn 

state 
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005ab 
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vp id=01616 
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> ... and it is the same. 

> While we are at it, lets check %la030000 in slot=2c (IPMD) 


##.s 2c 

##dp %la030000 12 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 



%la030000* 00611 frame=00611 2 0 D A U W P resident 

%la030000 00a22 frame=00a22 0 0 c u U r P pageable 

%la031000 OOalc vp id=00320 0 0 c u Urn pageable 

>>> . . . and yes as expected IPMD is referencing the shared %la030000, in 
>>> fact he is referencing both copies. 

>>> Now let's look at some of the other aliases set up by IPMD 
##.mlc 10 

*har par cpg va fig next prev link hash hob hal 

0306 %fed0228e 00000010 %00540000 169 0308 0307 02ee 0000 0386 0010 hptda=031a 

hal=0010 pal=%ffe61098 har=0306 hptda=0389 pgoff=00000 f=049 

har par cpg va fig next prev link hash hob hal 

02ee %fed0207e 00000010 %00010000 ld9 02ed 02f0 0000 0000 0386 ffff hptda=0389 

>>> Note: hal=ffff for har=2ee. This is a special hal to indicate a 

>>> privatized arena - there isn't a context record to put the privatized 

>>> flag in as this was private arena, shared data. 

>>> Check out the hptda pids as we have forgotten who 31a and 389 are. . 
tl.mo 31a 

hob va figs own hmte sown,cnt It st xf 

031a %7bb468fc 8000 ffcb 02db 0000 00 00 00 00 ptda 000b d:ipmd.exe 

# # . mo 38 9 

hob va figs own hmte sown,cnt It st xf 

0389 %7bb47128 8000 ffcb 0000 0000 00 00 00 00 ptda 000c d : dpmlines . exe 

>>> Now check the page tables in each processes to prove we are looking 
>>> at the same thing. . . 

##.ss 2b 
##dp %540000 11 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00540000* 00390 frame=00390 2 0 D A U W P resident 

%00540000 vp id=015f0 0 0 c u U W n pageable 

## . i %540000 
##dp %540000 11 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00540000* 00390 frame=00390 2 0 D A U W P resident 

%00540000 005d2 frame=005d2 0 0 c u U W P pageable 

##.ss 2d 
##dp %10000 12 
## . i %10000 
##dp %10000 12 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00010000* 002b3 frame=002b3 2 0 D A U W P resident 

%00010000 005d2 frame=005d2 0 0 c u U r P pageable 

%00011000 vp id=015fl 0 0 c u Urn pageable 

##.ss 2b 
##dp %540000 11 

linaddr frame pteframe state res Dc Au CD WT Us rW Pn state 

%00540000* 00390 frame=00390 2 0 D A U W P resident 

%00540000 005d2 frame=005d2 0 0 c u U W P pageable 

>>> Finally look alias record hal=e. This is a CS Alias of a data 
>>> segment within in the same process. The hal flags indicate: 

»> 13=0001 0011 

>>> I ||... Busy (in use) 

»> I | . . . . CS Alias 

>>> | DS selector valid 


##.mlc e 

*har par cpg va fig next prev link hash hob hal 

02df %fed01f 34 00000010 %00350000 lc9 02e2 02de 029d 0000 031b OOOe hptda=031a 

hal=000e pal=%f fe61088 har=02df cs=01ae ds=0077 cref=001 f=13 
har par cpg va fig next prev link hash hob hal 

02 9d %fed01988 00000010 %000e0000 179 02b9 0293 0000 0000 031b 0000 hptda=031a 

hob har hobnxt figs own hmte sown,cnt It st xf 

031b 02df 0000 102c 031a 031e 0000 00 00 00 00 priv 000b d:ipmd.exe 

>>> Check out the page tables... 

##dp %350000 12 
## . i %350000 
##dp %350000 12 
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%00351000 
##dp %e0000 
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%000el000 
##.i %e0000 
##dp %e0000 

12 
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##dp %350000 12 
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>>> Check out the 

segment descriptors 










##dl lae 

Olae Code Bas=00350000 Lim=0000fl5f DPL=2 P RE C 

##dl 77 

0077 Data Bas=000e0000 Lim=0000fl5f DPL=3 P RW A 

## 

>>> Beacuse of the existence of the CS/DS alias, IPMD can effectively 
>>> read, write and execute the same storage. This is how IPMD is able 
>>> to implement break points, by copying code, patching in INT 3 
>>> instructions and executing the copied code; all from ring 3 priviledge 
>>> without compromising other processes or the system. 


Exploring 32-bit Presentation Manager Under WARP 


In this section we look specifically at the messaging function within Presentation Manager (PM). 

Sending and receiving messages lies at the heart of how PM applications communicate with each other and the system. Messages may be 
sent synchronously and posted asynchronously. The mismanagement of messages by an application leads frequently to the 'Bad 
Application' Pop-up dialog. In extreme cases deadlocks result. 

This topic applies to OS/2 V3, which introduced the 32-bit version of Presentation Manager. The previous 16-bit environment has analogous 
concepts which are briefly explored through a final worked example. 

Pre-requisites to any PM debugging requires the following: 

• Availability of the symbol file (PMMERGE.SYM) for PMMERGE.DLL. This should be installed in the same directory as 
PMMERGE.DLL when using the Kernel Debugger or for dump analysis, in the same directory as the Dump Formatter. 

• Availability of the PM programming reference from the Programmer's ToolKit. 

• Also of use, is ready access to the C header files from the Programmer's Toolkit. 

We start by giving an overview of the PM messaging environment in which an application's PM thread operates. 


The PM Messaging Environment 


First consider the non-PM application programming model as shown in the following diagram: 



Non-PM Application Program Model 


application threads 




This diagram illustrates the following points: 


• Non-PM application threads run in a relatively unconstrained environment (compare this with the following situation). 

• The Operating System provides a b/ack-box set of services and interfaces. 

• The Hardware is not directly accessible by the application. 

For PM message threads, the environment is radically different. The key difference is that application code that runs on a PM message 
thread is effectively a subroutine of the WinGetMsg API even though WinGetMsg is called by the application. The terminology often used to 
describe this reversal is Program /aversion . WinGetMsg is said to be inverted with respect to the application's message thread. 

We see this illustrated in the following diagram. 



PM Application Program Model 


PM message thread 


Non-PM application threads 



Msg Thread Logic 



No 



Also illustrated by this diagram are the following points: 

• PM Message threads act in a co-operative way. They wait for messages, and pass them on to the appropriate application if not 
for themselves. 

• PM Message threads should spend most of their elapsed time waiting for notification of messages - because of their 
co-operative nature. 

• Application code that runs on the message thread should be limited to very short duration processing. We often speak of the 
tenth-of-a-seconct ru/e , which is intended to imply the transient nature of application code processing rather than a precise 
measure. 

• If a message thread communicates with another thread or the operating system, then this should be done either asynchronously 
or so as not to violate the tenth-of-a-second rule. 


PM Message Queues 


PM messages are generated either as the result of user interaction with the system or by the use of various PM APIs. Both PM and non-PM 
applications may generate PM messages. 

Messages may flow: 

synchronously, that is, require processing by the recipient before the sender can continue, or 
asynchronously, that is, where no reposonse is required. 

They may flow between threads (inter-thread messages) or from a thread to itself (intra-thread messages). 

These characteristics require a message queuing mechanism to be implemented so that message order may be preserved. 

Note: 

A message's meaning may often depend on the outcome of a preceding message. For example, consider the action of the F4 key 
after the Alt key has been pressed. 

Each PM message thread has two queues or more strictly speaking a message queue and a message list. There may be only one instance 
of these two structures per thread. 

• The message queue is a circular array, the size of which is specified or defaulted by the application when it creates the queue 
using WinCreateMsgQueue. 

This queue is used for the receipt of asynchronous messages generated by use of the WinPostMsg API. 

• The message list has no depth and is created implicitly by WinCreateMsgQueue. 

This is used for the receipt of synchronous messages sent using WinSendMsg. 

WinCreateMsgQueue also creates a message event semaphore that is posted whenever a message, synchronous or asynchronous, is 
posted; or a message response is generated. This is the semaphore on which WinGetMsg waits for message notification. 

There is a system queue, which is also a circular array. Messages are enqueued on the system queue by the PMDD.SYS device driver as 
the result of external events deriving directly from: 

Mouse activity 

Keyboard activity 

Use of a light pen 

Timer ticks. 


PM maintains knowledge of who the current, mouse, keyboard, pen, and event receivers are. When an external event causes a message to 
be queued on the system queue, PM posts the message event semaphore of the current receiver of that particular event. 



An application may define Window Procedures - entry points within the message thread. These are associated with a PM Window and a 
message queue. They receive control when a message is dispatched, that is dequeued from the message queue or message list. More than 
one window procedure may be serviced by the same message queue/list. Which one should be dispatched is determined from the HWND, 
which is one of the parameters associated with a message. 

When WinGetMsg receives a message event notification, it first checks for the presence of received synchronous messages, if there are 
any dispatches them directly. Next it looks for an application generated (posted) message and finally for a system queue message. 

The application thread explicitly dispatches asynchronous messages using WinDispatchMsg. 

The System Queue entries are SQMSG structures. 

The Application Queue entries are QMSG structures. 

The Application Send Message List comprises a chain of SMS structures. 

This scenario is illustrated in the following diagram: 



PM System Input Q Processing Overview 



An Application Thread's Messaging Structures 


The previous section introduced the notion of a message queue and list, of where there is one pair per PM message thread. We now look at 
these in more detail, with the associated PM system structures that comprise the applications's messaging environment. 

The Message Queue Header (MQt 

This structure acts an anchor for all the message processing structures of an application message thread. It is 
created by WinCreateMsgQueue, and the returned HMQ (message queue handle) is the address of this structure. 
PM often refers to the address of a MQ as its PMQ. 

The principle fields of interest are: 


Offset 

Description 

+0x14 

The current read position of the message queue. 

Since the message queue is a circular array, four pointers have to be maintained: 
the current read position, current write position, top and bottom of array. 

Each queue entry is a QMSG structure. 

Entries are added to the queue in increasing address order, until the maximum 
(bottom) is reached then entries are added from the top. 

Removal of entries only involves updating the current read pointer. Thus, a small 
trace of past message activity may be seen by scanning backwards from the 
current read pointer to the current write pointer. 

+0x18 

The current write pointer. 

+0x24 

The Pid of the message thread to which this MQ belongs. 

+0x28 

The Tid of the message thread to which this MQ belongs. 

+0x44 

The most recent SMS on which a response is awaited. 

The presence of a non-zero value in this field implies that the message thread is 
currently blocked in WinSendMsg waiting for a response. 

If the message thread recurses, for example through the receipt of a synchronous 
message, then a subsequent WinSendMsg will cause this field to be updated. 
The previous contents are saved on the stack. 

A non-zero value in this field is of prime interest when diagnosing hangs. It 
immediately focuses our attention on the recipient of this message. 

+0x48 

The current SMS received. 

This field is non-zero when an SMS is removed from the receive list for processing 
by its associated window procedure. 

When this field is non-zero, it implies that the thread's window procedure has been 
dispatched to process a received message. 

+09c 

The Received message list. 

SMSs are chained from this location pending dispatch. 

Upon dispatch the oldest message is removed from the list and pointed to from 
offset +0x48 of the MQ. 

+0xa4 

The thread slot number of the message thread to which this MQ belongs. 
This is very useful for correlating MQs to threads. 


The Send Message Structure (SMS) 

The SMS is created for synchronous messages and linked to the receive list (MQ+0x9c) when WinSendMsg is 
called. 


The principle fields of interest are: 


Offset 


+0c 

+14 

+18 

+24 

+28 

+2c 

+30 


Description 

Pointer to the next (more recent) SMS in the receive list. 

Pointer to the MQ to which this SMS has been sent. 

Pointer to the MQ of the thread from which this SMS was sent. 

Pointer to the WND the represents the Window to which this message has been 
sent. 

The message Id. 

Message parameter 1 . 

Message parameter 2. 


Offsets +0x14 and +0x18 are of prime interest in diagnosing hangs. They enable us to locate the recipient of a 
message, of which a response is pending and therefore the thread which is causing our thread to remain blocked. 

The Queue Message Structure (QMSG) 

This is the structure used by applications when calling WinDispatchMsg. 

The QMSG is also the form of an entry on the application's message queue. 

The principle fields of interest are: 


Offset 


+0 

+4 

+8 


Description 

The window handle (HWND). This is an index (ignoring the high-order bit) in to the 
handle table. From the handle table we can obtain the equivalent PWND or pointer 
to the WND. 

The message Id. 

Message parameter 1 . 

Message parameter 2. 


The Handle Table 


This is a global table that is used to correlate window handles (HWNDs) with pointers to WNDs (PWNDs). The table 
comprises a 0x20 byte header with 8-byte entries. The first word of each entry is a PWND and the second a Boolean 
flag, which if non-zero, indicates that an HWND/PWND combination is non-deleteable. 

The handle table may be located from the address at symbol: 

pHandleTable 


The Window Structure (WND) 

This structure represents a window. It is created by WinCreateWindow. 

The WND has two main functions: 

» It acts as the link between the MQ and the thread's window procedure 

» It establishes the WND hierarchy. 

The principle fields of interest are: 

Offset Description 

+0 Next sibling WND. 

+4 Parent WND. 


+8 


First Child WND. 



+28 

+2c 

+30 


+34 

This scenario is illustrated in the following diagram: 


The pointer to the MQ that will queue messages sent and posted to this window. 
The Windows's HWND. 

A Boolean, which if non-zero, indicates that the window procedure address is a 
16-bit far pointer. 

The address of the window procedure. 
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PM Message Processing Logic 


The following sections provide a summary of the essential internal logic of PM's message handling. This is provided to give the reader 
sufficient understanding that will enable most application problems, especially those that cause hangs, to be identified. In most cases hangs 
in the PM environment are caused by a misuse or misunderstanding of the message thread model, especially the way in which message 
threads act in a co-operative manner. 

An outline is given for each of the following: 

WinGetMsg logic. 

WinSendMsg logic. 

Waiting for Message Activity. 

WinSetFocus logic. 


Note: 


In each of these outlines, the added complication of calling hooks has been omitted. 


WinGetMsg Logic 


WinGetMsg operates essentially as a loop that waits for message activity and returns messages to the user. Conceptually the application's 
code acts as an inverted subroutine of WinGetMsg. This was illustrated in The PM Messaging Environment. 

These are the essential steps in WinGetMsg processing: 

• When WinGetMsg wakes, it first unlocks the System Queue if owned or if it is the active thread . 

The MQ of the current system queue owner is pointed to by pmqsyslock. This is set to zero if this points to the MQ of the 
current thread. 

The active thread is the thread that has the right to unlock to system queue if locked by another thread. Normally this is the 
thread that manages the MQ of the window in focus. Normally the thread that has locked the system queue is the active thread. 

■ The received list is checked. 

If SMSs are queued then each is removed successively and the corresponding window procedure is called. 

Received messages, that is messages sent via WinSendMsg to this thread, are not returned by WinGetMsg. The window 
procedure is called directly. 

• The application's queue is checked for posted messages. 

If one is found it is dequeued and returned to the application. 

• If no posted message is found then WinGetMsg tries to process the system queue. 

• We attempt to lock the system queue if free. 

if pmqsyslock is zero it is set to the current thread's MQ address. 

• If the lock was successful then we peek the next system queue message. 

If the lock was unsuccessful we return to the beginning of the loop and wait on the message queue semaphore. 


If the next system message is for this thread then it is dequeued and returned to the application with the system queue lock 
still held. 


The possibility of holding the system queue lock while running in user code is vital to note. While this happens only active 
thread can dequeue a system queue message. The reason for holding the system queue lock is for performance. It is likely that 
one system message will be followed by a sequence for the same thread. If the lock was released, unnecessary processing on 
other message queue threads would take place. More recently queued messages could not be processed out of turn anyway, 
since the interpretation of a system message depends upon the outcome of the preceding system message. 

• If the next system message is for another application then the system queue is unlocked. 

• The other application is made the current input receiver. 

PM distinguishes between current mouse, keyboard and event receiver. WinGetMsg makes the other application the current 
mouse, keyboard or event receiver depending upon the message category. 

• Finally the other application's message queue semaphore is posted. WinGetMsg returns to the beginning of its message loop by 
waiting on its own message semaphore for more message activity. 

This processing is illustrated in the following diagram: 



WinGetMsg Essential Processing 
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Win Send Msg Logic 


These are the essential steps in WinSendMsg processing: 

• We check to see if the message is being sent to the same thread. 

WinSendMsg to the same thread is known as an /ntra-thread send. 

WinSendMsg to another thread is known as an /nter-thread send. 

• If intra-thread then the message is dispatched immediately, from within WinSendMsg. 

This behaviour implies that a window procedure may recurse many times, even if waiting for a response to a WinSendMsg. 

• If inter-thread then the message is enqueued to the receive list of the recipient's MQ. 

• Active thread status is transferred to the receiving thread (if currently owned). 

This allows the receiver to unlock the system queue if it had been locked by the current thread aadthe current thread is the 
active thread. 

• The receiver's message queue semaphore is posted. 

• WinSendMsg waits on the current thread's message queue for a response to the sent message. 

This processing is illustrated in the following diagram: 



WinSendMsg Essential Processing 


WinSendMsg 
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Waiting for Message Activity 


In order to process synchronous messages as swiftly as possible, PM always checks the receive list of the current thread for pending SMSs 
before waiting on an internal PM semaphore. 

If SMSs are found queued, they are successively dispatched. 

Only when the receive list has been processed does PM finally wait on a semaphore. 

This applies particularly to the message processing semaphore, but also equally to semaphores that serialise access to resources such as 
the .INI files. 


WinSetFocus Logic 


WinSetFocus has a subtle bearing on message processing since it selects a new active thread and new current input receivers for system 
messages. 

Note: 

Focus may be changed by a third party. 

These are the essential steps in WinSetFocus processing: 

• WM_FOCUSCHANGE is sent to the message thread losing the focus. 

• The current window in focus is changed, 
pwndfocus points to the WND of the focus owner. 

• Unlock the system queue if locked. 

The MQ of the current system queue owner is pointed to by pmqsyslock. This is set to zero if it points to the MQ of the current 
focus owner. 

• The target window's message thread is marked as the new focus owner, 
pmqfocus is set to the address of the new focus owner's MQ. 

• The target thread's message queue is made the current mouse and keyboard input receiver. 
pmqMouseWake and pmqKeyWake are set to the address of the new focus owner's MQ. 

• The new focus owner's message thread is marked as the new active thread. 

• A priority boost is applied to the new focus owner's message thread. 

• WM_FOCUSCHANGE is sent to the message thread gaining the focus. 


This processing is illustrated in the following diagram: 
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Application Not Responding to Messages Logic 


The Application Not Responding to Messages dialog, or BadApp dialog as it is sometimes referred to, appears after Ctrl-Esc has been 
hit and the system has not been able to display the task list. 

The essential logic for this processing is as follows: 

• Ctrl-Esc is hit and 5 second timer is started. 

• If the task list appears before the time-out then all is well, if not we check for who might be holding things up. 

• We try for 5 seconds to obtain the User PM Semaphore. If unsuccessful then the Pid, Tid and Session Id of the owner is saved in 

the QHPSTRUCT. 

• If pmqsyslock is owned then the Pid, Tid and Session Id of the owner is saved in the QHPSTRUCT. 

• If pmqfocus is owned then the Pid, Tid and Session Id of the owner is saved in the QHPSTRUCT. 

• We now enter a second wait of a further 3 seconds, after which, we build a second QHPSTRUCT. 

• If the Tid and Pid are different and we have not yet had an acknowledgement from the task list then we wait a further 12 

seconds, on the assumption the processing is slow, but not hung. 

• If the Tid and Pid are the same or we have expired on our third time-out then we set fBadAppDialog true and reset the cause 
for the hang: 

If User_Sem held then release User_Sem 
if system queue locked then reset pmqsyslock 
if focus owner hung, then reset pmqfocus 
Report the hanging application in the BadApp dialog. 

This processing is illustrated in the following two diagrams: 

BadApp Dialog Logic 
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The flags in the QHPSTRUCT indicate the detected reason for hanging. These may be a combination of: 


Name 

Bit Mask 

Description 

QHP_SYSQUEUELOCK 

0x0001 

System < 

2ueue Locked 

QHP_SENDMSGLOCK 

0x0002 

Waiting 

for a response to 

QHP_CLIPBRDLOCK 

0x0004 



QHP_WINDOWLOCKED 

0x0008 



QHP_VISRGNLOCKED 

0x0010 



QHP_LOCKWINDOWUPDATE 

0x0020 



QHP_FSRSUSERHANG 

0x4000 

Waiting 

for the User_Sem 

QHP_INPUTPROCESSED 

0x8000 




Useful Symbols for PM Structures 


The following list is a small selection of global symbols from PMMERGE.SYM that will be of help in locating the structures associated with 
message handling: 

pmsemaphores 

This is the label for the table of PMSEM and GRESEM semaphore structures. Offset +0x20 is the location of the User 
Semaphore. If this is owned and not released within the time-out period after Cltrl-Esc has been hit, then the 
Application Not Responding to Messages reports the semaphore owner as the culprit. 

pmqSyslock 

The PMQ of the thread that has locked the system queue. 

This is the first place to look when investigating a hang in a PM application. The system uses this to name a bad 
application when the Application Not Responding to Messages dialog appears. 

pmqFocus 

The PMQ of the window that has the focus. 

if pmqSyslock is zero, the system uses this as a second choice for the bad application when the Application Not 

Responding to Messages dialog appears. 

pmqKeyWake 

The PMQ of the current keyboard event receiver. 

pmqMouseWake 

The PMQ of the current mouse event receiver. 

pmqEventWake 

The PMQ of the current miscellaneous event receiver. 

pwndFocus 

The PWND of the window currently in focus. 

pmqShutdown 

The PMQ of the thread sent a WM_QUIT and being waited on to terminte. If Shutdown doesn’t complete, then this 
could be a good place to start investigation of the problem. 

pmqCapture 

The PMQ of the thread that has the mouse captured. 

pwndCapture 

The PWND of the window associated with mouse capture. 


pwndSysModal 

The PWND of the System Modal window. 

pmqVisLock 

The PMQ that has visible regions locked. 

pmqTrack 

The PMQ of the thread currently in WinTrackRect. 

pmqLockllpdate 

The PMQ of the thread that has update locked. 

pHandleTable 

The address of the handle table. 

pSysqueue 

The MQ of the system input queue. 

The system queue is headed by a partial MQ since it does not require the fields to support a receive list. 

pmqShell 

The PMQ of the 1st thread of the 1st Shell Process. 

This thread is responsible for starting and re-starting the Workplace Shell. 

pmqShell2 

The PMQ of the 1 st thread of the 2nd Shell or Workplace Shell Process. 
This thread is the main thread of the desktop PM application. 

paAABRegs 

The address of the application anchor block registers (AAB). 

AAB registers are allocated for each PM application message thread. This is located in thread local memory, which 
implies that it is correct only for the current thread context. The Thread Local Memory Area is saved in the TCB and 
restored when the thread is made current. Since the TCB may be located in System storage under any context then 
a thread's PMQ may be found in any context from its TCB. 

pwndObject 

The PWND of the Object Window. 

This is the parent or owner of all non-display windows. 

pwnd Desktop 

The PWND of the Desktop Window. 

This is the parent of owner of all displayable windows. 

SleepPMQ+nnn 

When a thread is blocked at approximately offset +0x155 into SleepPMQ then it is waiting on the message queue 
semaphore for new messages or responses to outstanding sent messages. Offset +0x30 from the current stack 
pointer usually contains the PMQ for the current thread. 

pmqList 

All MQs are chained on a single linked master list from offset +0x0 of the MQ. The current head of the master list is 
pointed to by pmqList. 

psmsList 

All SMSs are chained on a single linked master list from offset +0x0 of the SMS. The current head of the master list 
is pointed to by psmsList. 

qhpsBadApp 

This is the label of the QHPSTRUCT saved the first time a time-out occurs after Ctrl-Esc has been hit and the 

Application Not Responding to Messages dialog appears. 

fBadAppDialog 

A Boolean that indicates when the Application Not Responding to Messages dialog has been displayed. 


Useful PM Structures 


The following diagrams illustrate the main PM structures for the messaging function. These are laid out as if viewed under the Kernel 
Debugger or Dump Formatter by displaying them using the DD Command. 
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PM Window Structure (WND) 
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PM Send Message Structure (SMS) 
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PM Queue Message Structure (QMSG) 
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Stack Layout at Useful Entry Points 



Stack Frames for Common Entry Points 
viewed as double-words 
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PM Worked Examples Under WARP 


We give two examples of diagnosing common application problems: 

Example 1 - A trap in PMMERGE.DLL caused by an application fault. 

Example 2 - A hang in the Workplace, again caused by an application fault. 

Further techniques are illustrated in: 

Flow to find the MQ of any thread. 

Flow to find the MQ of a BadApp Application. 

Finding Application and System Queue Elements. 

Further examples, with annotated solutions, may be found on the accompanying CD-ROM in the TURKEY lab exercise. 


Example 1 - A Trap in PMMERGE.DLL 


Steps for analysing traps in PM DLLs: 

• Intercept the trap at the point of failure. 

• Unwind the stack to the application call. 

• Validate the parameters to the API call. 

• If necessary, determine how the user routine was invoked by examining the MQ and looking for dispatched messages or by 
unwinding the stack further. 

This example is of a trap in PMMERGE.DLL, but caused by an application fault! 

Because we have a trap E, we set the fatal vector under the Kernel Debugger (or use TRAPDUMP=ON in CONFIG.SYS to take a dump) 
then re-create the problem. 

ffvsf * 

##g 

Trap 14 ( OEH) - Page Fault 0006, Not Present, Write Access, User Mode 
eax=00000007 ebx=00273fcc ecx=00000001 edx=00000007 esi=12d3e089 edi=00000000 
eip=lbd3d261 esp=00273ebc ebp=00273flc iopl=2 rf — — nv up ei pi nz ac po cy 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001d4000 

005b : Ibd3d2 61 f3a5 repe movsd es : 00000000=invalid ds : 12d3e089=69727453 

##ln 

005b : 00000000 turkey:FLAT: $dummy$ + Ibd3d261 


We have trapped in a DLL, probably PMMERGE.DLL, certainly not in the user's .EXE code. We unwind the stack to find the return address 


in the user's 

.EXE 




##dd %ebp 

%00273f lc 

00273f 5c 

Ibd3d05b 

00000000 

00000005 

%00273f 2c 

00080001 

00000000 

00080013 

00010423 

%00273f 3c 

00190008 

00000000 

00000001 

00000014 

%00273f 4c 

00000000 

80000144 

00000001 

00190008 

%00273f 5c 

00273fa8 

lbd03893 

80000144 

00000071 

%00273f 6c 

00280018 

00000000 

000103ec 

00000000 

%00273f7c 

00000000 

00190008 

00273f cc 

00000000 

%00273f 8c 
##d 

00000000 

ffffffff 

80000144 

12d31630 

%00273f 9c 

00000000 

12d314 94 

00190008 

00273f f 4 

%00273fac 

00010932 

00190008 

00273f cc 

0000000c 


%00273fbc 
%00273fcc 
%00273fdc 
%00273fec 
%00273f fc 


00000004 00000004 00000007 80000144 
80000144 00000071 00280018 00000000 
0092d87d 0000027a OOOOOOfO 00000000 
12d31630 00190008 00000000 lbfbbf68 
00022bf 4 


Invalid linear address: %00274000 


Not all the stack was paged in to physical memory, but never mind. Enough is there to allow us to find the return address to the user's 
application code. 

Following the base pointer (EBP): 

%00273f lc 00273f 5c Ibd3d05b 

%00273f 5c 00273fa8 lbd03893 80000144 00000071 


%00273f 9c 


00273f f 4 


%00273fac 00010932 00190008 00273fcc 0000000c 


The return address is %10932. We inspect the code just before this address. 

##u %10932-20 


%00010912 

25837ddc2a 

and 

eax, 2adc7d83 

%00010917 

Of 8507000000 

jnz 

%00010924 

%0001091d 

e916000000 

jmp 

%00010938 

%00010922 

8bc0 

mov 

eax, eax 

%00010924 

8d45d8 

lea 

eax, [ebp-28] 

%00010927 

50 

push 

eax 

%00010928 

f f 75f c 

push 

dword ptr [ebp-04 

%0001092b 

b002 

mov 

al, 02 

%0001092d 

e8862ecf lb 

call 

%lbd037b8 

%00010932 

83c408 

add 

esp, +08 

%00010935 

ebcl 

jmp 

%000108f8 

%00010937 

fc 

cld 



##ln %lbd037b8 

%00000000 turkey:FLAT: $dummy$ + Ibd037b8 


This call was to a routine at %1 bd037b8. LN doesn't give us a useful symbol (our .EXE is being selected instead of the correct .DLL 
symbol). We find out who owns this address from the memory management control blocks. 

##.m %lbd037b8 


*har par cpg 

OlcO %feaf 168a 00000001 
hal=000c pal=%f fe5c078 
har par cpg 

Olbd %feaf 1648 00000001 
hal=0009 pal=%f fe5c060 
har par cpg 

0106 %feaf 068e OOOOOOfO 


va 

%f fe3c000 
har=01c0 
va 

%f fedeOOO 
har=01bd 
va 

%lbd00000 


fig next prev link hash 
101 OOOd 01e2 Olbd 0000 
hptda=010c pgoff=000d7 
fig next prev link hash 
101 01a2 Olbe 0106 0000 
hptda=010c pgoff=00000 
fig next prev link hash 
3d9 0105 0107 0000 0000 


hob hal 
013e 000c 
f =02 1 
hob hal 
013e 0009 
f =02 1 
hob hal 
013e 0000 


=0000 


=0000 


hco=00307 


hob har hobnxt figs own hmte sown,cnt It st xf 
013e OlcO 0000 1838 0139 0139 0000 00 02 00 00 
hco=00307 pco=fe64ef3e hconext=002 96 hptda=032f f 
hco=00296 pco=fe64ed09 hconext=001f 9 hptda=0301 f 
hco=001f9 pco=fe64e9f8 hconext=00188 hptda=02c9 f 
hco=00188 pco=fe64e7c3 hconext=00107 hptda=0291 f 
hco=00107 pco=fe64e53e hconext=0008e hptda=023b f 
hco=0008e pco=fe64e2el hconext=0002a hptda=01b5 f 
hco=0002a pco=fe64e0ed hconext=00000 hptda=010c f 


shared 
=lc 
=lc 
=lc 
=lc 
=lc 
=lc 
=ld 


c : pmmerge . dll 


pid=0019 

pid=0009 

pid=0007 

pid=0005 

pid=0004 

pid=0003 

pid=0002 


a : turkey . exe 
d : cmd . exe 
d : cmd . exe 
c : 2000 . exe 
c : pmshell . exe 
c : harder r . exe 
c : pmshell . exe 


We can see that our call was to an entry point in PMMERGE.DLL. We need to activate PMMERGE's symbols. 

##wa pmmerge 
##ln %lbd037b8 

%lbd037b8 pmmerge : PM32BIT : WIN32DISPATCHMSG 
##ln 

005b : Ibd3d064 pmmerge : PM32BIT : LoadStrMsg + lfd 
005b : Ibd3d2a8 WIN32POSTQUEUEMSG - 47 


So we called WinDispatchMsg and some time later we probably called LoadStrMsg, which is where we trapped. First we need to check the 



parameters to WinDispatchMsg. These are: 

HAB 00190008 

PQMSG 00273fcc 

The QMSG at %273fcc is also in the stack we dumped: 

%00273f cc 80000144 00000071 00280018 00000000 
%00273fdc 0092d87d 0000027a OOOOOOfO 00000000 


The first parameter is the HWND. We convert this to a PWND, dump the WND and look for the window procedure entry point. 

##dd phandletable 11 
9f3f : 0000ab78 12d50000 


##dd %12d50000+20+ (8*144) 12 
%12d50a40 12d31494 00000000 


##dd %12d3 

%12d31494 

%12d314a4 

%12d314b4 

%12d314c4 

%12d314d4 

%12d314e4 

%12d314f4 

%12d31504 


1494 

12d31838 
00c80262 
12d314f 0 
00000000 
12d3147c 
00000000 
00004b4e 
00000000 


12d3c974 

0104029e 

00000004 

000103ec 

00000000 

2050534d 

00000000 

000103ec 


00000000 
80000000 
12d31630 
00000000 
00000000 
00000034 
OOOOf c4e 
00000000 


12d3c974 

00000008 

80000144 

00000000 

00000000 

12d31894 

00000019 

00000000 


Note: 


We could have used the following more complex single command construct to achieve the same result: 


##dd % (dw 
%12d314 94 
%12d314a4 
%12d314b4 
%12d314c4 
%12d314d4 
%12d314e4 
%12d314f4 
%12d31504 


(% (dw (phandletable) ) +20+ (8*144) ) ) 
12d31838 12d3c974 00000000 12d3c974 
00c80262 0104029e 80000000 00000008 
12d314f 0 00000004 12d31630 80000144 
00000000 000103ec 00000000 00000000 
12d3147c 00000000 00000000 00000000 
00000000 2050534d 00000034 12d31894 
00004b4e 00000000 0000fc4e 00000019 
00000000 000103ec 00000000 00000000 


The window procedure entry point is at offset +0x34. 
We now unassemble this: 

##u %103ec 


%000103ec 

55 

push 

ebp 


%000103ed 

8bec 

mov 

ebp, esp 


%000103ef 

83ec08 

sub 

esp, +08 


%000103f 2 

8b4508 

mov 

eax, dword 

ptr [ebp+08] 

%000103f 5 

a32c0d0200 

mov 

dword ptr 

[00020d2c] , eax 

%000103fa 

8b450c 

mov 

eax, dword 

ptr [ebp+Oc] 

%000103fd 

e93a000000 

jmp 

%0001043c 


%00010402 

8bc0 

mov 

eax, eax 


%00010404 

f f 7508 

push 

dword ptr 

[ebp+08] 

%00010407 

bOOl 

mov 

al, 01 


%00010409 

e8322dcf lb 

call 

WIN32QUERYANCHORBLOCK (%lbd03140) 

%0001040e 

##u 

8945fc 

mov 

dword ptr 

[ebp-04 ] , eax 

%00010411 

6a00 

push 

+ 00 


%00010413 

6al4 

push 

+ 14 


%00010415 

6a01 

push 

+ 01 


%00010417 

6a00 

push 

+ 00 


%00010419 

f f75fc 

push 

dword ptr 

[ebp- 04 ] 

%0001041c 

b005 

mov 

al, 05 


%0001041e 

e81dccd21b 

call 

WIN32 LOAD STRING (%lbd3d040) 

%00010423 

83c418 

add 

esp, +18 


%00010426 

eble 

jmp 

%00010446 




%00010428 8b4508 
%0001042b e8d0fbf f f f 
%00010430 eb!4 


mov 

call 

jmp 


eax,dword ptr [ebp+08] 
main (%00010000) 
%00010446 


We notice that we trapped in an internal routine called LoadStrMsg and that we have called WinLoadString in the window procedure. Could 
these be related? 

We see from the PM Programming Reference that WinLoadString has 5 parameters. The right most is a pointer to a buffer and we see that 
the window procedure has pushed 0 on the stack this will surely cause WinLoadString to trap at some point. How do we make this 
supposition less circumstantial and more concrete? 

Clearly, for EBP to take us back to a call to WinDispatchMsg, without finding a stack frame from the window procedure implies that 
PMMERGE is using optimised code when the trap occurred. That is, the conventional use of EBP is not in place - and this does occur in 
many internal routines in PMMERGE, for performance reasons. If we scan back through the stack we notice the address %10423 occurring 
shortly before (in time) the call to LoadStrMsg. This address is the return address from the WinLoadString call in the window procedure. It 
would seem therefore that we have called that API with the bad parameter as suspected! 


Example 2 - A Hang in a PM Application 


Steps for analysing hangs in PM applications: 

• Determine whether there is a general hang in the PM environment, or a just in one application. If the latter then proceed with 
normal hang analysis. 

• Check whether the User_Sem is owned. If it is then this may be an indication of a problem. Determine the owner and their 
thread status. 

• Check pmqsyslock to see if the system queue is locked. If it is, then determine the owner of the lock and their thread status. 

• Check pmqfocus if neither of the preceding checks reveals anything informative. Determine the thread in focus and its status. 

• If pmqfocus is a shell thread, check fBadAppDialog. If it is non-zero then analyse the QHPSTRUCT at label qhpsbadapp. 

• If none of the preceding steps yields any results then check the shell processes. In particular pmqshell and pmqshell2. Most of 
the time these threads should be waiting for a message to arrive. Any other state should be transient. 

This example is of a hang in the Workplace caused by a PM application fault. 

First we check out whether the User_Sem is held, whether the system queue is locked and if necessary who has the focus. 


##db pmsemaphores+20 120 

9f 3f : 0000b4d4 50 4d 53 45 4d 00 00 00-00 00 00 
9f 3f : 0000b4e4 00 00 00 00 00 00 00 00-03 00 01 
##dd pmqsyslock 11 
9f 3f : 0000edl4 12d3128c 

##dd %12d3128c 

%12d3128c 12d31630 00000020 0000000a 12d31334 

12d31474 12d31334 12d31334 


00 00 00 00 
80 00 00 00 


PMSEM. 


00000000 0000001a 00000009 


0000a400 

00000012 


80030059 

00000001 


0097ec67 
12d3f f 5c 


00000048 00000089 
00000000 00000010 


00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 
00000000 00000000 8000016e 00000000 


%12d3129c 
%12d312ac 
%12d312bc 
%12d312cc 
%12d312dc 
%12d312ec 
%12d312fc 
##d 

%12d3130c 
%12d3131c 
%12d3132c 
%12d3133c 
%12d3134c 
%12d3135c 
%12d3136c 
%12d3137c 
## .p2e 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG 

002e 001a 0002 001a 0009 blk 0500 ab911000 ab9c9408 ab9bc6c0 ledO 12 
## . s 2e 
##.r 


0fe90000 

12d31228 

00000001 


00005453 00000325 00000000 
Obf f 0002 00000000 00000000 
0000002e 00000000 00000000 


00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 


Name 

turkey 


eax=80030059 ebx=00008000 ecx=00090000 edx=00000004 esi=ffffffff edi=12d3128c 



eip=lbd0c8el esp=00293ea8 ebp=00090000 iopl=2 — — — nv up ei pi zr na pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=12d3028c cr3=001d4000 

005b : Ibd0c8el 83c40c add esp,+0c 

##ln 

005b : Ibd0c78c pmmerge : PM32BIT : SleepPmq + 155 
005b : Ibd0c940 CalcWakeBits - 5f 


No one Owns the User_Sem since words at offsets +0x8 and +0xa are both zero. 


We see that the system queue is held by slot 2e, who happens to be blocked in PMMERGE which is waiting for message activity. We also 
notice that at MQ+44 there is a non-zero value, which indicates that this thread has called WinSendMsg and is waiting for a response. 

We investigate the WinSendMsg by examining the SMS pointed to by MQ+44 


##dd %12d3ff5c 


%12d3ff5c 
%12d3f f 6c 
%12d3ff7c 
%12d3ff8c 
%12d3f f 9c 
%12d3f fac 
%12d3f fbc 
%12d3f f cc 


00000000 

0097ec67 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 


12d3f f 5c 
12d3128c 
12d33168 
12d3f f 5c 
0092e954 
00000002 
00000000 
00000000 


00000000 
12d32cb4 
00000071 
12d3f f 5c 
12d3910c 
12d34 f ac 
12d3ff 90 
0092834a 


00000000 
00000000 
00250016 
00000000 
12d3ca34 
00000407 
12d3f f 5c 
12d3910c 


The target MQ for the sent message is at offset +18, i.e. %12d32cb4 


We find out who this is (the slot number is at MQ+a4). 


##dd %12d 
%12d32cb4 
%12d32cc4 
%12d32cd4 
%12d32ce4 
%12d32cf4 
%12d32d04 
%12d32dl4 
%12d32d24 


12d34 94 0 
12d32e9c 
04000400 
80030051 
00000000 
00000000 
00000000 
00000000 


00000020 

12d32d5c 

0000001a 

0093c378 

00000000 

00000000 

00000000 

00000000 


0000000a 

12d32d5c 

00000001 

00000000 

00000000 

00000000 

00000000 

8000006c 


12d32d5c 
04002f f f 
00000012 
00000000 
00000010 
00000000 
00000000 
00000000 


##d 

%12d32d34 
%12d32d44 
%12d32d54 
%12d32d64 
%12d32d74 
%12d32d84 
%12d32d94 
%12d32da4 
##.p 28 


0fe90000 

12d33304 

00000001 

00000000 

00000000 

00000000 

00000000 

00000000 


00005453 
Obf f 0000 
00000028 
00000000 
00000000 
00000000 
00000000 
00000000 


00000325 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 


00000000 
12d3f f 5c 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 


Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp 

0028 001a 0002 001a 0001 crt 0500 ab905000 ab9c9408 ab9bbaf0 lflO 


SG Name 
12 turkey 


Offset +a4 gives us the slot number which turns out to be another thread of the turkey application. The status of this thread is crt! This 
indicates that some other thread in the same process has entered critical section, furthermore slot 28 would be ready to run had it not been 
for the critical section thread. Clearly this is why our application has hung the PM messaging function. The real culprit is the user of Critical 
Section, who is it? 

The PTDA contains the address of the TCB in critical section. The TCB offset +0 contains the thread id followed by the slot number. 

##dd %ab9c9408+ptda_ptcbcritsec-ptda_start 11 

%ab9c96e8 ab9bc6c0 

##dd %ab9bc6c0 11 

%ab9bc6c0 002e0009 

##.p 2e 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

002e# 001a 0002 001a 0009 blk 0500 ab911000 ab9c9408 ab9bc6c0 ledO 12 turkey 


Our application has perpetrated one if not two faults: 

• First, we are using DosEnterCriticalSection in a PM application. This is a very heavy-handed way of serialising and likely to 
impact PM message processing, particularly if one of the other threads in the application holds the system queue lock. 

• Secondly and more seriously, the thread that has entered critical section has subsequently called an API. The consequences of 
this are unpredictable and can lead to a hang as illustrated. Furthermore, this would apply whether or not the application was 



running in a PM environment. 


How to Find the MQ of Any Thread 

This example illustates a basic technique for finding the MQ for a specific thread. 


We find the MQ for thread slot 8: 

##.p8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*0008# 0004 0001 0004 0001 blk 0500 ab596000 ab9c7020 ab988bf0 ledO 01 pmshell 
##dd %ab988bf 0 +74 

%ab988c64 00000000 00070000 00041304 12d2ca34 

%ab988c74 12d2ded8 00000000 00000000 00000000 

%ab988c84 00000000 00000000 00000000 00000000 

%ab988c94 00000000 00000000 00000000 00000000 

%ab988ca4 00000000 00000000 00000000 00000000 

%ab988cb4 00000000 00000000 00000000 00000000 

%ab988cc4 00000000 00000000 00000000 00000000 

%ab988cd4 00000000 00000000 00000000 00000000 


The TCB address is found from the .P output. 

Offset +0x74 into the TCB is the saved thread local memory area. 

Offset +0x08 into the TLMA are the AAB registers. 

The first is the last PM error to occur on this thread. In this case severity 4 error code 1304. 

The next double-word is the PMQ. 

We can verify this by displaying it and checking the offset +0a4 is the same thread slot number. 

Notes: 


After fix-pack 7 the TCB in WARP is extended by 4 bytes. The TLMA begins at TCB+0x78. 

Since AAB is allocated using DosAllocThreadLocalMemory its location in the TLMA is depended how many TLMA allocations 
are made prior to PM initialising in the thread. In practice this is normally found at TLMA offset +0x8, but if the AAB is displaced it 
can usually be located by searching the TLMA for the MQ address which is normally in the range 12000000 to 14000000. 


##dd %12d 
%12d2ca34 
%12d2ca44 
%12d2ca54 
%12d2ca64 
%12d2ca74 
%12d2ca84 
%12d2ca94 
%12d2caa4 
##d 

%12d2cab4 
%12d2cac4 
%12d2cad4 
%12d2cae4 
%12d2caf 4 
%12d2cb04 
%12d2cbl4 
%12d2cb24 


a34 

00000000 

12d2d75c 

80008000 

80030038 

00000001 

12d2c974 

00000000 

00000000 

00000000 

12d2c910 

00000001 

00000004 

00000000 

00010001 

00000000 

00000004 


00000020 

12d2cd3c 

00000004 

0032bd01 

00000000 

00000000 

00000000 

00000000 

00005453 
Obf f 0c02 
00000008 
00000128 
00000000 
00000128 
00000000 
00000128 


00000064 

12d2cd3c 

00000001 

OOOOOOce 

00000000 

00000000 

00000000 

80000006 

0000024f 

00000000 

80000007 

0000dc92 

80000007 

0001168e 

80000007 

0001168e 


12d2cadc 
80002f f f 
00000001 
00000050 
00000010 
00000000 
00000000 
00000006 

00000000 

00000000 

00002f43 

00010000 

00002f43 

00010000 

00002f43 

00010000 


How to Find the MQ of a BadApp Application 



This example illustrates how to find the MQ of the application that causes the BadApp dialog to appear. 

As discussed in Application Not Responding to Messages Logic pmqsyslock, pmqfocus and the User_Sem PM semaphore owner will be 
reset when the BadApp dialog is displayed. 

To find the MQ of the bad application under these circumstances we look at the Query Hung Process Structure (QHPSTRCUT). 


##db fbadappdialog 11 
9f3f :0000035c 01 


##dd pmqsyslock 11 
9f 3f : 0000edl4 00000000 

##dd pmqfocus 11 
9f 3f : OOOOeOf c 12d2b0f0 
##dd %12d2b0f 0 


%12d2b0f 0 
%12d2bl00 
%12d2bll0 
%12d2bl2 0 
%12d2bl30 
%12d2bl40 
%12d2bl50 
%12d2bl60 
##d 

%12d2bl70 

%12d2bl80 

%12d2bl90 

%12d2bla0 

%12d2blb0 

%12d2blc0 

%12d2bld0 

%12d2ble0 


12d2b344 

12d2b2d8 

00010001 

8003004a 

00000001 

00000000 

00000000 

00000000 

lOffOOOO 

12d2b08c 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 


00000020 
12d2bl 98 
00000004 
0032e98f 
00000000 
00000000 
00000000 
00000000 

00005453 
Obf f 0002 
00000018 
00000000 
00000000 
00000000 
00000000 
00000000 


0000000a 12d2bl98 
12d2bl 98 00002f f f 
OOOOOOOf 00000001 
00000021 00000157 
00000000 00000000 
00000000 00000000 
00000000 00000000 
80000021 00000000 

0000024f 00000000 
00000000 00000000 
00000000 00000000 
00000000 00000000 
00000000 00000000 
00000000 00000000 
00000000 00000000 
00000000 00000000 


##.p 18 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp 

0018 0004 0001 0004 OOOf blk 0500 ab5b6000 ab9c7020 ab98ab70 ledO 


SG Name 
01 pmshell 


fbadappdialog is non-zero, which indicates that the BadApp dialog has been displayed. 

pmqsyslock is not owned. 


pmqfocus points to a shell thread, in fact the BadApp dialog thread. 

So we look at qhpsbadapp 

##dw qhpsbadapp 14 

9f3f : 0000e490 0002 OOOe 0008 0016 

##.p 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe38000 

f fe3aa04 

f fe3a80c 

leb4 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

ab58a000 

f fe3aa04 

ab988020 

If 3c 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

ab58c000 

f fe3aa04 

ab988218 

lf50 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

081f 

ab58e000 

f fe3aa04 

ab988410 

If 48 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

ab590000 

f fe3aa04 

ab 9 8 8 6 0 8 

lf20 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

ab592000 

f fe3aa04 

ab988800 

If 3c 

00 

*asyncr 

*0008# 

0004 

0001 

0004 

0001 

blk 

0500 

ab596000 

ab9c7020 

ab988bf 0 

ledO 

01 

pmshell 

000a 

0004 

0001 

0004 

0002 

blk 

0800 

ab59a000 

ab9c7020 

ab988fe0 

led4 

01 

pmshell 

000b 

0004 

0001 

0004 

0003 

blk 

0800 

ab59c000 

ab9c7020 

ab9891d8 

lea8 

01 

pmshell 

000c 

0004 

0001 

0004 

0004 

blk 

0800 

ab59e000 

ab9c7020 

ab9893d0 

lea8 

01 

pmshell 

OOOd 

0004 

0001 

0004 

0005 

blk 

0800 

ab5a0000 

ab9c7020 

ab9895c8 

lebO 

01 

pmshell 

0010 

0004 

0001 

0004 

0006 

blk 

0200 

ab5a6000 

ab9c7020 

ab989bb0 

ledc 

01 

pmshell 

0011 

0004 

0001 

0004 

0007 

blk 

0200 

ab5a8000 

ab9c7020 

ab989da8 

ledc 

01 

pmshell 

0012 

0004 

0001 

0004 

0008 

blk 

0200 

ab5aa000 

ab9c7020 

ab989fa0 

leb8 

01 

pmshell 

0007 

0004 

0001 

0004 

0009 

blk 

0200 

ab594000 

ab9c7020 

ab 9 8 8 9 f 8 

lea8 

01 

pmshell 

0013 

0004 

0001 

0004 

000a 

blk 

0800 

ab5ac000 

ab9c7020 

ab98al98 

leb8 

01 

pmshell 

0014 

0004 

0001 

0004 

000b 

blk 

0800 

ab5ae000 

ab9c7020 

ab98a390 

leb8 

01 

pmshell 

0015 

0004 

0001 

0004 

000c 

blk 

0800 

ab5b0000 

ab9c7020 

ab98a588 

leb8 

01 

pmshell 

0016 

0004 

0001 

0004 

OOOd 

blk 

0804 

ab5b2000 

ab9c7020 

ab98a780 

lea8 

01 

pmshell 

0017 

0004 

0001 

0004 

OOOe 

blk 

0804 

ab5b4000 

ab9c7020 

ab98a97 8 

lebO 

01 

pmshell 

0018 

0004 

0001 

0004 

OOOf 

blk 

0500 

ab5b6000 

ab9c7020 

ab98ab70 

lea8 

01 

pmshell 

001a 

0004 

0001 

0004 

0010 

blk 

0200 

ab5ba000 

ab9c7020 

ab98af 60 

ledO 

01 

pmshell 

0009 

0005 

0004 

0005 

0001 

blk 

0800 

ab5 98000 

ab9c761c 

ab988de8 

leb4 

00 

harderr 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

OOOe 

0005 

0004 

0005 

0002 

blk 

0800 

ab5a2000 

ab9c761c 

ab9897c0 

lebc 

00 

harderr 

OOOf 

0005 

0004 

0005 

0003 

blk 

0800 

ab5a4000 

ab9c761c 

ab9899b8 

leb8 

00 

harderr 


0019 

0007 

0004 

0007 

0001 

blk 

0500 

ab5b8000 

ab9c8214 

ab98ad68 

ledO 

11 

pmshell 

001c 

0007 

0004 

0007 

0002 

blk 

0800 

ab5be000 

ab9c8214 

ab98b350 

ledc 

11 

pmshell 

OOld 

0007 

0004 

0007 

0003 

blk 

080a 

ab5c0000 

ab9c8214 

ab98b548 

ledc 

11 

pmshell 

OOle 

0007 

0004 

0007 

0004 

blk 

0800 

ab5c2000 

ab9c8214 

ab98b740 

ledO 

11 

pmshell 

0020 

0007 

0004 

0007 

0005 

blk 

0800 

ab5c6000 

ab9c8214 

ab98bb30 

ledc 

11 

pmshell 

0021 

0007 

0004 

0007 

0006 

blk 

0200 

ab5c8000 

ab9c8214 

ab98bd28 

ledc 

11 

pmshell 

0025 

0007 

0004 

0007 

0007 

blk 

0200 

ab5d0000 

ab9c8214 

ab98c508 

ledO 

11 

pmshell 

0026 

0007 

0004 

0007 

0008 

blk 

0200 

ab5d2000 

ab9c8214 

ab98c700 

ledc 

11 

pmshell 

0027 

0007 

0004 

0007 

0009 

blk 

0200 

ab5d4000 

ab9c8214 

ab 9 8 c 8 f 8 

ledc 

11 

pmshell 

0029 

0007 

0004 

0007 

000b 

blk 

0300 

ab5d8000 

ab9c8214 

ab98cce8 

ledO 

11 

pmshell 

002a 

0007 

0004 

0007 

000c 

blk 

021f 

ab5da000 

ab9c8214 

ab98cee0 

leac 

11 

pmshell 

002b 

0007 

0004 

0007 

OOOd 

blk 

0200 

ab5dc000 

ab9c8214 

ab98d0d8 

leb8 

11 

pmshell 

002f 

0007 

0004 

0007 

OOOe 

blk 

0800 

ab5e4000 

ab9c8214 

ab98d8b8 

ledO 

11 

pmshell 

001b 

0006 

0004 

0006 

0001 

blk 

0200 

ab5bc000 

ab9c7cl8 

ab98bl58 

lfOO 

10 

pmspool 

OOlf 

0006 

0004 

0006 

0002 

blk 

0200 

ab5c4000 

ab9c7cl8 

ab98b938 

ledc 

10 

pmspool 

0022 

0006 

0004 

0006 

0003 

blk 

0200 

ab5ca000 

ab9c7cl8 

ab98bf20 

le6c 

10 

pmspool 

0023 

0006 

0004 

0006 

0004 

blk 

0200 

ab5cc000 

ab9c7cl8 

ab98cll8 

ledc 

10 

pmspool 

0024 

0006 

0004 

0006 

0005 

blk 

0200 

ab5ce000 

ab9c7cl8 

ab98c310 

ledc 

10 

pmspool 

0028 

0008 

0004 

0008 

0001 

blk 

0200 

ab5d6000 

ab9c8810 

ab98caf 0 

ledO 

12 

cometrun 

002c 

0008 

0004 

0008 

0002 

blk 

0801 

ab5de000 

ab9c8810 

ab98d2d0 

ledc 

12 

cometrun 

002d 

0009 

0004 

0009 

0001 

blk 

0200 

ab5e0000 

ab9c8e0c 

ab98d4c8 

ledO 

13 

fpwmon 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

002e 

000b 

0004 

000b 

0001 

blk 

0400 

ab5e2000 

ab9c9408 

ab98d6c0 

leb8 

15 

cmd 

0030 

OOOe 

0004 

OOOe 

0001 

blk 

0200 

ab5e6000 

ab9c9a04 

ab98dab0 

ledO 

16 

turkey 

0034 

OOOe 

0004 

OOOe 

0002 

blk 

0200 

ab5ee000 

ab9c9a04 

ab98e2 90 

ledO 

16 

turkey 

0038 

OOOe 

0004 

OOOe 

0003 

blk 

0200 

ab5f 6000 

ab9c9a04 

ab98ea70 

ledO 

16 

turkey 

0037 

OOOe 

0004 

OOOe 

0004 

blk 

0200 

ab5f 4000 

ab9c9a04 

ab98e878 

ledO 

16 

turkey 

0031 

OOOe 

0004 

OOOe 

0005 

blk 

0200 

ab5e8000 

ab9c9a04 

ab98dca8 

ledO 

16 

turkey 

0032 

OOOe 

0004 

OOOe 

0006 

blk 

0200 

ab5ea000 

ab9c9a04 

ab98dea0 

ledO 

16 

turkey 

0033 

OOOe 

0004 

OOOe 

0007 

blk 

0200 

ab5ec000 

ab9c9a04 

ab98e098 

ledO 

16 

turkey 

0035 

OOOe 

0004 

OOOe 

0008 

crt 

0500 

ab5f 0000 

ab9c9a04 

ab98e488 

lflO 

16 

turkey 

0036 

OOOe 

0004 

OOOe 

0009 

blk 

0500 

ab5f2000 

ab9c9a04 

ab98e680 

ledO 

16 

turkey 

0039 

OOOe 

0004 

OOOe 

000a 

blk 

0200 

ab5f 8000 

ab9c9a04 

ab98ec68 

ledO 

16 

turkey 

003a 

OOOe 

0004 

OOOe 

000b 

blk 

0200 

ab5fa000 

ab9c9a04 

ab98ee60 

ledO 

16 

turkey 

003b 

OOOe 

0004 

OOOe 

000c 

blk 

0200 

ab5f cOOO 

ab9c9a04 

ab 9 8 f 0 5 8 

ledO 

16 

turkey 

003c 

OOOe 

0004 

OOOe 

OOOd 

blk 

0200 

ab5fe000 

ab9c9a04 

ab98f 250 

ledO 

16 

turkey 

003d 

OOOe 

0004 

OOOe 

OOOe 

blk 

0200 

ab 6 0 0 0 0 0 

ab9c9a04 

ab98f 448 

ledO 

16 

turkey 

003e 

OOOe 

0004 

OOOe 

OOOf 

blk 

0200 

ab 6 0 2 0 0 0 

ab9c9a04 

ab98f 640 

ledO 

16 

turkey 


The QHPSTRUCT shows Tid 2, Pid e, flags 6 and SGID 16 


.P shows this to be slot 34. 


If we use the technique described in How to find the MQ of any thread we will find the MQ for the bad application. 


Finding Application and System Queue Elements 


This example shows how to find the queue element on both the system queue and an application queue. 

A similar technique applies to both types of queue. The system queue header is located from the address at psysqueue. Location of 
application queue headers has been discussed in How to find the MQ of any thread. 

The queue header contains the current read and write pointers, the queue element length and number of elements queued. 

We illustrate this with the system queue in the following example: 


##dd psysqueue 11 
deff :00000000 lbdfO 
##dd %lbdfOacO 
%lbdf OacO 00000000 


%lbdf OadO 
%lbdf OaeO 
%lbdf Oaf 0 
%lbdf ObOO 
%lbdf OblO 
%lbdf 0b20 
%lbdf 0b30 


lbdf 18f 4 
00070007 
00342420 
00700040 
1C000034 
00000071 
Ic0a9c00 


acO 

0030001e 
lbdf 1840 
00000072 
Ic0a9c00 
015c0000 
00401c0a 
00cl015c 
01040040 


##dw %lbdf 1840 


00000078 
IbdfOfdO 
00510196 
01040040 
OOOOOOcl 
53c00104 
000082fe 
003353f f 


lbdf 0ae4 
00060000 
000002fe 
00335362 
26cf 0000 
00000033 
003426cf 
00700040 


%lbdf 1840 
%lbdf 1850 
%lbdf 1860 
%lbdf 1870 
%lbdf 1880 
%lbdf 1890 
%lbdf 18a0 
%lbdf 18b0 
## 


0070 

0000 

8e00 

0e7 f 

0000 

0134 

IcOa 

0040 

0134 

0050 

0040 

0104 

0052 

0000 

0104 

5268 


0134 0050 
0040 0104 
0050 82 fe 
0104 51cc 
02 fe 0000 
522a 0033 
0000 22c8 
0033 0000 


0000 0000 
50f 1 0033 
0000 172f 

0033 0000 
180a 0034 
0040 0070 

0034 IcOO 
0071 0000 


1616 

0034 

0040 

0071 

0034 

IcOO 

0072 

0000 

9c00 

IcOa 

0000 

019f 

IcOa 

0040 

019f 

0052 


MQ+0x4 tells us 0x30 elements are queued, of length 0x1 e bytes each. 

MQ+0x14 is the current read pointer. 

Displaying the queue from the current read pointer we can read off the first few message IDs since they are located at +0x0 of each entry: 
70, 71 , 72, and so on. 

In an application queue the element length is 0x20. 


PM Worked Examples Under OS/2 2.x 


Dealing with PM application problems under OS/2 2.x is similar to WARP. The principle difference being that the messaging and windowing 
function in PM is provided by the 16-bit DLL, PMWIN.DLL. 

Most of the message structures are analogous to those of PMMERGE.DLL, their layouts are similar. 

Linder PMWIN.DLL most pointers are either offsets from a predefined segments or selectors. Thus where there are double-word pointers in 
PMMERGE.DLL structures, there are word length fields in PMWIN.DLL. 

The following three symbol files are required for debugging PM applications problems under OS/2 2.x: 

• PMWIN.SYM 

• PMGRE.SYM 

• PMSHAPI.SYM 


A selection of useful symbols in the OS/2 2.x PM environment, with their equivalent OS/2 3.0 is listed below: 


OS/2 3.0 
pmqlist 

pmqsyslock 

pmqfocus 

pmqshell 

pmqshell2 

pwndfocus 

fBadAppDialog 

qhpsBadApp 


OS/2 2.x 

smqlist 

smqsyslock 

smqfocus 

smqshell 

smqshell2 

pwndfocus 

fBadAppDialog 

qhpsBadApp 


Another significant difference between the two environments is in the calling conventions: 

• PMMERGE APIs use the 32-bit C calling convention 

• PMWIN APIs use the 1 6-bit Pascal calling convention 


In effect this means that parameters on stacks, and in some control blocks, are stored in reverse order. 
There are four symbols that do not have equivalents in PMMERGE, these are: 



winsel 


The selector for the AAB regs segment for a process, 
seisms The selector for the SMS segment, 

vphheapwnd The table of WND heap pointers. 

fsrsuser The PM FastSafe RAMSEM, which is equivalent to the User_Sem PM Semaphore of 

PMMERGE. 

We now run through a brief sequence of examples that illustrate: 

Finding an MQ and AAB registers 
Finding an SMS from an MQ 
Finding the WND from an FIWND 
Finding a BadApp process an MQ 
Finding the System Queue 


Finding an MQ and AAB Registers 


ft ft . s 8 
ftft.p 8 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp 

*0008# 0006 0001 0006 0001 blk 0500 7b936000 7bb460d0 7bb28a58 leb8 
##dw winsel 11 
fdl7 : 00000032 003f 


##dd 3f : 0 
003f: 00000000 
003f: 00000010 
003f : 00000020 
003f: 00000030 
003f : 00000040 
003f: 00000050 
003f: 00000060 
003f : 00000070 
##d 

003f: 00000080 
003f : 00000090 
003f : OOOOOOaO 
003f : OOOOOObO 
003f : OOOOOOcO 
003f : OOOOOOdO 
003f : OOOOOOeO 
003f:000000f0 
##dd ebe7 : 0 
ebe7 : 00000000 
ebe7 : 00000010 
ebe7 : 00000020 
ebe7 : 00000030 
ebe7 : 00000040 
ebe7 : 00000050 
ebe7 : 00000060 
ebe7 : 00000070 


00000000 

00081037 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00081001 

00000000 

00000000 

OOlaOOOO 
80002f f f 
bf 5108b3 
00000000 
00000000 
00000000 
00000010 
1802ec6f 


00000000 

0000ebe7 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 
0000e92f 
OOOOf 827 
0000e957 
0000e94f 
0000f81f 
00000000 
0000e947 

00640000 
80018001 
02252549 
00000004 
00000000 
00000000 
54530000 
OOOOObf f 


00000000 
f f 3f 0000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 

00000000 
00000000 
00000000 
00000000 
00000000 
e8f f 0000 
00000000 
00000000 

0aaa0082 

00010006 

016a0000 

00000000 

00000000 

09d70000 

0000022a 

00010000 


00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

00000000 

06e806e8 

06d60001 

00010000 

00000000 

00000000 

000023cc 

018c0000 

00080000 


##dw ebe7 : 0 


ebe7 : 00000000 

0000 

001a 

0000 

0064 

0082 

Oaaa 

06e8 

06e8 

ebe7 : 00000010 

2fff 

8000 

8001 

8001 

0006 

0001 

0001 

06d6 

ebe7 : 00000020 

08b3 

bf 51 

2549 

0225 

0000 

016a 

0000 

0001 

ebe7 : 00000030 

0000 

0000 

0004 

0000 

0000 

0000 

0000 

0000 

ebe7 : 00000040 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ebe7 : 00000050 

0000 

0000 

0000 

0000 

0000 

0 9d7 

23cc 

0000 

ebe7 : 00000060 

0010 

0000 

0000 

5453 

022a 

0000 

0000 

018c 

ebe7 : 00000070 

ec6f 

1802 

Obff 

0000 

0000 

0001 

0000 

0008 


SG Name 
01 pmshell 


WinSel gives the AAB segment selector. 


Note: 


WinSel is allocated in instance data, so must be viewed from a thread slot of the process in question. 

Each entry is 0x10 bytes, one for each thread of the process. 

The first entry is reserved. 

The first double word of each entry is the past PM error for that thread and the second double word contains the selector for the MQ of that 
thread. 

The key fields of interest in the MQ are: 


Offset 

Description 

+0x0 

chain pointer 

+0x2 

Queue element length 

+0x4 

number of elements queued 

+0x6 

Queue depth 

+0x8 

Top of queue 

+0xa 

Bottom of queue 

+0xc 

Current read pointer 

+0xe 

Current write pointer 

+18 

Pid 

+1a 

Tid 

+1c 

SGID 

+30 

SMS on which we are waiting a response 

+32 

SMS currently dispatched to our window procedure 

+78 

SMS at head of received list 

+7e 

thread slot id 


Finding an SMS From an MQ 


##dw smqsyslock 11 
fd9f : 000003d4 e55f 
##dw e55f:0 


e55f : 00000000 

e567 

001a 

0000 

000a 

0082 

0186 

0082 

0082 

e55f : 00000010 

a400 

0006 

0006 

0006 

003d 

0009 

OOle 

072a 

e55f : 00000020 

08b3 

db25 

2549 

OOf 5 

0000 

005d 

0000 

0001 

e55f : 00000030 

0094 

0000 

0010 

0000 

0000 

0000 

0000 

0000 

e55f : 00000040 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e55f : 00000050 

0000 

0000 

0000 

0000 

0000 

0000 

4d24 

0000 

e55f : 00000060 

0000 

0000 

ec37 

5453 

061c 

0000 

0000 

6c4c 

e55f : 00000070 

ec6f 

0002 

Obff 

0000 

0000 

0001 

0000 

0048 


##.s 48 
##.p 48 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0048# 003d 0006 003d 0009 blk 0500 7b9b6000 7bb51cc4 7bb2f758 leb8 le turkey 
##dw seisms 11 
fd9f : 00001c2a ec5f 



##dw ec5f : 94 

ec5f : 00000094 

0000 

0094 

0000 

0000 

db25 

2549 

e55f 

e557 

ec5f : 000000a4 

0000 

0000 

0020 

0000 

0000 

0023 

002b 

0071 

ec5f : 000000b4 

6d2c 

ec6f 

0001 

0024 

0000 

0000 

3ae8 

253a 

ec5f : 000000c4 

e8df 

ebe7 

0000 

0000 

0002 

lb7 0 

0410 

0005 

ec5f : 000000d4 

0000 

0051 

156c 

ec6f 

0001 

0038 

01a8 

0008 

ec5f : 000000e4 

003c 

003c 

0082 

0172 

0000 

0000 

712c 

lecO 

ec5f : OOOOOOf 4 

0172 

0082 

003c 

003c 

0172 

0082 

Olae 

OObe 

ec5f : 00000104 

0000 

0000 

0000 

0000 

0002 

0045 

0003 

0000 

##dw e557 : 0 

e557 : 00000000 

e55f 

001a 

0000 

000a 

0082 

0186 

0082 

0082 

e557 : 00000010 

2fff 

0400 

0400 

0400 

003d 

000a 

OOle 

072e 

e557 : 00000020 

08b3 

98f 9 

2529 

0000 

0000 

0000 

0000 

0000 

e557 : 00000030 

0000 

0000 

0010 

0000 

0000 

0000 

0000 

0000 

e557 : 00000040 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

e557 : 00000050 

0000 

0000 

0000 

0000 

0000 

0000 

4dc0 

0000 

e557 : 00000060 

0000 

0000 

ec37 

5453 

061c 

0000 

0000 

6ce0 

e557 : 00000070 

ec6f 

0002 

Obff 

0000 

0094 

0001 

0000 

0049 


The thread with the system queue locked is waiting for a response to WinSendMsg. MQ+0x30 has the sent SMS offset. 
The SMS selector is found from seisms. 

The key fields in the SMS are: 


Offset 

Description 

+0x0 

Chain pointer offset 

+0xc 

Sending MQ selector 

+0xe 

Receiving MQ selector 

+0x1 a 

Message Parameter 2 

+0x1 c 

Message Parameter 1 

+0x1 e 

Message Id 

+0x20 

Offset to WND 

+0x22 

Selector to WND 


In this example the message has been sent to slot 49. 

We see that the message has yet to be dispatched since it is still queued on the receive list (MQ+0x78). 


Finding a WND From an FIWND 


##dw hwnddesktop 12 
fd9f :0000053a 013c 0020 

##dw vphheapwnd 12 
fd9f : 00001610 OOae ec6f 


##dw ec6f:ae 


ec6f : OOOOOOae 

0000 

ec6f 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f : OOOOOObe 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f : OOOOOOce 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f : OOOOOOde 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f : OOOOOOee 

0000 

0000 

0044 

0000 

0000 

0000 

0000 

7098 

ec6f : OOOOOOfe 

ec6f 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f : OOOOOlOe 

0000 

0000 

0000 

If fc 

0000 

ebe7 

0010 

1 65e 

ec6f : OOOOOlle 

fd2f 

0065 

lfad 

0000 

0000 

0000 

0000 

0000 



##dw ec6f:13c 
ec6f :0000013c 

0000 

0000 

0000 

0000 

1250 

ec6f 

0000 

0000 

ec6f :0000014c 

0000 

0000 

0400 

0300 

0004 

0000 

aOOO 

0000 

ec6f :0000015c 

lfd8 

0000 

ebe7 

0020 

3a24 

fd4f 

0065 

lfad 

ec6f : 0000016c 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

ec6f :0000017c 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0048 

ec6f :0000018c 

0354 

ec6f 

OOf 4 

ec6f 

0000 

0000 

0000 

0000 

ec6f :0000019c 

0000 

0000 

0000 

0000 

0000 

0000 

8000 

0000 

ec6f : OOOOOlac 

le4c 

0000 

ebe7 

0030 

ld4 2 

fd2f 

0065 

lfad 


In this example we find the WND for the desktop from the HWND which is stored at hwnddesktop. 

The HWND comprises an offset concatenated with an identifier, the low order nibble of which is a heap index. Thus, for the desktop: 

##dw hwnddesktop 12 
fd9f :0000053a 013c 0020 


offset . . 

id 

index . . . 


vphheapwnd points to a table of heaps. Each entry is a far pointer and there are at most 16. The index nibble of the HWND is used to 
select the heap pointer. In this example there is just one entry: ec6f :0000 

We use the offset from the HWND with the heap selector to get the PWND. In this case ec6f:13c. 

The key fields of interest in the WND are: 


Offset 

Description 

+0x0 

Next Sibling WND far pointer 

+0x4 

Parent WND far pointer 

+0x8 

Child WND far pointer 

+0xc 

Owner WND far pointer 

+0x24 

MQ selector that services this window 

+0x26 

ID and Index portion of the HWND for this WND. 

+0x28 

1 6-bit far pointer to the Window Procedure. 

+0x2c 

32-bit pointer to the Window Procedure. 


Finding a BadApp Process and MQ 


##db fbadappdialog 11 
%lf 8d07ae 01 


##dw qhpsbadapp 
%lf 8dl6b8 0002 

003d 

000a 

OOle 

000c 

0000 

0000 

0000 

%lf 8dl6c8 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl6d8 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl6e8 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl6f 8 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl708 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl718 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

%lf 8dl728 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 



The fields of the QHPSTRUCT are in a different order to the PMMERGE version: 


Offset 

Description 

+0x0 

Flags 

+0x2 

Pid 

+0x4 

Tid 

+0x6 

SGID 


Finding the System Queue 


##dw mqhsysqueue 
fd87 : 00000000 0000 

001c 

001a 

0078 

0ad6 

17 f 6 

0ee2 

llba 

f d87 : 00000010 

0000 

0006 

0007 

0007 

0000 

0001 

0001 

ebe7 

fd87 : 00000020 

0 6d6 

0008 

0ba5 

0000 

0000 

e55f 

072a 

0048 

fd87 : 00000030 

OOOf 

000b 

0002 

0000 

0300 

0000 

0000 

0000 

f d87 : 00000040 

0000 

f f fe 

ee6f 

2549 

0000 

0000 

0000 

0588 

f d87 : 00000050 

0339 

032c 

OOac 

OObc 

OOcc 

OOdc 

OOec 

OOf c 

fd87 : 00000060 

010c 

012c 

011c 

013c 

014c 

015c 

0000 

0000 

f d87 : 00000070 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

##dw ee2 
f d87 : 00000ee2 

0072 

OOf 5 

005d 

02 fe 

0000 

dbc2 

2549 

8000 

f d87 : OOOOOef 2 

0000 

8000 

0000 

9150 

08a8 

08a8 

0070 

0032 

f d87 : OOOOOf 02 

OOec 

0000 

0000 

dfaa 

2549 

0000 

c3b7 

fff 6 

f d87 : OOOOOf 12 

2002 

0000 

0012 

08a8 

0071 

0032 

OOec 

83fe 

f d87 : OOOOOf 22 

0000 

e007 

2549 

fff 6 

2002 

0000 

0012 

08a8 

f d87 : OOOOOf 32 

e007 

08a8 

0072 

0032 

OOec 

03fe 

0000 

e065 

f d87 : OOOOOf 42 

2549 

2006 

0000 

0016 

0000 

2006 

08a8 

08a8 

f d87 : OOOOOf 52 

0071 

0032 

OOec 

82 fe 

0000 

e0c3 

2549 

0000 


mhsysqueue points directly at the system queue. 

The queue pointers are offsets from the same segment as the MQ. 

The current read pointer at +0x0e, is 0x0ee2. 

The queue entry length at +0x02, is 0x001 c. 

Displaying the queue from the read pointer shows the first few elements queued are for message IDs, 72, 70, 71 , 72 and so on. 
Each entry on the system queue is a SQMSG. The key fields are: 


Offset 

Description 

+0x0 

Message ID 

+0x2 

Message Parameter 1 

+0x6 

Message Parameter 2 


For an application queue, the entries are QMSG structures, the key fields of these are: 


Offset 

Description 

+0x0 

HWND 

+0x4 

Message Id 

+0x8 

Message Parameter 1 


+0xc 


Message Parameter 2 



Dump Analysis of Loops in Ring 0 Code 


Ring zero loops can sometimes be successfully analysed from a dump. The trick is knowing how to locate the register set at the time the 
dump was taken. 

The Dump Formatter only implements the .R command, which obtains the registers from a stack frame on the thread's ring 0 stack. Under 
the kernel Debugger there is no problem: the R command will display the current system registers. 

Note: 


If a thread never runs in User Mode, such as the internal PID 0 threads then a stack frame is never built and .R will be unsuccessful 
in formatting the registers. 


Fortunately there is a way of obtaining the current registers: 

When a dump is initiated using Ctrl-Alt-Numlock-Numlock a keyboard interrupt is initiated by the processor hardware. 

Via the IDT control passes to the interrupt router who is responsible for switching to the interrupt stack before passing control to 
the appropriate interrupt handler. 

The interrupt router checks to see if the system is already running from the interrupt stack. 

If it isn't then an interrupt stack frame is built on the current stack and the stack frame pointer is saved in fpoldstack. 
Then the SS selector is switched to the interrupt stack selector (E8). 

If it is then a nested interrupt has occurred and the interrupt stack frame is built on the interrupt stack itself. 

It is from fpoldstack that we are able to obtain the registers before any interrupt occurred. The following debug log illustrates this and many 
of the techniques previously discussed. 


Ring 0 Loop Dump Analysis Example 


This example finds a loop in a file system driver from a system dump. For reference, we note the format of the interrupt stack frame as 
pointed to by fpoldstack as follows: 


+0x0 

Current interrupt level when prior to interrupt. 

+0x4 

GS 

+0x8 

FS 

+0xc 

ES 

+0x10 

DS 

+0x14 

EDI 

+0x18 

ESI 

+0x1 c 

EBP 

+0x20 

padesp 

+0x24 

EBX 

+0x28 

EDX 

+0x2c 

ECX 



+0x30 

EAX 

+0x34 

pad 

+0x3c 

EIP 

+0x40 

CS 

+0x44 

EFLAG 

+0x48 

ESP 

+0x4c 

SS 

+0x4c 

SS 


>>Who's the current thread? 

# .p* 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*00a3# 006c 000a 006c 0001 run 0200 7b720000 7bb025c0 7ba8f9e0 0894 25 FRNOLBMG 

>>Probably a loop of some kind, could be a hot I/O or even dispatcher 
bug (unlikely) . 

>> Where are we? 

# . r 

eax=001fe624 ebx=00002022 ecx=00000029 edx=00000007 esi=00000000 edi=0003e77c 
eip=00000179 esp=0003e624 ebp=0003e68c iopl=2 — — — nv up ei pi nz na po nc 
cs=d02 f ss=001f ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001bb000 

d02f : 00000179 66ea4102021a5b00 jmp 005b : la02024 1 

# .m 

*har par cpg va fig next prev link hash hob hal 

OObl %feel3f40 00000010 %la050000 3d9 OObO 00b2 0000 0000 OObd 0000 hco=02c2c 

hob har hobnxt figs own hmte sown,cnt It st xf 

OObd OObl 0000 0838 OObb OObb 0000 00 00 00 00 shared c : doscalll . dll 
hco=2c2c pco=ffe71cf7 hconext=02c20 hptda=18c9 f=lc pid=00bc c:cmd.exe 

>> We are in DOSCALL1 . Let's see what function was called. 


# dw s s : bp 


OOlf :0000e68c 

e6bc 

0003 

ae60 

la02 

e77c 

0003 

e728 

0003 

OOlf :0000e69c 

e70c 

0003 

0000 

0000 

0000 

0000 

0010 

0000 

OOlf :0000e6ac 

2022 

0000 

0000 

0000 

28a4 

111b 

e697 

0003 

OOlf :0000e6bc 

e740 

0003 

4a6d 

1113 

e77c 

0003 

e728 

0003 

OOlf : 0000e6cc 

e70c 

0003 

0000 

0000 

0000 

0000 

0010 

0000 

OOlf :0000e6dc 

2022 

0000 

0000 

0000 

0010 

0000 

abl8 

1111 

OOlf :0000e6ec 

e77c 

0003 

0002 

0000 

0000 

0000 

0000 

0000 

OOlf :0000e6fc 

0001 

0000 

0007 

0000 

0000 

0000 

0180 

0000 


# in %11134a6d 
No Symbols Found 

# .m %11134a6d 


*har par cpg va fig next prev 

0e82 %fee26f36 00000030 %11110000 3d9 09af 09fl 

hob har hobnxt figs own hmte sown,cnt It st 

15bl 0e82 0000 0838 08fe 08fe 0000 00 00 00 

hco=2cl7 pco=ffe71c8e hconext=02de0 hptda=1938 


link hash hob hal 

0000 0000 15bl 0000 hco=02cl7 

xf 

00 shared c : f rnococl . dll 

f=lc pid=00bb c:frnosa.exe 


# . lmo 8fe 

hmte=08fe pmte=%fdef 0c68 mf lags=44 98bl86 
obj vsize vbase flags ipagemap 

0001 00026ee8 11110000 80002025 00000001 

0002 OOOOOOlf 11180000 80001025 00000028 

0003 00000030 11190000 80002025 00000029 

0004 00000008 lllaOOOO 80001003 0000002a 

0005 00004e74 lllbOOOO 80002003 0000002a 


c : \f rnvlr 0\dll\ f rnococl . dll 
cpagemap hob sel 

00000027 15bl 888f r-x shr big 

00000001 Ocaf 88c7 r-x shr alias 

00000001 15a4 88cf r-x shr big 

00000000 0000 88d7 rw- alias 

00000005 0000 88df rw- big 


# u %11134a6d-10%11134a5d 085657 
%11134a60 6a00 push +00 


or 


byte ptr [esi+57],dl 



11134a62 

51 

push 

ecx 



11134a63 

8b4dac 

mov 

ecx, dword 

ptr 

[ebp-54 ] 

11134a66 

52 

push 

edx 



11134a67 

51 

push 

ecx 



11134a68 

e8af 63ef 08 

call 

%la02aelc 



11134a6d 

8bc8 

mov 

ecx, eax 



11134a6f 

8b45ac 

mov 

eax, dword 

ptr 

[ebp-54 ] 

11134a72 

83c420 

add 

esp, +20 


,* ' ' 

11134a75 

894ddc 

mov 

dword ptr 

[ebp 

-24 ] , ecx 

11134a78 

83f 904 

cmp 

ecx, +04 




# In %la02aelc 

%la02aelc D0SCALL1 D0S320PEN 


>> So we're in DOSOPEN 

>> We've almost certainly call-gated into the kernel. 
>> Check this out . . . 

# u cs:eip -10 


d02f : 00000169 

268805 

mov 

byte ptr es:[di],al 

d02f :0000016c 

8bc3 

mov 

ax, bx 

d02f : 0000016e 

8cc2 

mov 

dx, es 

d02f : 00000170 

5f 

pop 

di 

d02f : 00000171 

c9 

leave 


d02f : 00000172 

c3 

ret 


d02f : 00000173 

90 

nop 


d02f : 00000174 

9a00000alb 

call 

lbOa : 0000 

d02f : 00000179 

66ea4102021a5b00 jmp 

005b: la020241 

d02f : 00000181 

9a00001alb 

call 

lbla : 0000 

d02f : 00000186 

66ea3b05021a5b00 jmp 

005b: la02053b 

d02f : 0000018e 
# dg lbOa 

9a0000631b 

call 

lb63 : 0000 

lbOa CallG32 
# In 148 : 529f 

Sel :Off=0148 : 

: 0000529f 

DPL=3 P DWC=8 

0148 : 0000529f 
# 

OS2KRNL DOSOPEN2 



>> Yes, that's where we are. 

>> Now let's see if we can find out where in R0 DOSOPEN has got... 

# dw interruptlevel 11 

0400:00006382 0000 

# dd currintlevel 11 

0148 : 0000529f OS2KRNL DOSOPEN2 

# 

>> So, no nested interrupts, but we are handling one 
>> (interruptlevel=0000) . 

>> The current interrupt came from IRQ 1 (currintlevel=l ) 

>> So a keyboard interrupt, not surprising because the customer was 
>> asked to take a dump using ctrl-alt-numlock-numlock, furthermore 
>> he obeyed! 

>> Lets look at the interrupt stack saved by the interrupt router 
>> (prior to switching stacks) . 

# dd fpoldstack 12 

%fff 27310 00004b0c 00000030 

>> So, the Interrupt Stack Frame maps the frame at 30:4b0c 


# dw 30:4b0c 


0030 : 00004b0c 

ffff 

ffff 

0000 

0000 

03b8 

0000 

2410 

0000 

0030 : 00004blc 

23f 8 

0000 

4c66 

7b61 

0000 

7b61 

4b5e 

0003 

0030 : 00004b2c 

4b4 0 

0000 

0000 

0000 

24d0 

0000 

ffff 

0000 

0030 : 00004b3c 

0000 

0000 

0000 

0000 

0000 

0000 

be93 

0000 

0030 : 00004b4c 

23d0 

0000 

2292 

0000 

23f 8 

0000 

006c 

0000 

0030 : 00004b5c 

00a3 

4b8c 

b54 1 

23d0 

23f 8 

0000 

4c66 

0000 

0030 : 00004b6c 

4baa 

0029 

2b00 

0000 

0004 

0001 

2101 

2d7 6 

0030 : 00004b7c 

0001 

0094 

0022 

003f 

0000 

0000 

20d4 

4be8 

>> bp is at +lc 
>> We took the 
>> who is this? 

sp 

dump 

at +20, cs at 
at when cs:eip= 

+40, 
=23d0 : 

eip < 
:be93 

at +3c 


# .m 23d0 : 0 


*har par cpg va fig next prev link hash hob hal 

0021 %feel32e0 00001400 %fc953000 121 0020 0022 0000 0020 0022 0000 


=0000 



hob har hobnxt figs own hmte sown,cnt It st xf 

0022 0021 0000 0225 ffef 0000 0000 00 04 00 00 vmkshrw 

>> 23d0 is allocated out of the Kernel Swappable Read/Write heap. 

>> Lets see who owns this heap block. Need to look at the VMKSHB 
>> shared heap block header... 

# dg 23d0 

23d0 Code Bas=fcal5000 Lim=0000ff5f DPL=0 P RE A 

# dw %f acel5000-10 

%f cal4f f 0 0000 0000 0000 0000 ff68 5200 ff4d 23d0 

%fcal5000 

Invalid linear address: %fcal5000 

>> VMKSHB is an 8 byte prefix of the form: 

>> ulong size | | 0x520000 
>> ushort hob 
>> ushort sel 

>> check the owner hob 

# .mo ff4d 
ff4d fsd6 

# 

>> This was allocated by/for the 6th loaded FSD . 

>> N.B fsd8 is used for the 8th and subsequent FSDs 

>> in the same way ddl6 is used for the 16th and subsequent 

>> device driver. From Fix Pack 35 of Warp 3 and GA Warp 4 

>> the ddl-ddl6 and fsd-fsd8 system object ids are not used, but 

>> instead the hmte for the driver is used. This avoids the problem of 

>> the non-uniqueness of ddl6 and fsd8. It also directly identifies 

>> the driver module. 

>> Who is fsd6? 

>> There are two ways to home in on this. 

>> First method. 

>> List all library modules (includes DLLs IFSs FONs etc) 

# . 1ml 

hmte=18e2 pmte=%felal000 mf lags=04 98bl88 c:\frnvlrO\dll\frnolgar.dll 
hmte=193e pmte=%felal3ac mf lags=04 98bl88 c:\frnvlrO\dll\frnosars.dll 
hmte=18fd pmte=%felal8d4 mflags=4498bl86 c:\frnvlr0\dll\frnofo2.dll 
hmte=1933 pmte=%felal 94c mflags=4498bl86 c:\frnvlrO\dll\frnofios.dll 
hmte=18f2 pmte=%fdebdlc4 mflags=4498bl86 c:\frnvlrO\dll\frnoutil.dll 
hmte=0fc7 pmte=%fdedf 550 mf lags=44 98blc6 c:\frnvlrO\dll\frnollmn.dll 


>> 200 hundred lines later 


hmte=0b0a pmte=%fe0bb6f 8 mf lags=0408blc8 c:\cmlib\dll\acshpres.dll 
hmte=0af9 pmte=%fe0bb8 64 mf lags=0408blc8 c:\cmlib\redj.pml 
hmte=0af6 pmte=%fe0bb8f 0 mf lags=0408blc8 c:\cmlib\redj.pdl 
hmte=08f7 pmte=%fe0bcf 8c mf lags=0408blc8 c:\cmlib\redj2.pml 
hmte=094d pmte=%felldc44 mf lags=0408blc8 c:\cmlib\redj2.pdl 
hmte=0a8a pmte=%fe0 98ea4 mf lags=0408blc8 c:\cmlib\cm20sys.pml 
hmte=0a87 pmte=%fe0 98f 5c mf lags=0408blc8 c:\cmlib\cm20sys.pdl 
hmte=04c7 pmte=%fde5f f 60 mf lags=04 98blc8 c:\os2\dll\times.fon 
hmte=04c5 pmte=%fde5f a7c mf lags=04 98blc8 c:\os2\dll\helv.fon 
hmte=04c3 pmte=%fde5fb44 mf lags=04 98blc8 c:\os2\dll\courier.fon 
hmte=04cl pmte=%fde5fbb4 mf lags=04 98blc8 c:\os2\dll\sysmono.fon 
hmte=04b9 pmte=%fde5f c8c mf lags=44 98blc5 c:\os2\dll\pmatm.dll 
hmte=0324 pmte=%fel34f 54 mf lags=0428alc9 d:\ibm3995\demoifs.ifs 
hmte=02ff pmte=%fe0f f f 90 mf lags=0428alc9 c:\netw\nwifs.ifs 
hmte=01b9 pmte=%fe0dbcb4 mf lags=0428alc9 c:\showcase\sdcfs.ifs 
hmte=0109 pmte=%fe0bef aO mf lags=0428alc9 c:\os2\cdfs.ifs 
hmte=00e0 pmte=%fde4 6d3c mf lags=0428alc9 c:\os2\hpfs.ifs 
hmte=0076 pmte=%fdel4f 68 mf lags=0428alc9 a:\mini_fsd.fsd 

>> FSDs were installed in order, 76, eO, 109, lb9, 2ff and 324. 

>> fsd6 is therefore hmte=324. Lets check for certain: 

# . lmo 324 

hmte=0324 pmte=%fel34f 54 mf lags=0428alc9 d:\ibm3995\demoifs.ifs 
seg sect psiz vsiz hob sel flags 

0001 0003 d7ba d7ba 0000 2398 8d60 code shr prel rel 



0002 0070 2325 2325 0000 23a0 8d60 code shr prel rel 

0003 0083 ec66 ec66 0000 23a8 8d60 code shr prel rel 

0004 OOfa f7a6 f7a6 0000 23b0 8d60 code shr prel rel 

0005 0176 ble4 ble4 0000 23b8 8d60 code shr prel rel 

0006 OldO f3e6 f3e6 0000 23c0 8d60 code shr prel rel 

0007 024b eeda eeda 0000 23c8 8d60 code shr prel rel 

0008 02c3 ff60 ff60 0000 23d0 8d60 code shr prel rel 

0009 0343 fe82 fe82 0000 23d8 8d60 code shr prel rel 

000a 03c3 4b4e 4b4e 0000 23e0 8d60 code shr prel rel 

000b 03e9 002a 002a 0000 23e8 8c60 code shr prel 

000c 03ea 4298 4298 0000 23f0 8d60 code shr prel rel 

OOOd 040c 9dfd 9dfe 0000 23f8 8d41 data prel rel 

OOOe 0000 0000 1964 0000 2400 8c41 data prel 

OOOf 0000 0000 fe88 0000 2408 8c41 data prel 

0010 0000 0000 d75e 0000 2410 8c41 data prel 

>> and yes we find selector 23d0 in object 8 of demoifs.ifs 
>> Second method 

>> We could approach this from the FSC control block, which is similar 
>> in purpose to the DD header chain. 

>> The FSC is a table of FSD entry point tables. We might spot the 
>> selector in question being referenced in the FSC. If not, we can 
>> unwind the R0 stack until we do find a reference. 

>> First the FSC. Dump the SAS for the FSC selector 

# . a 

SAS Base Section 

SAS signature: SAS 
offset to tables section: 0016 
FLAT selector for kernel data: 0158 
offset to configuration section: 001E 
offset to device driver section: 0020 
offset to Virtual Memory section: 002C 
offset to Tasking section: 005C 
offset to RAS section: 006E 
offset to File System section: 0074 
offset to infoseg section: 0080 

SAS Protected Modes Tables Section 

selector for GDT: 0008 
selector for LDT: 0000 
selector for IDT: 0018 
selector for GDTPOOL : 0100 

SAS Device Driver Section 

offset for the first bimodal dd: 0CB9 
offset for the first real mode dd: 0000 
sel for Drive Parameter Block: 0520 
sel for ABIOS prot . mode CDA: 0468 
seg for ABIOS real mode CDA: 6800 
selector for FSC: 00C8 

SAS Task Section 

selector for current PTDA: 0030 
FLAT offset for process tree head: FFF29714 
FLAT address for TCB address array: FFF26BDA 
offset for current TCB number: FFE23A0E 
offset for ThreadCount : FFE23A12 

SAS File System Section 

handle to MFT PTree: FDE55FB4 
selector for System File Table: 00C0 
sel. for Volume Parameter Bloc: 0678 
sel. for Current Directory Struc: 06A8 
selector for buffer segment: 00A8 

SAS Information Segment Section 

selector for global info seg: 0428 
address of curtask local infoseg: 03B80000 
address of DOS task's infoseg: FFFFFFFF 
selector for Codepage Data: 06BB 
SAS RAS Section 

selector for System Trace Data Area: 0508 
segment for System Trace Data Area: 0508 
offset for trace event mask: 09D6 

SAS Configuration Section 

offset for Device Config. Table: 0D40 

SAS Virtual Memory Mgt . Section 

Flat offset of arena records: FFF2C314 
Flat offset of object records: FFF2C32C 
Flat offset of context records: FFF2C31C 
Flat offset of kernel mte records: FFF27E68 



# 


Flat offset of linked rate list: 
Flat offset of page frame table: 
Flat offset of page range table: 
Flat offset of swap frame array: 
Flat offset of Idle Head: 
Flat offset of Free Head: 
Flat offset of Heap Array: 
Flat offset of all mte records: 


FFF273B8 
FFF2A7 68 
FFF29CC0 
FFF260B0 
FFF294D4 
FFF294C4 
FFF2A770 
FFF2BE24 


>> FSC selector is c8. Now dump the FCS segment. 


# dw c 8 : 0 


00c8 : 00000000 

03c8 

0000 

0000 

fdel 

0b68 

0738 

0b6c 

0738 

00c8 : 00000010 

0000 

0720 

Olfc 

0720 

0010 

0720 

05b4 

0718 

00c8 : 00000020 

0570 

0720 

0580 

0720 

0634 

0720 

0640 

0720 

00c8 : 00000030 

0e3c 

0720 

1120 

0720 

0834 

0720 

090c 

0720 

00c8 : 00000040 

09f 8 

0718 

1130 

0720 

1 f 24 

0720 

If 6e 

0720 

00c8 : 00000050 

2122 

0720 

1 6e4 

0720 

lblO 

0720 

lb38 

0720 

00c8 : 00000060 

lbec 

0720 

ldc8 

0720 

0c60 

0718 

0d7 0 

0718 

00c8 : 00000070 
# d 

00c8 : 00000080 

If 14 

0720 

215c 

0720 

22a0 

0720 

2294 

0720 

111c 

0718 

25f c 

0720 

2 6b0 

0720 

117c 

0718 

00c8 : 00000090 

Ofdc 

0718 

0000 

0718 

0000 

0000 

0000 

0000 

00c8 : OOOOOOaO 

0000 

0000 

03b0 

0720 

062c 

0718 

137c 

0720 

00c8 : OOOOOObO 

0bb4 

0718 

2 6bc 

0720 

0000 

0000 

0000 

0000 

00c8 : OOOOOOcO 

0000 

0000 

0000 

0000 

0000 

0a58 

0004 

0a58 

00c8 : OOOOOOdO 

0000 

0a50 

01b6 

0a50 

OOOe 

0a50 

04c4 

0a50 

00c8 : OOOOOOeO 

060e 

0a50 

061c 

0a50 

065c 

0a50 

0666 

0a50 

00c8:000000f0 
# d 

00c8 : 00000100 

1198 

0a50 

1224 

0a50 

086e 

0a50 

OeOe 

0a50 

09e6 

0a50 

125a 

0a50 

299a 

0a50 

2 9a8 

0a50 

00c8 : 00000110 

2 9b6 

0a50 

2 63e 

0a50 

278c 

0a50 

27aa 

0a50 

00c8 : 00000120 

2842 

0a50 

288a 

0a50 

28fc 

0a50 

298c 

0a50 

00c8 : 00000130 

2 97e 

0a50 

2 9c4 

0a50 

2cf 6 

0a50 

2cb8 

0a50 

00c8 : 00000140 

2f0c 

0a50 

34b2 

0a50 

34 f 2 

0a50 

350c 

0a50 

00c8 : 00000150 

5029 

1000 

9cab 

0140 

1232 

0a50 

1240 

0a50 

00c8 : 00000160 

0000 

0000 

0602 

0a50 

9d8c 

0140 

1568 

0a50 

00c8 : 00000170 
# d 

00c8 : 00000180 

124e 

0a50 

3500 

0a50 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0090 

1028 

008a 

1028 

00c8 : 000001 90 

OObe 

1018 

03e6 

1018 

05da 

1018 

0766 

1018 

00c8 : OOOOOlaO 

09ee 

1018 

0c38 

1018 

0db6 

1018 

0dc2 

1018 

00c8 : OOOOOlbO 

0fa4 

1018 

1488 

1018 

1496 

1018 

158a 

1018 

00c8 : 000001C0 

1998 

1018 

lcae 

1018 

If 92 

1018 

lfaO 

1018 

00c8 : OOOOOldO 

lfae 

1018 

2998 

1018 

2bf 0 

1018 

2c9c 

1018 

00c8 : OOOOOleO 

2caa 

1018 

2f 90 

1018 

2f 9e 

1018 

31c4 

1018 

00c8 : OOOOOlf 0 
# d 

00c8 : 00000200 

332c 

1018 

333a 

1018 

3950 

1018 

3e9c 

1018 

3fa2 

1018 

419a 

1018 

4318 

1018 

4332 

1018 

00c8 : 00000210 

5029 

1000 

9cab 

0140 

0000 

0000 

0000 

0000 

00c8 : 00000220 

0000 

0000 

08aa 

1018 

9d8c 

0140 

2114 

1018 

00c8 : 00000230 

If be 

1018 

4326 

1018 

0000 

0000 

0000 

0000 

00c8 : 00000240 

0000 

0000 

0000 

0000 

0098 

22a8 

0090 

22a8 

00c8 : 00000250 

OlbO 

22b0 

1500 

22b0 

7470 

22b0 

1650 

22b0 

00c8 : 00000260 

18e0 

22b0 

51b0 

22b0 

25d0 

22b0 

344d 

22b0 

00c8 : 00000270 
# d 

00c8 : 00000280 

3ca7 

22b0 

4 6 9a 

22b0 

28ac 

22b0 

279b 

22b0 

4316 

22b0 

28c5 

22b0 

4343 

22b0 

4347 

22b0 

00c8 : 000002 90 

434d 

22b0 

3b30 

22b0 

43c0 

22b0 

4353 

22b0 

00c8 : 000002a0 

1 95d 

22b0 

4310 

22b0 

6e50 

22b0 

4cl0 

22b0 

00c8 : 000002b0 

4d2 0 

22b0 

4ec6 

22b0 

5bc2 

22b0 

4359 

22b0 

00c8 : 000002c0 

6d27 

22b0 

laab 

22b0 

43al 

22b0 

8740 

22b0 

00c8 : 000002d0 

5029 

1000 

9cab 

0140 

4a7 0 

22b0 

4a7 f 

22b0 

00c8 : 000002e0 

84c0 

22b0 

17bb 

22b0 

9d8c 

0140 

37f 0 

22b0 

00c8 : 000002f 0 
# d 

00c8 : 00000300 

25f 0 

22b0 

7570 

22b0 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0c96 

23f 8 

8880 

23f 8 

00c8 : 00000310 

OOde 

23a0 

0152 

23a0 

Olbd 

23a0 

0228 

23a0 

00c8 : 00000320 

02 f 2 

23a0 

0369 

23a0 

03dl 

23a0 

042d 

23a0 

00c8 : 00000330 

04 9e 

23a0 

050f 

23a0 

0580 

23a0 

05df 

23a0 

00c8 : 00000340 

066b 

23a0 

06eb 

23a0 

075f 

23a0 

07b5 

23a0 

00c8 : 00000350 

083e 

23a0 

0982 

23a0 

0 9e7 

23a0 

0a4c 

23a0 

00c8 : 00000360 

Oacf 

23a0 

0b4 0 

23a0 

Obab 

23a0 

Oclf 

23a0 

00c8 : 00000370 
# d 

00c8 : 00000380 

0c87 

23a0 

Ocfb 

23a0 

0d8d 

23a0 

0e04 

23a0 

0e5d 

23a0 

Oecb 

23a0 

Of 33 

23a0 

Of 92 

23a0 

00c8 : 00000390 

5029 

1000 

9cab 

0140 

0000 

0000 

0000 

0000 

00c8 : 000003a0 

0000 

0000 

02 8d 

23a0 

9d8c 

0140 

0905 

23a0 



00c8 : 000003b0 08ac 23a0 1000 23a0 0000 0000 0000 0000 
00c8 : 000003c0 0000 0000 0000 0000 

Past end of segment: 00c8 : 000003c8 
# 

>> The FSC starts with an 8 byte header. Word 1 is the length. 

>> Each entry is for each FSD starting with fsd2 (fsdl is OS2BOOT 
>> and not used once the kernel is loaded) . Each FSD entry comprises 
>> a table of farl6 pointers. The first two are a) pointer to FSD 
>> attributes and b) FSD name. The remaining are the function entry 
>> points (See IFS OEM reference) . There are 46 of these. In other 
>> words the first fsd entry is at c8:8 and ever subsequent entry is 
>> every 12 lines of display, fsd 6 entry starts at c3:308 

>> what's fsd6 called? 

# db 23f8:8880 18 

23f8 : 00008880 4f 50 54 4c 49 42 00 00 OPTLIB. 

>> The evidently is the optical library fsd. 

>> We didn't find the current cs:eip in the fsd function table so 
>> we unwind the rO stack .... 


# dw 30 : 4b8c 18 


0030 : 00004b8c 4be8 
# dw 30:4be8 18 

7426 

23a8 

4bb2 

0030 

4bb0 

0030 

4bd8 

0030 : 00004be8 4c0a 
# dw 30:4c0a 18 

738a 

23a8 

0000 

1004 

0000 

2 f 4 8 

4c2c 

0030 : 00004c0a 4c3a 
# dw 30:4c3a 18 

bb2 8 

23a8 

d7ce 

0001 

4c2c 

0030 

0000 

0030 : 00004c3a 4c6c 
# dw 30:4c6c 18 

lb8f 

23b0 

0000 

0000 

0000 

d7ce 

0001 

0030 : 00004c6c 4c7e 
# dw 30:4c7e 18 

le87 

23b0 

0300 

24f 8 

4ca8 

0030 

23f 8 

0030 : 00004c7e 4cca 
# dw 30:4cca 18 

08ed 

23b0 

0300 

24f 8 

4ca8 

0030 

4cb0 

0030 : 00004cca 4cf6 
# dw 30:4cf6 18 

Olle 

23b0 

0100 

24f 0 

0073 

2520 

0000 

0030 : 00004cf 6 4d36 

# dw 30 : 4d36 18 

7314 

23b0 

04d3 

2408 

0073 

2520 

0000 

0030 : 00004d36 4d70 

# dw 30 : 4d70 18 

5be8 

23b0 

006a 

2520 

0000 

04d3 

2408 

0030 : 00004d70 4dbc 
# dw 30 : 4dbc 18 

04e3 

23a8 

0000 

04d3 

2408 

0020 

2022 

0030 : 00004dbc 4e46 

# dw 30:4e4d 18 

2blf 

2398 

4eb6 

0030 

0000 

0003 

0020 

0030 : 00004e4d 304e 

0000 

0300 

2000 

bcOO 

304e 

1000 

2200 


# dw 30 : 304e 18 

Invalid linear address: 0030 : 0000304e 

>> The problem here is that the kernel is not using ebp 
>> before calling the fsd. So dump the R0 stack from 
>> the last recognisable fsd selector. Look for the 
>> first selector that matches one used in fsd6's 
>> function table. 


dw 30:4dbc 


0030 : 00004dbc 

4e4 6 

2blf 

2398 

4eb6 

0030 

0000 

0003 

0020 

0030 : 00004dcc 

4ebc 

0030 

0010 

2022 

0000 

41a5 

2cf 0 

4df 2 

0030 : 00004ddc 

0030 

ffff 

04d0 

2408 

4edb 

0030 

0000 

2 f 4 0 

0030 : 00004dec 

23f 8 

8bf c 

0308 

2022 

0000 

1004 

8ce8 

lc63 

0030 : 00004df c 

8ce8 

lc63 

8ce8 

lc63 

0000 

0000 

0000 

0000 

0030 : 00004e0c 

0000 

006c 

0000 

0274 

0000 

0000 

0000 

2100 

0030 : 00004elc 

0001 

4e3e 

0006 

0004 

0000 

2f40 

039c 

2408 

0030 : 00004e2c 
# d 

0030 : 00004e3c 

0345 

0098 

006c 

0003 

0001 

0000 

04d0 

2408 

02 f 4 

0305 

0098 

2 f 4 0 

1004 

4e84 

0d6e 

23a0 

0030 : 00004e4c 

4eb6 

0030 

0000 

0003 

0020 

4ebc 

0030 

0010 

0030 : 00004e5c 

2022 

0000 

41a5 

2cf 0 

41d7 

2cf 0 

ffff 

4fee 

0030 : 00004e6c 

0030 

4edb 

0030 

4ee3 

0030 

0308 

8bf c 

510d 

0030 : 00004e7c 

0000 

9410 

00c8 

0030 

4ec0 

9a09 

0140 

4eb6 

0030 : 00004e8c 

0030 

0000 

0003 

0020 

4ebc 

0030 

0010 

2022 

0030 : 00004e9c 

0000 

41a5 

2cf 0 

41d7 

2cf 0 

ffff 

4fee 

0030 

0030 : 00004eac 

4edb 

0030 

4ee3 

0030 

0000 

0000 

04d0 

0007 


>> at 30:4e48 we have 23a0:d6e. Looking at the function 
>> table we see entry point 26 at 23a0:cfb is the closest. 
>> fsd entry point 26 is FS_OPENCREATE . This seems to be 
>> consistent with what ring 3 was doing. 



>> Finally for future reference the FSD entry structure is 
>> as follows: 

>>+0 FS_AT TRIBUTE; /* -> FSD attribute, (in FSD memory) */ 

>>+4 FS_NAME; /* -> FSD name. (in FSD memory) */ 

>>+8 FS_ATTACH; /* DosQFsAttach, DosFsAttach */ 

>>+c FS_CHDIR; /* DosChdir */ 

>>+10 FS_CHGFILEPTR; /* DosChgFilePtr */ 

>>+14 FS_CLOSE; /* DosClose */ 

>>+18 FS_COPY; /* DosCopy */ 

>>+ 1 C FS_DELETE ; /* DosDelete */ 

>>+20 FS_EXIT ; /* DosExit */ 

>>+24 FS_FILEATTRIBUTE ; /* DosFilelnfo, DosSetFileMode */ 

>>+28 FS_FILEINFO; /* DosQFilelnfo, DosSetFilelnf o */ 

>>+2c FS_FILEIO; /* DosFilelO */ 

>>+30 FS_FINDCLOSE; /* DosFindClose */ 

>>+34 FS_FINDFIRST; /* DosFindFirst */ 

>>+38 FS_FINDFROMNAME; /* DosFindFromName-Private to server */ 

>>+3c FS_FINDNEXT; /* DosFindNext */ 

>>+40 FS_FINDNOTIFYCLOSE; /* DosFindNotifyClose */ 

>>+44 FS_FINDNOTIFYFIRST; /* DosFindNotifyFirst */ 

>>+48 FS_FINDNOTIFYNEXT; /* DosFindNotifyNext */ 

>>+4c FS_FSINFO; /* DosQFsInfo, DosSetFsInfo */ 

>>+50 FS_INIT; /* — No corresponding API */ 

>>+54 FS_IOCTL ; /* DosDevIoctl */ 

>>+58 F S_MKD I R ; /* DosMkdir */ 

>>+5c FS_MOUNT; /* — No corresponding API */ 

>> + 60 F S_MOVE ; /* DosMove */ 

>>+64 FS_NEWSIZE; /* DosNewsize */ 

>>+68 FS_NMP IPE ; /* All named pipe related API's */ 

>>+6c FS_OPENCREATE; /* DosOpen */ 

>>+70 FS_PATHINFO; /* DosQPathlnfo, DosSetPathlnf o */ 

>>+74 FS_PROCESSNAME ; /* — No corresponding API */ 

>>+78 FS_READ; /* DosRead, DosReadAsync */ 

>>+7c FS_RMDIR; /* DosRmdir */ 

>>+80 FS_SETSWAP; /* — No correcponding API */ 

>>+84 FS_WRITE; /* DosWrite, DosWriteAsync */ 

>>+88 FS_OPENPAGEFILE; /* init time only */ 

>>+8c FS_ALLOCATEPAGESPACE ; /* size swap file */ 

>>+90 FS_CANCELLOCKREQUEST; /* DosCancelLockRequest */ 

>>+94 FS_FILELOCKS ; /* DosSetFileLocks */ 

>>+98 FS_VERIFYUNCNAME ; /* Used to save function addresses */ 

>>+9c FS_COMMIT; /* DosBufReset, DosClose */ 

>>+a0 FS_DOPAGEIO; /* perform paging */ 

>>+a4 FS_FSCTL ; /* DosFsCtl */ 

>>+a8 FS_FLUSHBUF; /* DosBufReset */ 

»+ac FS_SHUTDOWN; /* DosShutdown */ 

>>+b0 FS_SDCHGFILEPTR; /* Used to save function addresses */ 

>>+b4 FS_SDFSINFO; /* at shutdown time. These functions */ 

>>+b8 FS_SDREAD; /* will only be called by shutdown */ 

>>+bc FS_SDWRITE; /* filters. */ 

>> 

>> * Bit masks for FS_ATTRIBUTE (remember FS_ATTRIBUTE points to the 
>>attribute 

>> * word rather than containing it directly.) 

>> 

>> FS_ATTR_REMOTE 0x0001 /* 0 = local FSD, 1 = remote FSD */ 

>> FS_ATTR_UNC 0x0002 /* 0 = normal, 1 = this is UNC FSD */ 

>> FS_ATTR_LOCKINFO 0x0004 /* 0 = no notice, l=notify filelocks */ 

>> FS_ATTR_LVL7 0x0008 /* 0 = no level 7 requests, 1 = yes */ 

>> FS_ATTR_PIPESVR 0x0010 /* 0 = don’t FSD on PIPE req, 1 = yes */ 

>> 

>> /* bit masks for FS_ATTRIBUTE (High Word) */ 

>> FS_ATTR_VERNO 0x7000 /* bits 28-30 version no */ 

>> FS_ATTR_EA 0x8000 /* bit 31 -> 1 = extended attribute */ 

>> 

>> /* equates for commit type */ 

>> FS_COMMIT_ALL 2 /* all handles commit */ 

>> FS_COMMIT_ONE 1 /* one handle commit */ 

>> 

>> /* equates for close type */ 

>> FS_CL_ORDINARY 0 /* ordinary close */ 

>> FS_CL_FORPROC 1 /* final close for process */ 

>> FS_CL_FORSYS 2 /* final close for system */ 



Kernel Debugger User Guide 


The Kernel Debugger is essentially a replacement OS/2 Kernel module that contains an in-built debugger component. With the debugger 
one may halt system execution, inspect and alter memory and registers and display system control blocks. The debugger is controlled from 
a dump ASCII terminal (the debugging console) which is connected to the machine under test (MUT), either directly or via a modem-modem 
link, through one of its COMx ports. The debugger supports a comprehensive command set, which is fully described in the Kernel Debugger 
and Dump Formatter Command Reference. 

The debug kernel is distributed in two forms: 

ALLSTRICT 

This version of the kernel contains all optional self diagnostic (otherwise known as strict or assertion checking) code. 
Besides this functional difference many of the system control blocks have extra accounting and signature fields. This 
has a number of consequences that may affect problem diagnosis: 

1 Performance characteristics will be different since extra checking and acounting is being performed. 

2 Memory useage will be different because of extra diagnostic code, extensions to system control 
blocks and in some cases additional space to cause page faults rather than overlays by erroneous 
code. 

3 Timing critical problems might not be re-createable under the ALLSTRICT kernel. 

4 Secondary problems may be detected or even introduced through the use of additional diagnostic 
code. 

HSTRICT 

This version of the kernel is essential the RETAIL kernel with the debugger component. It contains only a limited set 
of strict checking code. The system control blocks are of the same form as those used by in the RETAIL kernel. The 
performance characteristics of the HSTRICT kernel are closer to those of the RETAIL kernel than the ALLSTRICT 
kernel. For this reason the HSTRICT kernel is recommended as a first choice when diagnosing application and 
non-system problems. 

The base version of the ALLSTRICT kernel is distributed with the OS/2 Developer's Toolkit. Versions of the HSTRICT and ALLSTRICT 
kernels for fix packs may be obtained from the following sources: 

• The OS/2 Base Product CDROM for WARP is distributed with the ALLSTRICT kernel and Dump Formatter. (For the initial 
release of WARP this was only available on the US version of WARP). 

■ The Developer Connection CDROM - this may be ordered through the Developer Assistance Program (DAP) or the System 
Library Subscription Service (SLSS). 

• From your local IBM Marketing Representative. 

• From the World Wide Web at URL: 


ftp: //service .boulder . ibm. com 


For IBM customers from by FTP from the node: 


ftp . software . ibm . com, 


directory ps\products\os2\f ixes\debug 


For IBM internal users by FTP to the SDM at node: 

sdm . austin . ibm . com 


Logon using Id and Password Anonymous. A list of files is contained in files. bbs. 


Note: 


The Kernel Debugger packages obtainable from the SDM are equipped with an installation procedure and two text files dbsetup.txt 
and modemset.txt that give instructions on how to install the debugger for local and remote debugging via a modem. 


Kernel Debugger Local Set-up 


The following items are required to install and set up a local debug session: 

Either the HSTRICT or ALLSTRICT kernel appropriate to the level of the MUT. 

System symbol files. These are optional, but useful breakpoints and system data are difficult to locate without them. 

Application symbol files. These are only necessary if you intend to debug complex applictions where data and subroutines are 
difficult to locate without them. 

System Trace definition and Formatting files. These are only required if you intend to trace kernel dynamic tracepoints while 
using the debug kernel. 

A null modem cable. 

An asynchronous ASCII dumb terminal or an emulator on another PC. Softerm, which is distributed with OS/2 is suitable. 
PMDF, which is part of the OS2PDP package distributed with this book also provides a terminal emulator interface suitable for 
use with the Kernel Debugger. Other popular emmulators used with the Kernel Debugger include: PMDEBUG, DEBUGO and 
LOGICOMM. 

Confusion sometimes arises over the installation of the kernel debugger, particularly as the OS/2 Developer's Toolkit distributes debug 
versions of other OS/2 modules. Note in particular: 

The debug versions of OS2LDR, PMDD.SYS, PMGRE.DLL and PMWIN.DLL are optional. These modules will route additional 
diagnostic information to the debug console if they are installed. 

No modification of CONFIG.SYS is required. 

A secondary console attached to the MUT may not be used as a debug console. 


Installing the Debug Kernel 

If you use the OS/2 Developer's toolkit to install the debug kernel then the installation is perfomed automatically using the supplied 

DBGINST command. If you choose to install the debug kernel manually then perform the following steps: 

1 . Copy the debug kernel (OS2KRNLD or OS2KRNLB) to the root directory of the boot drive. 

2. Copy the symbol files into the same directories as their corresponding load modules. Usually system symbol files are distributed 

on a diskettes that have the same directory structure as OS/2 system code. This conveniently allows the UNPACK command to 
be used to copy all symbols files in one operation (per diskette). 

3. Unhide the RETAIL kernel module using the following command: 

ATTRIB -r -s -h OS2KRNL 

4. Rename the RETAIL kernel to something unique, e.g OS2KRNLR 

5. Rename the ALLSTRICT or HSTRICT kernel to OS2KRNL. There is no need to hide or make the replaced kernel read-only, 

unless you wish to protect yourself against accidents! 

The MUT is now ready to use in debug mode as soon as it is re-booted. Before that happens the debug console needs to be set up. 

Note: 


It is possible to run the MUT with the debug kernel installed without setting up the debug console. This particularly useful when 
diagnosing pervasive problems. If the COM port settings are correct when the problem reoccurs then the debug consol may be 
connected at that time. 


Debug Terminal Set-up 


This section describes the connection and set-up of the debugging console. You may need to know the operational requirements of both you 
local COM port (on the MUT) and dumb ASCII terminal. Fortunately the debug kernel does not impose any form of hand-shaking or a fixed 
COM speed setting. In many cases default settings apply. First we discuss the cable requirements. 

A null modem cabel is required to connect the MUT to the debug console. This is essentially a 3-wire circuit that connects the two COM 
connectors together. Some PCs are equipped with a 25-pin sockets, other 9-pin. A null modem cable is a symetric circuit so we do not 
distinguish which is the MUT and which the console. 

25-to-25 Pin Cable 


MUT/CONSOLE CONSOLE/MUT 
DB25J DB25J 


2 

3 

7 


3 

2 

7 


25-to-9 Pin Cable 


MUT/CONSOLE CONSOLE/MUT 
DB25J DB9J 


2 

3 

7 


2 

3 

5 


9-to-9 Pin Cable 


MUT/CONSOLE CONSOLE/MUT 
DB9J DB9J 


2 

3 

5 


3 

2 

5 


Note: 


The three connections involved are: 
RX (receive) 

TX (transmit) 

SG (Signal Ground) 



The null modem cable essentially connects RX-TX and SG-SG. The pin conventions for RX and TX on a 25-pin connector reverse those of 
a 9-pin connect. Thus the 25-9 connection looks like a non-null circuit. 


If you intend to debug on a number of different set-ups then it is worth equipping yourself with the following items, which are commercially 
available: 


• Standard modem cable. 

• A gender changer. 

■ A null modem convertor. 

■ A 25-9 pin convertor. 

With these items you should be able to cater for most variations and remote connection as well. 

The next thing to consider is the COM port settings. By default the debug kernel will first select COM2. It that is in use then COM1 . If you 
require the debugger to use another COM port, or a non-standard I/O port address then you might need to set this explicitely by using the .B 
command, which should be entered in the KDB.INI initialisation file. 

By default the kernel debugger initialises the selected COM port to run at 9600 bits per second. If your debugging console requires a 
different speed setting then you should convey this to the debug kernel using the .B command, again entered in the KDB.INI file. 

The default communications protocol uses 8 data bits, 1 stop bit and no parity. If this needs to be different then it may be set using the O 
command also entered in the KDB.INI file. 

Finally some COM ports require the DTR signal to be held high before allowing communication. If this is necessary then it can be set using 
the debug kernel to write to the I/O port that controls the COM port set-up register. This may be done using the the O command entered in 
the KDB.INI file. 

Examples of using these commands in KDB.INI is given in the next section. 

Flaving set up the COM port requirements on the MUT the debug console must be set up to match. Precisely how this is done will depend 
on whether a dumb terminal or teminal emulator software is used. If you use emulator software under OS/2 you may need to use the OS/2 
MODE command to select compatible COM port settings for the debugging console's COM port. 


The KDB.INI Initialisation File 


The debug kernel normally only accepts commands enetered at the debugging console. However, during system initialisation it will accept 
commands entered into a text file, which if used, must be called KDB.INI and reside in the root directory of the boot drive. 

The KDB.INI file is read after the kernel has loaded and the kernel symbols are loaded and the system is running in protect mode. 

Warning: 

The content of the KDB.INI file is somewhat sensitive. If you make a syntax or format error then you may hang the system and have to 
re-boot from installation diskettes to recover. 

On most systems the use of a KDB.INI file is not required to establish correct operation of the COM port and should be avioded. 

Each command must be terminated with a <CRxLF> pair except the last in the file. 

The KDB.INI is most easily created using: 

COPY CON: KDB.INI 

Enter the commands you require, using the <RETURN> key after each command except the last. For the final command, teminate it using 
the sequence: Ctrl-Z <RETURN>. 

Note: 

Use of an editor for creating KDB.INI may not be suitable if the <CRxLF> sequence cannot be suppressed from the last line. 


The following example hows how to select COM3 at 1200 bps, with DTR held high and to prepare the debugger to intercept any ring 2 or 3 
traps. 


.b I200t 3e8 
O 3ec 1 
vsf * 

g 


Notes: 


Since the default arithmetic base for the debugger is hexadecimal a t suffix is required if the COM port speed is specified in decimal 
as in the example. 

We have assumed a standard port address asignment for COM3, namely 3e8 for data register and 3ec for control register. 

The VSF command causes the debugger to intercept all ring2 and ring3 traps and give control to the debug console. 

The G command is required unless you want to enter the debugger as soon as the kernel has entered protect mode, loaded its 
symbol file and executed the KDB.INI file. 


Kernel Debugger Remote Set-up 


This section describes how to use the kernel debugger remotely, that is with a modem-modem link between the machine under test (MUT) 
and the debugging console. 

The first step is to install the debug kernel and symbols files on the MUT as described preceding section, Kernel Debugger Local Set-up 

Although the Debug Kernel will work with nearly any modem, configuration details are unique to each modem. This topic describes the setup 
of several modems, and gives general guidelines for setting up others. 


Items Required to Setup a System for Remote Debugging 


To complete the installation, you will need: 

• The RETAIL and either the HSTRICT or ALLSTRICT Kernel 

• A modem 

• A modem data cable 

• An analog dial-in telephone line 

• Communications software. 


Modem 


Most asynchronous modems currently available will be suitable for use as a remote-debug modem. For best performance, the modem 
should: 


Support auto-answer operation 
Support locked DTE speed at 9600 bps 


Allow connections at CCITT V. 32 (9600 bps), and V.22bis (2400 bps) 
Support error-correction (MNP or V.42) 

Save configuration so a power-outage does not lose settings. 


Modem data cable 


The configuration of the cable used to connect the modem to the MUT is not important. Any serial data cable should have the connections 
required by the debug kernel. Just make sure you don't use a null-modem cable. You will either need a 25-to-25 pin cable (for connection 
to the built-in serial port on a PS/2), or a 25-to-9 pin cable (for connection to a 9-pin serial port). 

Required connections for remote debug cable: 

25-to-25 Pin Cable 


MODEM COMPUTER 

DB25P DB25J 


2 

3 

7 


2 

3 

7 


25-to-9 Pin Cable 


MODEM COMPUTER 

DB25P DB9J 


2 

3 

7 


3 

2 

5 


Notice the 25-to-9 pin cable reverses pins 2 and 3. Do not confuse this with a null-modem cable - the signals on a 25-to-9 pin cable are 
normally reversed. 


Analog Dial-in Telephone Line 


In order to call the modem and connect to the MUT, you will need a standard voice-grade telephone line that can be direct-dialled. A 
connection can be made if the line must go through a switchboard, but it makes it more difficult for the person doing the debugging. Digital 
telephone lines won't work at all with the modem. 


Communications Software 


Any terminal software that can communicate at 9600 bps will do. OS/2 2.0 comes with a program (Softerm Custom) that is adequate. PMDF, 
which is part of the OS2PDP package on the CDROM that accompanies this book, also provides a terminal emulation facility but in addition 



provides REXX support that allows Kernel Debugger command sequences to be automated. 


The Configuration Process 


After you have assembled the required items, follow these steps to prepare the MUT for remote debugging: 

1. Connect the Modem to the MUT. 

Connect one end of the data cable to the modem, and the other end to the serial port on the MUT. If the MUT has more than one 
serial port, connect the cable to the port configured as COM2 (the debug kernel uses COM2 by default). On PS/2 systems, the 
reference diskette can tell you which port is configured as COM2. Connect the telephone line to the modem, and power the 
modem on. 

2. Program the modem for DEBUG operation: 

Programming the modem may be a complex process, depending on the type of modem and the intended use. There are two 
ways to program the modem: 

• Quick programming for single debug use 

• Full programming for "permanent" debug use. 

The "quick" method is simple, but the modem will not be programmed to recover from loss of power or repeated calls. The "full" 
method allows the modem to be programmed once, and then used whenever debugging is needed. 

The "quick" programming is performed by the debug kernel itself through use of the KDB.INI file. In addition to containing start up 
commands for the debugger KDB.INI can also contain modem initialisation strings coded as operands to the Kernel Debugger ? 
command. For this reason, the modem must be connected and powered on when the MUT is booted, and cannot be powered off 
until debugging is complete. 

The first lines of the KDB.INI may will be COM port selection and parameters if defaults are not suitable, for example: 

.B 12001 1 

(Set debugger for 1 200 bps, comm port 1 ) 

Following this are the modem initialisation strings, which are unique to each type of modem. The commands in the initialisation 
string must: 


• Activate "auto-answer" 

• Lock the DTE at 9600 bps 

• Activate XON/XOFF flow control 

• Ignore the DTR signal (not supplied by the debug kernel) 

• Suppress result codes. 

The remaining lines of the KDB.INI file may contain other debugging commands. The last of these is normally G. 
The "quick" programming strings for several popular modems are as follows. 

? "AT&F E0 Q1 &B1 &H2 &I2 &D0 S0=1" 

US Robotics HST and Dual Standard 


? "AT&F2 E0 Q2 &D0 &K4 S0=1" 

Supra FAX/Modem V.32bis 

? "AT&F E0 Q1 &D0 \Q1 S0=1" 

Intel 14.4EX 

An alternative "quick” technique for entering the Flayes modem initialisation commands, which avoids the use of KDB.INI is 
illustrated by the following example. This example assumes that the default COM2 port is to be used: 

1. In CONFIG.SYS add the following line 


RUN=C: \OS2\CMD.EXE /K C:\MODEM.CMD 


2. Edit a file called MODEM.CMD and enter the following two lines 


MODE COM2 : 9600, N, 8, 1 
COPY MODEM COM2 

3. Edit a file called MODEM and enter the following line 
ATSK4&D0S0=1&W 


To use "Full" programming, you will configure the modem with the same features as in "quick" programming, but the settings will 
be stored in the modem's firmware (or set in modem switches). Determining how to store these settings can be difficult. A 
thorough study of the modem manual may be required. To program the modem, use a terminal emulation program (for example, 
the SOFTERM program that is supplied with OS/2). When programming the modem, Set the terminal program for 9600 BPS 
operation, and type the appropriate modem string. Since the initialisation string instructs the modem to suppress result codes, 
the modem will not return a response. The "FULL" programming strings for several modems are: 

AT&F &B1 &H2 &I2 &W 

US Robotics FIST and Dual Standard 

AT&F2 E0 Q2 &D0 &K4 S0=1 &W 

Supra FAX/Modem V.32bis 

AT&F E0 Q1 &D0 \Q1 S0=1 &W 

Intel 14.4EX 

NOTE: The US Robotics FIST Dual Standard does not store all settings, but has external switches instead. After programming 
the modem, set the switches as follows: 


1=ON 

(DTR forced ON) 

2=don't care 

(result code type) 

3=OFF 

(result code suppressed) 

4=ON 

(command echo suppressed) 

5=OFF 

(auto-answer enabled) 

6=don't care 

(carrier detect function) 

7=ON 

(result code in originate mode only) 

8=ON 

(AT commands enabled) 

9=ON 

(don't disconnect for +++) 

10=OFF 

(load NVRAM at power-on) 

QUAD=OFF 

(normal connect - ON if null modem cable used) 


Once the modem is connected, and programmed, the system should be ready for remote debugging. Re-boot the system with the debug 
kernel installed. When the telephone rings, the debug modem should answer the phone, and establish connection with the caller. The 
modem-to-kernel speed should remain at 9600 bps (the default speed used by the debug kernel), but the modem-to-modem speed can be 
whatever is used by the remote modem. If both modems support error correction, correction will be used. 


Using Low-speed Modems 



If a 9600 bps modem is not available, a slower modem can be used with the debug kernel. If the modem supports "speed conversion" (a 
2400 bps modem with error-correction and compression will support speed conversion), setup is straightforward. Construct the proper 
initialisation string for the modem, making sure that the modem's DTE speed (modem-to-debugger) speed is locked at 9600 bps. If the 
modem does not support "speed conversion," construct an initialisation string for the modem, and create a KDB.INI file that resets the 
debugger to the speed supported by the modem. For example, .B 2400t 2 for a 2400 bps modem. In this case, the person calling the 
debugger will have to use the speed supported by the modem. 


Limitations of This Setup 


Since the modem communicates with the MUT at 9600 bps, but can communicate with the remote modem at any speed, the modem must 
use flow control to avoid data overruns. The only flow control supported by the debug kernel is XON/XOFF. The only problem this causes is 
when the remote user wants to pause a continuous data display by pressing CTRL-S. If the modem has also sent a CTRL-S, the one from 
the user will be ignored. You may have to press CTRL-S several times before the display pauses. This is not a problem if the remote user's 
communications program supports a "scroll-back buffer," in which case there is no reason to pause the display with CTRL-S. 


Troubleshooting 


If, after following these directions, you cannot establish a remote debug connection, this guide may help: 


Symptom 


Modem rings, but 
doesn't answer 


Modem answers, but 
no response from 
debug kernel 


Problem 


Modem not set for 
auto-answer 


Phone line not 
connected to modem 


Retail kernel 
installed 


Data cable not 
connected properly 


Debug Kernel not 
operating at 9600 
BPS 


Solution 


check modem 
programming (look 
for AA light on 
modem) . 

Plug in telephone 
line to modem. 


Remove RETAIL kernel 
and install DEBUG 
kernel 

Connect data cable 
from modem to MUT. 
plug into COM2 if 
MUT has more than 
one serial port 


check modem 
configuration 


Add .B 9600T to 

KDB.INI file (create 
file if needed, in 
root directory of 
boot drive) . Re-boot 
MUT. 


User at the remote Modem not locked at 

modem sees "garbage" 9600 bps 

on screen, unable to 

control debug 

session 


Controlling the System From the Debugging Console 


Having set up the Kernel Debugger for a Local or Remote debug session the system is ready to be controlled from the debugging console. 
The console is used in two modes, which for convenience we refer to as: 

Monitor mode, and 

Command mode 

In Monitor mode the console acts merely as a output device for displaying diagnostic messages from the debug kernel and debug versions 
any other of system modules that write messages to the debugger's COM port. In this mode it is not possible to enter Kernel Debugger 
commands without having first switched to command mode. In monitor mode the system runs more or less as a retail system except for the 
performance overheads imparted by the additional diagnostic code. 

Monitor mode is in effect initially unless a KDB.INI file is defined. 

The console switches to monitor mode after G command is executed. 

In Command mode normal system execution is suspended. The debug component of the kernel monitors the debugging console for 
command input and indicates this with using one of the following command prompts: 

> Signifies that the system has been suspended while in real mode. 

# Signifies that the system has been suspended while in protect mode with paging disabled. 

Signifies that the system has been suspended while in V86 mode with paging disabled. 

## Signifies that the system has been suspended while in protect mode with paging enabled. 

Signifies that the system has been suspended while in V86 mode with paging enabled. 

In addition to these prompts the Kernel Debugger also uses a data prompt when a commands require additional input. This is signified by a 
single colon prompt :. Commands such as R and E may use a data prompt. 

Command mode is entered when one of the following events occur: 

A fatal exception while executing in ring 0 

Any unrecoverable exception occurring in a device driver, file system driver or the OS/2 kernel will result in a fatal 
error if it is allowed to be intercepted by the system exception handlers. When this occurs it is usually not possible to 
restore the system to a running state. 

The VTF command may be used to intercept potentially fatal exceptions before the system's exception handlers 
receive control. If the exception condition is corrected manually then the system may continue to run after the G 
command is entered. See Trap and Exception Processing for further information. 

An Internal Processing Error (IPE) occurs. 

Internal processing errors are unrecoverable conditions that are detected by the OS/2 kernel. Some of these are 
exceptions (described in the previous bullet); others are inconsistencies that arise from invalid logical conditions or 
invalid system data. Under the retail kernel IPEs result in the system halting. Under the debug kernel the console 
enters command mode after an error message is displayed. IPE messages may be suppressed from displaying as a 
hard error popups by setting the byte at symbol: fDebugOnly to a non-zero value. Under the debug kernel some 
IPEs are generated for recoverable conditions and allow the system to continue execution after the G command is 
entered. An example of a recoverable IPE is where the loader detects a bad or mismatched symbol file for a module 
it is loading. When this occurs the system displays message: 

Internal Symbol Error 


Command mode is entered. If the G command is subsequently issued the system will be allowed to continue 
execution without the bad symbol file being activated. 

A st/cky breakpoint fires 

St/cky breakpoints are set using the BP and BR commands. The system is may be returned to a running state after 
the G command is entered. 

An unhandled non-maskable interrupt (NMI). 

NMIs normally signal hardware error conditions. Under the RETAIL kernel these usually result in TRAP 2 fatal 
exceptions unless an NMI handler has been registered by a device driver. Under the debug kernel, unhandled NMIs 
cause control to be given to the debugging console from which it is possible to return the system to a running state 
using the G command. 


NMIs are may be generated from several sources, which include: 


Channel Check 


This occurs when an I/O card activates the channel check signal. 


Memory parity error 

This occurs when memory capable of parity bit generation, detects a parity 
discrepancy as memory is fetched from RAM. 

DMA bus time-out. 

This occurs when a DMA-driven device uses the bus for longer than the maximum 
allowed period of 7.8 microseconds. 


The watchdog timer interrupt. 

This occurs when the NMI watchdog (NWD) is enabled and timer interrupts (IRQ 
0) are disabled causing loss of timer ticks. OS/2 maintains an NWD count, which If 
exceeds a maximum value then an IPE is generated. Some hardware/BIOS also 
maintains an NWD counter, but the precise details of the NWD mechanism are 
machine specific. For some systems the NWD may not be supported. For further 
information refer to the appropriate hardware and BIOS reference literature for the 
machine type under consideration. 

Unless the NMI is masked off using by setting mask bit 0x80 in I/O port 0x70, the NMI channel check provides a 
means of breaking into the system even when it is disabled for (maskable) interrupts, that is, when the CLI instruction 
has been used to clear the interrupt flag in the EFLAGS register. An an ISA-bus system a prototype card may be 
used to implement the following circuit, which provides an NMI push-button switch: 

(-IOCHK) 

A1 


(NMI Push switch) 


B1 

(Ground) 


Note: 


OS/2 normally only disables NMIs during system initialisation and when the Kernel Debugger is running in 
command mode. However, the Kernel Debugger will allow only one attempt to break in using a channel check 
NMI, after which NMIs are disabled until the system is re-booted. 

An INT 3 instruction is executed 

INT 3 instructions are used by the system to implement tracing (see The System Trace Facility) and software 
breakpoints. However any program may use INT 3 instructions freely under the Kernel Debugger to cause system 
execution to be suspended and the debugging console to switch to command mode. 

Note: 


Under the RETAIL kernel, INT 3 instructions other than those implemented by the system for tracing cause 
code to be terminated with a TRAP 3 exception. 

The user enters Ctrl-C from the debugging console. 

Unless the system is in a disabled state, the user may type Ctrl-C from the debugging console at any time to cause 
immediate suspension of normal system execution and the console to switch to command mode. 

The user holds down the r-key from the debugging console at system initialisation time. 

If the r-key is held down at system initialisation time the debugging console will switch to command mode shortly 
after the OS2KRNL has entered real-mode for the first time. At this time no symbols have been loaded, paging has 
never been enabled and the KDB.INI file has not been processed. 

Note: 


In real-mode many of the Kernel Debugger external commands are not available (because the rely on Virtual 
Memory Management to be initialised). Attempts to use them may cause unpredictable results or even total 
system failure. 

The holds down the p-key at the debugging console at system initialisation time. 

If the p-key is held down at system initialisation time the debugging console will switch to command mode shortly 
after the OS2KRNL has entered protect-mode for the first time. At this time no symbols have been loaded, paging is 
disabled and the KDB.INI file has not been processed. 

The user holds down the Space-bar from the debugging console at system initialisation time. 


If the space-bar is held down at system initialisation time the debugging console will switch to command mode 
shortly after the OS2KRNL has entered protect-mode and fully initialised. At this time OS2KRNL symbols have been 
loaded and paging is enabled but the KDB.INI file has not been processed. 

The KDB.INI file is processed. 

If the KDB.INI file is present then the Kernel Debugger effectively enters command mode by executing Kernel 
Debugger commands from the KDB.INI file. After the last command is executed, the command prompt appears at 
the debugging console, unless that last command was a G command. 


Controlling Output to the Debugging Console 


In both monitor and command mode the following control key sequences are supported: 

Ctrl-C 

Will cancel the currently running command and return the console to command mode. 


Ctrl-S 


Will temporarily suspend output to the debuggging console and suspend system execution. 


Ctrl-Q 

Will resume system execution and output to the debugging console. 

Note: Ctrl-Q and Ctrl-S correspond to the ACSII asynchronous communications control characters: XON and XOFF. These may be used by 
any terminal emulator, which interfaces with the the Kernel Debugger, as a data pacing mechanism. 


Optional System Diagnostic Facilities 


Several system components implement optional diagnostic facilities under the debug kernel. These cause additional checking and in some 
cases detailed information to be displayed at the debugging console when certain debug flags switches are set. 

Note: 

Debugging switches are not a formally architected feature of the OS/2 operating system. They are provided primarily for use by OS/2 
developers in debugging and testing the system. They are therefore subject to change or withdrawal without any notice whatsoever. 

In this section the following logging facilities are described: 

Forcing a System Dump from the Kernel Debugger 
Virtual Memory Management Lock Trace 
Virtual Memory Fleap Validation 
Loader Logging Facility 
DosDebug Logging Facility 
DosPTrace Logging Facility 


Forcing a System Dump from the Kernel Debugger 


Sometimes the situation arises where neither a kernel debug session or a system dump alone are sufficient to analyse a problem. Typically 


this occurs with problems where evidence of the cause has been removed from the system before the problem occurrence becomes 
recognised but the problem itself requires lengthy analysis even when the causal conditions are intercepted. Examples of this are problems 
where: 


Storage overlays, may not be noticed until the valid owner of the storage traps at some later time. 

A program terminates apparently normally, but unexpectedly. 

A deadlock or hang occurs because a resource owner forgets to release ownership of a shared resource. 

If the problem is such the there are readily identifiable criteria that allow it to be intercepted closer to its cause, for example by using 
breakpoints under the Kernel Debugger, then being able to take a dump at such a point can be advantageous. 

The simplest technique for initiating a system dump is to enter the .SYSDUMP command , which is new from fix pack 29 for Warp 3.0 and 
base Warp 4.0. Prior to these releases other techniques have to be employed. The simplest of these is to type the dump key sequence 
(Ctrl-Ait-Numlock-Numlock or Ctrl_Alt_F10_F10) from the keyboard of the system undertest while the debugger is in console mode. Then 
type the G command from the debug console. The keyboard interrupt will be serviced and the standalone dump procedure initiated. 

In an unattended situation a manually initiated dump may not be feasible. The following techniques discuss how to initiated the system dump 
in a more automated fashion. In some cases it may be possible to set up the command automation from the KDB.INI initialisation file. 

The system dump is initiated when the kernel routine RASRST (RAS restart) is called. Normally this occurs from ring 0 when exception 
management intercepts a trap and TRAPDUMP is coded in the CONFIG.SYS file or when the keyboard device driver (KDB.SYS) intercepts 
a Ctrl-Alt-Numlock-Numlock or Ctrl-Alt-FI 0-F1 0 sequence. From ring 3 RASRST is called indirectly via the Dos32ForceSystemDump 
API since RASRST is not addressable from any user code selectors. The Kernel Debugger G command allows an address to be specified 
where execution is to continue from, which provides a means calling the system dump routine from the debugging console. Before using this 
technique, the following points must be understood: 

RASRST is not addressable from user code selectors since they have an upper address boundary of at most 51 2M. 

RASRST requires to be executed using a 16-bit code selector. 

RASRST requires a ring 0 stack selector to be active 
Dos32ForceSystemDump requires a 32-bit code selector, such as 5b. 

On some early versions of OS/2 2.1 Dos32ForceSystemDump is unreliable. 

The symbol Dos32ForceSystemDump occurs in both DOSCALL1 .DLL and the callgate entry point in OS2KRNL. 

From ring 0 the following command will generally be successful in initiating a system dump: 


g =rasrst 


From ring 2 or ring 3, 32-bit code the following commands will be successful providing Dos32ForceSystemDump is working correctly. The 
address of DOSCALL1 :DOS32FORCESYSTEMDUMP is determined first, then a call to Dos32ForceSystemDump is made: 

In dos32 f orcesystemdump 

%la027c78 doscalll : FLAT32 : DOS32FORCESYSTEMDUMP 
g =la027c78 


For 1 6-bit application code the CS register must be to to a value that will address DOSCALL1 .DOS32FORCESYSTEMDUIVIP. A suitable 
selector would be 5b for ring-3 code and 5a for ring-2. So, for 1 6-bit code this procedure becomes: 

In dos32 f orcesystemdump 

%la027c78 doscalll : FLAT32 : DOS32FORCESYSTEMDUMP 
r cs 5b (or r cs 5a) 

g =la027c78 


If TRAPDUMP is in effect then a dump can be forced by causing an immediate trap. The most effective way to achieve this is to set the 
current SS selector to 0 using the R command. For example: 


r ss=00 

g 


If you wish to trap an application the very next time it runs in user mode then use .R to determine the user registers and set a breakpoint on 
CS:EIP in the context of the application's thread slot and specify that SS be set to zero when the breakpoint fires. For example: 


.p 2d 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

002d 000b 0002 000b 0001 blk 0200 7b700000 7b8c68fc 7b8acb60 leb8 14 mrfilepm 


##.r 2d 

eax=00000000 ebx=00000000 ecx=0000aa37 edx=0000a9ef esi=00090bff edi=00090000 
eip=0000272d esp=0000b228 ebp=0009b230 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02f ss=004f ds=a9ef es=be47 fs=150b gs=0000 cr2=1704b000 cr3=001d9000 

doscalll : CONFORM1 6 : postDOSSEMWAIT : 

002d|d02f:0000272d c9 leave ;br0 


##bp d02f:272d,"j wo (tasknumber) ==2d, ’ . r; r ss=0;g';g" 
##g 


eax=00000000 ebx=00000014 ecx=0009a9ef edx=0000a9ef esi=00090bff edi=00090006 
eip=0000272d esp=0000b230 ebp=0009b230 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02f ss=004f ds=a9ef es=be47 fs=150b gs=0000 cr2=01550000 cr3=001d9000 

d02f : 0000272e ca0800 retf 0008 


Symbols linked (calc) 
DelayHardError SYS3171: 4 
Pid 000b Tid 0001 Slot 
C : \ OS 2 TOOLS \ MRFILEPM . EXE 
C0000005 
la05272d 
Pl=00000008 
EAX=00000000 
ESI=00090bf f 
DS=a9ef DSACC=00f 3 
ES=be47 ESACC=00f 3 
FS=150b FSACC=00f 3 
GS=0000 GSACC=**** 

CS :EIP=d02f : 0000272d 
SS : ESP=0000 : 0000b230 


string (s) : 

002d HobMte 03be 


P2=6d640000 P3=XXXXXXXX P4=XXXXXXXX 
EBX=00000014 ECX=0009a9ef EDX=0000a9ef 
EDI=00090006 

DSLIM=00000f f f 
ESLIM=000017f5 
FSLIM=00000030 
GSLIM=******** 

CSACC=00df CSLIM=000054a3 
SSACC=**** SSLIM=******** 


EBP=0009b230 FLG=00002386 


DOSCALLl.DLL 0005 : 0000272d 


This technique will successfully terminate an application. If TRAPDUMP is set appropriately then a system dump will be taken. 

If TRAPDUMP is not correctly set for taking dumps, it may be dynamically modified from the debugging console. Symbol DumpDevice 
specifies the dump partition or drive letter (without the colon) and DUMP_ON is a flag byte that take values 0, 1 or 2 to specify whether 
TRAPDUMP is OFF, ON or R0 respectively. Use the E command to modify to these fields according to needs. For example, if we wish to 
set the equivalent of TRAPDUMP R0,F after system initialisation then the following command sequence would achieve this: 

e dump_on 2 
e dumpdevice "F" 


When examining a dump taken by calling RASRST, directly or indirectly, using the G command then the registers at the time the Kernel 
Debugger was last entered can be found at label _RegSA. The format of this save area is as follows. 

Before fix pack 29 for Warp 3.0 and base Warp 4.0: 


Offset 

Register mnemonic 

+ 0 

EAX 

+ 4 

EBX 

+ 8 

EXC 

+c 

EDX 

+ 10 

ESP 

+ 14 

EBP 

+ 18 

ESI 

+ 1 c 

EDI 


+ 20 

ES 

+ 22 

SS 

+ 24 

DS 

+ 26 

FS 

+ 28 

GS 

+2a 

EIP 

+2e 

CS 

+30 

reserved 

+34 

EFLAGS 

+38 

MSW 

+3c 

GTD limit 

+3e 

GTD base 

+42 

reserved 

+44 

IDT limit 

+46 

IDT base 

+4a 

reserved 

+4c 

LDTR 

+4e 

TR 

+50 

CR2 

+54 

CR3 

+58 

DRO 

+5c 

DR1 

+ 60 

DR2 

+ 64 

DR3 

+ 68 

DR4 

+ 6c 

DR5 

+70 

DR6 

+74 

DR7 

+78 

reserved 

+7c 

TR6 

+ 80 

TR7 


From fix pack 29 for Warp 3.0 and base Warp 4.0: 

Offset Register mnemonic 
+ 0 EAX 

+ 4 EBX 

+ 8 EXC 


+c 


EDX 



+ 10 

ESP 

+ 14 

EBP 

+ 18 

ESI 

+ 1 c 

EDI 

+20 

ES 

+ 22 

SS 

+ 24 

DS 

+ 26 

FS 

+ 28 

GS 

+ 2a 

EIP 

+2e 

CS 

+30 

reserved 

+34 

EFLAGS 

+38 

MSW 

+3c 

GTD limit 

+3e 

GTD base 

+42 

reserved 

+44 

IDT limit 

+46 

IDT base 

+4a 

reserved 

+4c 

LDTR 

+4e 

TR 

+50 

CR2 

+54 

CR3 

+58 

CR4 

+5c 

DRO 

+ 60 

DR1 

+ 64 

DR2 

+ 68 

DR3 

+ 6 c 

DR4 

+70 

DR5 

+74 

DR6 

+78 

DR7 

+7c 

reserved 

+ 80 

TR6 

+ 84 

TR7 


Virtual Memory Management Lock Trace 



Virtual Memory Management implements a logging function that records successful attempts to lock and unlock memory pages. 

Memory locking and unlocking is implemented by the Memory Management routines: VMLockMem and VMUnlock. This routine is available 
directly to all kernel components and indirectly to device drivers through: 

DevHIpLock 

DevHIpUnlock 

DevHIpVMLock 

DevHIpVMUnlock 

and to file system drivers through: 

MFSHLock 

MFSHUnlock 

The VM lock trace is activated by setting bit 0 of the VM log flag double-word to 1 . The flag double word is located at symbol: 

_VMLogFlags. Since no function is currently assigned to the other bit positions so the lock log may be effectively turned on by setting the 
byte a _VMLogFlags to Oxff as in the following example: 


e _vmlogflags 
%fff 0127c 00. 

ff 
##g 

L base fff32 size 2 flags 1 hob 16 hptda 3b9 ret fff3e551 

L base 15e0 size 1 flags 4 hob 4a4 hptda 91 ret fff5a93c 
L base 3f size 1 flags 4 hob 188 hptda 91 ret fff5a93c 
U base 15e0 size 1 flags 4 hob 4a4 hptda 91 ret fff5a983 
U base 3f size 1 flags 4 hob 188 hptda 91 ret fff5a983 
L base 15e0 size 1 flags 4 hob 4a4 hptda 91 ret fff5a93c 
L base 3f size 1 flags 4 hob 188 hptda 91 ret fff5a93c 
U base 15e0 size 1 flags 4 hob 4a4 hptda 91 ret fff5a983 
U base 3f size 1 flags 4 hob 188 hptda 91 ret fff5a983 
L base fff35 size 3 flags 1 hob 16 hptda 4a4 ret fff3e551 

L base fe79c size 4 flags 0 hob 3 hptda 380 ret fff49ec6 

U base fe79c size 4 flags 0 hob 3 hptda 380 ret fff3dl73 



0x01 Lock is a long-term 

0x02 Verify lock call 


0x04 


Lock originated from a DevHlp 



hob 

hptda 

ret 


The hob of the memory object whose pages are being locked or unlocked. 
The hptda of the process that requested the memory lock or unlock. 

The return address from VMLockMem, that is, the address of the caller. 

Note: 


The return address is unfortunately of limited use since most calls to VMLockMem are made via a limited 
number of interface routines. In particular, DevHIp lock requests are made via dhw_VMLock and 
SegLockDM. Unless one can trace in addition the SS:ESP on entry to VMLock, the lock trace alone will be 
insufficient to solve memory locking problem. One possible way of providing more information is to 
supplement the lock trace with following breakpoint commands: 

##bp _vmunlock+l , "k ss:sp;g" 

##bp _vmlockmem+l , "k ss:sp;g" 

##g 

0170 : fff3e551 fff32d68 00001281 10000000 ffe0068f CodeLockProc + 7c 

L base fff32 size 2 flags 1 hob 16 hptda 3b9 ret fff3e551 

0170 : fff5a93c 015f0000 OOOOOOOe 40000000 fe7958c6 _dhw_VMLock + dc 

0170 : fff3db40 40000000 015f0000 OOOOOOOe fe7958c6 

0170:00000155 01550000 62d61a84 00000003 5ab40000 

L base 15f0 size 1 flags 4 hob 5de hptda 91 ret fff5a93c 

0170 : fff5a93c 0003fl98 0000000b 40000000 fe795be0 _dhw_VMLock + dc 

0170 : fff3db40 40000000 0003fl98 0000000b fe795be0 

0170:00000055 00550000 62d61a84 00000003 5ab40000 

L base 3f size 1 flags 4 hob 196 hptda 91 ret fff5a93c 

0170 : fff5a983 fe7958c6 00002796 083082fc fe7958c6 _dhw_VMUnlock + 3a 

0170 : fff3db4c fe7958c6 OOOOlafO 00001100 00000056 

0170:00000003 5b030000 08300000 f2a40000 08489254 

U base 15f0 size 1 flags 4 hob 5de hptda 91 ret fff5a983 

0170 : fff5a983 fe795be0 000008c6 0830823f fe795be0 _dhw_VMUnlock + 3a 

0170 : fff3db4c fe795be0 OOOOlafO 00001100 0000ff56 

0170:00000003 5b030000 08300000 f2a40000 08489254 

U base 3f size 1 flags 4 hob 196 hptda 91 ret fff5a983 

0170 : fff5a93c 015f0000 00000dd6 40000000 fe7958c6 _dhw_VMLock + dc 

0170 : fff3db40 40000000 015f0000 00000dd6 fe7958c6 

0170:00000155 01550000 62d61a84 00000003 5ab40000 

L base 15f0 size 1 flags 4 hob 5de hptda 91 ret fff5a93c 

0170 : fff5a93c 0003fl98 0000000b 40000000 fe795be0 _dhw_VMLock + dc 

0170 : fff3db40 40000000 0003fl98 0000000b fe795be0 

0170:00000055 00550000 62d61a84 00000003 5ab40000 

L base 3f size 1 flags 4 hob 196 hptda 91 ret fff5a93c 

0170 : fff5a983 fe7958c6 00002796 083082fc fe7958c6 _dhw_VMUnlock + 3a 

0170 : fff3db4c fe7958c6 OOOOlafO 00001100 0000ff56 

0170:00000003 5b030000 08300000 f2a40000 08489254 

U base 15f0 size 1 flags 4 hob 5de hptda 91 ret fff5a983 

0170 : fff5a983 fe795be0 000008c6 0830823f fe795be0 _dhw_VMUnlock + 3a 

0170 : fff3db4c fe795be0 OOOOlafO 00001100 0000ff56 

0170:00000003 5b030000 08300000 f2a40000 08489254 

U base 3f size 1 flags 4 hob 196 hptda 91 ret fff5a983 

0170 : fff3e551 fff351dc 000022f5 10000000 ffe0053f CodeLockProc + 7c 

L base fff35 size 3 flags 1 hob 16 hptda 3b9 ret fff3e551 

0170 : fff4a218 ffe0053f ffe0052b 00082006 00000000 _CodeLockHook + 2c 

0170 : fff42df7 ffffffff ffffffff 7b71ff40 7b71ff40 KMDispatchHook + a3 

U base fff35 size 3 flags 1 hob 16 hptda 3b9 ret fff4a218 

0170 : fff4a218 ffe0068f ffe0067b 00082006 00000006 _CodeLockHook + 2c 

0170 : fff42df7 ffffffff ffffffff 7b71ff40 7b71ff40 KMDispatchHook + a3 

U base fff32 size 2 flags 1 hob 16 hptda 3b9 ret fff4a218 


Given that the K command rapidly looses synchronisation with the correct stack frame pointer one may have 
to resort to using: 


##bp _vmunlock+l, "dw ss:sp 180;g" 
##bp _vmlockmem+l, "dw ss:sp 180;g" 


Refer to the Kernel Debugger K command and BP command for further information. 


Related information on memory locking may be found under the description of the Kernel Debugger .MO command. 

The latest versions of OS/2 2.1 1 and OS/2 3.0 have implmented a new Kernel Debugger command that facilitates an alternative method for 
analysing memory locking problems. See the Kernel Debugger .MK command command for details. 


Virtual Memory Management System Heap Validation 


The system will perform additional validation of the kernel heap structures under the debug kernel if the byte at label: _vmkhGflags is set to 
a non-zero value. 

There is a noticeable performance overhead when this option is activated. Therefore it is recommended that it is only used when a heap 
corruption problem is suspected. 

The system will validate the linkages between various heap structures. If an error is detected then an IPE is generated with one of the 
following messages: 

VMKSH: Invalid hint pointers 

VMKSH: Invalid number of ksh descriptors 

VMKSH: Invalid number of ksh blocks 

Invalid heap block header at addr: ssss:oooooooo 

Preceding block at addr: ssss:oooooooo 

No preceding block 


System Loader Logging Facility 


The system loader provides optional logging and checking under the debug kernel. These optional facilities may be activated selectively by 
setting bits in the _LdrDebugFlags flags double-word as follows: 

Note: 

The flags described are those implemented in OS/2 Warp V3.0. Slightly different, similar messages are generated for earlier 
releases of OS/2. 


0x00000001 

This will cause the Loader to break into the debugger using an INT 3 instruction if any of the following error 
conditions are detected: 

Not enough memory 

Caching error 

Invalid Ordinal 

Procedure not found 

Bad EXE format 

Invalid segment number 

Invalid CALLGATE 

Network Disconnected 


0x00000002 


This will generate log entries when LDRGetPage exits with a non-zero return code. LDRGetPage is called to 


demand load a page within a object of a load module. The message logged is of the following form: 


IdrGP bad cr2=nnnnnnnn rc=mininininininin 

cr2= is the page fault address and rc= is the LDRGetPage return code. 

0x00000004 

This generates log entries when LDRGetPage is called to demand load a page within a object of a load module. The 
message logged is of the form: 

IdrGP cr2=nnnnnnnn hMTE=hhhh bno=oo 
name=pppppppppppppppp 


cr2= 

is the page fault address, 

hMTE= 

is the module's hmte, 

bno= 

is page number with in the module 

name= 

is the module's full name taken from the SMTE. 


0x00000018 

This switch causes log information to be generated when DLL modules are loaded and initialised. The following 
messages are logged: 

IdrDLM entry - slot ssss ptda pppppppp 


IdrDLM name 

- slot ssss name nnnnnnnn 

IdrDLM free 

- slot ssss 

IdrDLM exit 

- slot ssss 


tk SD has-init slot=ssss 
tk SD no-init slot=ssss 
tk SD pre-inc slot=ssss cnest=nnnn 
tk IN pre-dec slot=ssss cnest=nnnn 
tk Lin slot=ssss cnest=nnnn 


slot 

is the thread slot in which the DLL is being processed, 

ptda 

is the address of the PTDA for this slot 

name 

is the DLL module name 

cnest 

Nesting counter for TKLibiStartDispatch 

IdrDLM entry 

marks entry to wjoadmodule, the DosLoadModule worker routine. 

IdrDLM name 

marks the successful request for the DLL initialisation mutex semaphore 
(ptda_DLMsem (PTDA +0x4ac (H/R: +0x4a8))). 

IdrDLM free 

marks the release of the mutex semaphore. Exit marks the exiting of 

wjoadmodule. 

IdrDLM exit 

marks the exit from wjoadmodule. 

tk SD 

marks events in TKLibiStartDispatch. 

tk IN and tk Lin 

Mark events in TKLinilnitNextDLL 


0x00000080 

This switch requests import initialisation be recorded. Messages of the following format are generated 

lpi, Recording init hMTE=hhhh, f lagsl=f f f f f f f f , name=nnnnnnnnn 


lpi, Skipping init hMTE=hhhh, f lagsl=f f f f f f f f , name=nnnnnnnnn 


lpi, Processing imports slot=ssss, module=nnnnnnnnn 


lrm, Recording init hMTE=hhhh, f lagsl=f f f f f f f f , name=nnnnnnnn 
lrm, Skipping init hMTE=hhhh, f lagsl=f f f f f f f f , name=nnnnnnnnn 


hMTE is the module handle 

flagsl are the flags MTE flags field. (See the .LM command for details), 

name is the full module name taken from the SMTE. 

module is the full module name taken from the SMTE. 

lpi, Recording init 

Logs the processing of system DLL imports from the system DLL names table in 
EXE file loading. 

lpi, Skipping init 

Logs system DLL names not imported in EXE file loading. 

lpi, Processing imports 

Logs the processing of DLL initialisation as the result of imports being present in 
an EXE module. 

lrm, Recording init 

Logs imported DLL initialisation being recorded. 

lrm, Skipping init 

Logs imported DLLs skipping initialisation. 

0x00000100 

Logs when the loader cannot load an object at the compiler/linker designated base address. The message logged 
appears as: 

Cannot load nnnnnnnn at the requested base address 


where nnnnnnnn is the module name. 

0x00000800 

Logs the processing of the DLL import tree. The following messages appear: 


lpi, Processing imports slot=ssss, module=nnnnnnnnn 
ldr walking tree hMTE=hhhh, name=nnnnnnnn 
ldr walking tree going down 
ldr walking tree going up 


lpi, Processing imports 

marks the initiation of the process for slot ssss and module nnnnnnnn . 

ldr walking tree hMTE=hhhh, name=nnnnnnnn 

marks the processing of an imported DLL, whose handle is hhhh and name is 
nnnnnnnn 

ldr walking tree going up 

marks a backward progression through the import tree. 

ldr walking tree going down 

marks a forward progression through the import tree. 


Example Loader Log 


The following is an example of a loader log where all logging options have been activated. This illustrates the loader activity recorded when 
the FAXWORK.EXE icon was clicked on: 

lpi Processing imports slot=0022, module=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree hMTE=05el , name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going down 

ldr walking tree hMTE=029a, name=H : \OS2\DLL\PMWIN . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \OS2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \OS2\DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029b, name=H : \OS2\DLL\MOUCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2\DLL\VI0CALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2\DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2\DLL\SESMGR . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=029a, name=H : \0S2\DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=05el , name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going down 

ldr walking tree hMTE=02b8, name=H : \0S2\DLL\PMSPL . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0104, name=H : \0S2\DLL\MSG . DLL 
ldr walking tree going up 

ldr walking tree hMTE=02b8, name=H : \0S2\DLL\PMSPL . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02be, name=H : \0S2\DLL\SPL1B.DLL 
ldr walking tree going up 

ldr walking tree hMTE=02b8, name=H : \0S2\DLL\PMSPL . DLL 
ldr walking tree going up 

ldr walking tree hMTE=05el , name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going down 

ldr walking tree hMTE=0419, name=H : \0S2\DLL\HELPMGR . DLL 
ldr walking tree going up 

ldr walking tree hMTE=05el , name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going down 

ldr walking tree hMTE=02ac, name=H : \0S2\DLL\PMDRAG . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02a3, name=H : \0S2\DLL\PMCTLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=02ac, name=H : \0S2\DLL\PMDRAG . DLL 
ldr walking tree going up 

ldr walking tree hMTE=05el , name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going down 

ldr walking tree hMTE=0279, name=H : \0S2\DLL\PMWP . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029d, name=H : \0S2\DLL\ IMP . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0279, name=H : \0S2\DLL\PMWP . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02a8, name=H : \0S2\DLL\SEAMLESS . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02bl , name=H : \0S2\DLL\PMVI0P . DLL 
ldr walking tree going up 

ldr walking tree hMTE=02a8, name=H : \0S2\DLL\SEAMLESS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0279, name=H : \0S2\DLL\PMWP . DLL 
ldr walking tree going down 



ldr walking tree hMTE=02ad, name=H : \0S2\DLL\S0M. DLL 
ldr walking tree going up 

ldr walking tree hMTE=0279, name=H : \0S2 \DLL\PMWP . DLL 
ldr walking tree going up 

ldr walking tree hMTE=05el, name=H : \ FAXWORKS \ FAXWORKS . EXE 
ldr walking tree going up 

lrm, Skipping init hMTE=05el , f lagsl=20903150, name=H : \ FAXWORKS \ FAXWORKS . EXE 
lrm, Skipping init hMTE=0279, f lagsl=e4 98b3 94 , name=H : \0S2\DLL\PMWP . DLL 
lrm. Skipping init hMTE=02ad, f lagsl=e4 98b396, name=H : \0S2\DLL\S0M. DLL 
lrm. Recording init hMTE=02a8 , f Iagsl=e098b395, name=H : \0S2 \ DLL \ SEAMLESS . DLL 
lrm. Skipping init hMTE=02bl, f lagsl=a4 98b395, name=H : \0S2\DLL\PMVI0P . DLL 
lrm. Skipping init hMTE=029d, f lagsl=2098b398, name=H : \0S2\DLL\IMP . DLL 
lrm. Skipping init hMTE=02ac, f lagsl=a4 98b388 , name=H : \0S2\DLL\PMDRAG . DLL 
lrm. Skipping init hMTE=02a3 , f lagsl=e4 98b394 , name=H : \0S2\DLL\PMCTLS . DLL 
lrm. Skipping init hMTE=0419, f lagsl=aO 98b3 9a, name=H : \0S2\DLL\HELPMGR.DLL 
lrm, Skipping init hMTE=02b8, f lagsl=e4 98b394 , name=H : \0S2\DLL\PMSPL . DLL 
lrm, Skipping init hMTE=02be, f Iagsl=a098b398, name=H : \0S2\DLL\SPL1B . DLL 
lrm. Skipping init hMTE=0104, f lagsl=2098b388, name=H : \0S2\DLL\MSG . DLL 
lrm. Skipping init hMTE=029a, f lagsl=2098b388, name=H : \0S2\DLL\PMWIN . DLL 
lrm. Skipping init hMTE=0281, f lagsl=e4 98b3 94 , name=H : \0S2\DLL\PMMERGE . DLL 
lrm. Skipping init hMTE=0111, f lagsl=2098b388, name=H : \0S2\DLL\SESMGR.DLL 
lrm. Skipping init hMTE=029c, f lagsl=2098b388, name=H : \0S2\DLL\PMSHAPI . DLL 
lrm, Skipping init hMTE=0262, f lagsl=2098b388, name=H : \0S2\DLL\NLS . DLL 
lrm, Skipping init hMTE=01e5, f lagsl=2098b388, name=H : \0S2\DLL\VI0CALLS . DLL 
lrm, Skipping init hMTE=02 9b, f lagsl=2098b388, name=H : \0S2\DLL\M0UCALLS . DLL 
lrm, Recording init hMTE=0293, f lagsl=e4 98b394 , name=H : \0S2\DLL\PMGPI . DLL 
lpi. Recording init hMTE=0279, f lagsl=e4 98b394 , name=H : \0S2\DLL\PMWP . DLL 
lpi, Recording init hMTE=02ad, f lagsl=e4 98b396, name=H : \0S2\DLL\S0M. DLL 
lpi. Recording init hMTE=02bl, f lagsl=a4 98b395, name=H : \0S2\DLL\PMVI0P . DLL 
lpi, Recording init hMTE=02a3 , f lagsl=e4 98b394 , name=H : \0S2 \DLL\PMCTLS . DLL 
lpi. Recording init hMTE=02ac, f lagsl=a4 98b388 , name=H : \0S2\DLL\PMDRAG . DLL 
lpi, Recording init hMTE=02b8, f lagsl=e4 98b394 , name=H : \0S2\DLL\PMSPL . DLL 
lpi. Recording init hMTE=0281, f lagsl=e4 98b394 , name=H : \0S2 \DLL\PMMERGE . DLL 
lpi, Recording init hMTE=00f 2 , f lagsl=84 98b7 94 , name=H : \0S2 \DLL\D0SCALL1 . DLL 
IdrGP cr2=ffe3b000 hMTE=5el bno=85 

name = H:\FAXWORKS\FAXWORKS.EXE 
tk SD has-init slot=22 
IdrGP cr2=13fa0000 hMTE=f2 bno=2b 

name = H:\0S2\DLL\D0SCALL1.DLL 
IdrGP cr2=13fal000 hMTE=f2 bno=2c 

name = H:\0S2\DLL\D0SCALL1.DLL 
IdrGP cr2=13fc0000 hMTE=f2 bno=2e 

name = H:\0S2\DLL\D0SCALL1.DLL 
IdrGP cr2=13e30000 hMTE=281 bno=106 
name = H:\0S2\DLL\PMMERGE.DLL 
IdrDLM entry - slot 36 ptda ab99a000 
IdrDLM name - slot 36 name H:\0S2\DLL\PMATM.DLL 
lpi Processing imports slot=0036, module=H : \0S2\DLL\PMATM. DLL 
ldr walking tree hMTE=0354, name=H : \0S2 \DLL\PMATM . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \0S2 \DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029a, name=H : \0S2 \DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9b, name=H : \0S2 \DLL\MOUCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2 \DLL\VIOCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2 \DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2 \DLL\SESMGR . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=029c, name=H : \0S2 \DLL\PMSHAPI . DLL 



ldr walking tree going up 

ldr walking tree hMTE=0354, name=H : \0S2\DLL\PMATM.DLL 
ldr walking tree going up 

lrm, Recording init hMTE=0354, f lagsl=64 98b3c5, name=H : \0S2\DLL\PMATM. DLL 

Irm, Skipping init hMTE=029c, f lagsl=2098b388, name=H : \0S2\DLL\PMSHAPI . DLL 

tk SD has-init slot=36 

tk SD pre-inc slot=36 cnest=l 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

tk Lin slot=36 cnest=l 

IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name DISPLAY 

lpi Processing imports slot=0036, module=H : \0S2\DLL\DISPLAY . DLL 
ldr walking tree hMTE=034b, name=H : \0S2\DLL\DISPLAY . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \0S2\DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9a, name=H : \0S2\DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9b, name=H : \0S2\DLL\M0UCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2\DLL\VI0CALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2\DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2\DLL\SESMGR.DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=034b, name=H : \0S2\DLL\DISPLAY . DLL 
ldr walking tree going up 

lrm, Recording init hMTE=034b, f lagsl=24 98b394 , name=H : \0S2 \DLL\DISPLAY . DLL 

tk SD has-init slot=36 

tk SD pre-inc slot=36 cnest=l 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=13ef0000 hMTE=34b bno=6 

name = H:\0S2\DLL\DISPLAY.DLL 
tk Lin slot=36 cnest=l 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name IBMS332 

lpi Processing imports slot=0036, module=H : \OS2\DLL\IBMS332 . DLL 
ldr walking tree hMTE=0362, name=H : \OS2\DLL\IBMS332 . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0368, name=H : \0S2 \DLL\PMGRE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \0S2\DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029a, name=H : \0S2 \DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9b, name=H : \0S2 \DLL\MOUCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2 \DLL\VIOCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2 \DLL\PMMERGE . DLL 



ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2\DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2\DLL\SESMGR.DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0368, name=H : \0S2\DLL\PMGRE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0362, name=H : \OS2\DLL\IBMS332 . DLL 
ldr walking tree going up 

lrm, Skipping init hMTE=0362, f lagsl=2098b398, name=H : \OS2\DLL\IBMS332 . DLL 

lrm, Skipping init hMTE=0368, f lagsl=2098b388, name=H : \0S2\DLL\PMGRE . DLL 

tk SD no-init slot=36 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name H:\OS2\DLL\IBMS332.DLL 

tk SD no-init slot=36 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name dspres 

lpi Processing imports slot=0036, module=H : \0S2\DLL\DSPRES . DLL 
ldr walking tree hMTE=03 6a, name=H : \0S2\DLL\DSPRES . DLL 
ldr walking tree going up 

lrm, Skipping init hMTE=036a, f lagsl=2098b388, name=H : \0S2\DLL\DSPRES . DLL 

tk SD no-init slot=36 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name H:\0S2\DLL\C0METDLL.DLL 

lpi Processing imports slot=0036, module=H : \0S2\DLL\C0METDLL . DLL 
ldr walking tree hMTE=037e, name=H : \0S2\DLL\C0METDLL . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0368, name=H : \0S2\DLL\PMGRE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \0S2\DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029a, name=H : \0S2\DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9b, name=H : \0S2\DLL\M0UCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2\DLL\VI0CALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2\DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2\DLL\SESMGR.DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0368, name=H : \0S2\DLL\PMGRE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=037e, name=H : \0S2\DLL\C0METDLL . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0104, name=H : \0S2\DLL\MSG . DLL 
ldr walking tree going up 



ldr walking tree hMTE=037e, name=H : \0S2 \DLL\COMETDLL . DLL 
ldr walking tree going up 

Irm, Recording init hMTE=037e, f Iagsl=e098b396, name=H : \0S2\DLL\C0METDLL . DLL 

Irm, Skipping init hMTE=0104, f lagsl=2098b388, name=H : \0S2\DLL\MSG . DLL 

irm. Skipping init hMTE=0368, f lagsl=2098b388, name=H : \0S2\DLL\PMGRE . DLL 

irm, Skipping init hMTE=029a, f lagsl=2098b388, name=H : \0S2\DLL\PMWIN . DLL 

tk SD has-init slot=36 

tk SD pre-inc slot=36 cnest=l 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=13b30000 hMTE=37e bno=7 

name = H:\0S2\DLL\C0METDLL.DLL 
tk Lin slot=36 cnest=l 
IdrDLM entry - slot 36 ptda ab99a000 
IdrDLM name - slot 36 name PMSPL 
tk SD no-init slot=36 
IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=13d90000 hMTE=2b8 bno=31 
name = H:\0S2\DLL\PMSPL.DLL 
IdrGP cr2=13940000 hMTE=2a3 bno=7b 
name = H:\0S2\DLL\PMCTLS.DLL 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name PMSDMRI 

lpi Processing imports slot=0036, module=H : \0S2\DLL\PMSDMRI . DLL 
ldr walking tree hMTE=02c6, name=H : \0S2\DLL\PMSDMRI . DLL 
ldr walking tree going up 

irm, Skipping init hMTE=02c6, f lagsl=2098b388, name=H : \0S2\DLL\PMSDMRI . DLL 
tk SD no-init slot=36 
IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=13c65000 hMTE=2ad bno=lc 
name = H:\0S2\DLL\S0M.DLL 
IdrGP cr2=13f60000 hMTE=279 bno=bf 
name = H:\0S2\DLL\PMWP.DLL 
IdrGP cr2=13f40000 hMTE=279 bno=ba 
name = H:\0S2\DLL\PMWP.DLL 
IdrGP cr2=13f7d000 hMTE=279 bno=cf 
name = H:\0S2\DLL\PMWP.DLL 
tk Lin slot=36 cnest=0 
IdrGP cr2=47000 hMTE=5el bno=38 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e6000 hMTE=5el bno=55 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=54000 hMTE=5el bno=45 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=4a000 hMTE=5el bno=3b 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=ec000 hMTE=5el bno=5b 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=f0000 hMTE=5el bno=5f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=48000 hMTE=5el bno=39 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=52000 hMTE=5el bno=43 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e8000 hMTE=5el bno=57 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=f8000 hMTE=5el bno=67 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e7000 hMTE=5el bno=56 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=fl000 hMTE=5el bno=60 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=ee000 hMTE=5el bno=5d 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=49000 hMTE=5el bno=3a 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=ed000 hMTE=5el bno=5c 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=13000 hMTE=5el bno=4 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=115000 hMTE=5el bno=84 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=32000 hMTE=5el bno=23 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=el000 hMTE=5el bno=50 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=33000 hMTE=5el bno=24 



name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=4c000 hMTE=5el bno=3d 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=4b000 hMTE=5el bno=3c 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrDLM entry - slot 36 ptda ab99a000 
IdrDLM name - slot 36 name H:\FAXWORKS\FX044.LOL 
lpi Processing imports slot=0036, module=H : \FAXWORKS\FX044 . LOL 
ldr walking tree hMTE=0 60b, name=H : \FAXWORKS\FX04 4 . LOL 
ldr walking tree going up 

lrm. Skipping init hMTE=060b, f lagsl=2098blc8, name=H : \ FAXWORKS \FX0 4 4 . LOL 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name SND 

lpi Processing imports slot=0036, module=H : \MMOS2\DLL\SND . DLL 
ldr walking tree hMTE=00fe, name=H : \MMOS2 \DLL\SND . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9a, name=H : \OS2\DLL\PMWIN . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \OS2 \DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=02 9b, name=H : \OS2 \DLL\MOUCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \OS2 \DLL\VIOCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \OS2 \DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \OS2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \OS2 \DLL\SESMGR . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \OS2 \DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=029a, name=H : \OS2 \DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=00fe, name=H : \MMOS2 \DLL\SND . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0104, name=H : \OS2\DLL\MSG . DLL 
ldr walking tree going up 

ldr walking tree hMTE=00fe, name=H : \MMOS2 \DLL\SND . DLL 
ldr walking tree going up 

lrm. Recording init hMTE=00fe, f lagsl=6098b396, name=H : \MMOS2\DLL\SND . DLL 
lrm. Skipping init hMTE=0104, f lagsl=2098b388, name=H : \OS2\DLL\MSG . DLL 
lrm. Skipping init hMTE=029a, f lagsl=2098b388, name=H : \OS2\DLL\PMWIN . DLL 
lrm, Skipping init hMTE=029c, f lagsl=2098b388, name=H : \OS2 \DLL\PMSHAPI . DLL 
lrm. Skipping init hMTE=0262, f lagsl=2098b388, name=H : \OS2\DLL\NLS . DLL 
tk SD has-init slot=36 
tk SD pre-inc slot=36 cnest=l 
IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=13310000 hMTE=fe bno=12 
name = H:\MMOS2\DLL\SND.DLL 
IdrGP cr2=13311000 hMTE=fe bno=13 
name = H:\MMOS2\DLL\SND.DLL 
tk Lin slot=36 cnest=l 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name PMCTLS 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=45000 hMTE=5el bno=36 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=4e000 hMTE=5el bno=3f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178f5000 hMTE=60b bno=6 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=e2000 hMTE=5el bno=51 



name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178f6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178f5000 hMTE=60b bno=6 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=80000 hMTE=5el bno=49 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=3c000 hMTE=5el bno=2d 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=39000 hMTE=5el bno=2a 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=fc000 hMTE=5el bno=6b 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=f9000 hMTE=5el bno=68 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=fa000 hMTE=5el bno=69 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e4000 hMTE=5el bno=53 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e5000 hMTE=5el bno=54 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=fb000 hMTE=5el bno=6a 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=2a000 hMTE=5el bno=lb 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=2c000 hMTE=5el bno=ld 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=27000 hMTE=5el bno=18 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=4d000 hMTE=5el bno=3e 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=55000 hMTE=5el bno=46 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=e0000 hMTE=5el bno=4f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=10b000 hMTE=5el bno=7a 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=10c000 hMTE=5el bno=7b 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=f7000 hMTE=5el bno=66 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=lf000 hMTE=5el bno=10 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=20000 hMTE=5el bno=ll 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=ef000 hMTE=5el bno=5e 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=25000 hMTE=5el bno=16 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrDLM entry - slot 36 ptda ab99a000 
IdrDLM name - slot 36 name H:\FAXWORKS\Fax.adp 
lpi Processing imports slot=0036, module=H : \FAXWORKS\FAX . ADP 
ldr walking tree hMTE=0618, name=H : \ FAXWORKS \ FAX .ADP 
ldr walking tree going down 

ldr walking tree hMTE=029a, name=H : \0S2\DLL\PMWIN . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0293, name=H : \0S2\DLL\PMGPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029b, name=H : \0S2\DLL\M0UCALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=01e5, name=H : \0S2\DLL\VI0CALLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0262, name=H : \0S2\DLL\NLS . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=029c, name=H : \0S2\DLL\PMSHAPI . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going down 

ldr walking tree hMTE=0111, name=H : \0S2\DLL\SESMGR . DLL 



ldr walking tree going up 

ldr walking tree hMTE=0281, name=H : \0S2\DLL\PMMERGE . DLL 
ldr walking tree going up 

ldr walking tree hMTE=029a, name=H : \0S2\DLL\PMWIN . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0618, name=H : \FAXWORKS\FAX . ADP 
ldr walking tree going down 

ldr walking tree hMTE=0104, name=H : \0S2\DLL\MSG . DLL 
ldr walking tree going up 

ldr walking tree hMTE=0618, name=H : \ FAXWORKS \ FAX .ADP 
ldr walking tree going up 

lrm, Recording init hMTE=0618, f lagsl=60 90blc6 , name=H : \FAXWORKS\FAX . ADP 
lrm, Skipping init hMTE=0104, f lagsl=2098b388, name=H : \0S2\DLL\MSG . DLL 
lrm. Skipping init hMTE=029a, f lagsl=2098b388, name=H : \0S2\DLL\PMWIN . DLL 
lrm. Skipping init hMTE=029c, f lagsl=2098b388, name=H : \0S2\DLL\PMSHAPI . DLL 
lrm, Skipping init hMTE=0262, f lagsl=2098b388, name=H : \0S2\DLL\NLS . DLL 
tk SD has-init slot=36 
tk SD pre-inc slot=36 cnest=l 
IdrDLM free - slot 36 
IdrDLM exit - slot 36 
IdrGP cr2=178de000 hMTE=618 bno=f 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=178df000 hMTE=618 bno=10 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=10e72000 hMTE=618 bno=lc 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=178e6000 hMTE=618 bno=17 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=178e0000 hMTE=618 bno=ll 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=10e73000 hMTE=618 bno=ld 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=10e74000 hMTE=618 bno=le 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=178e5000 hMTE=618 bno=16 
name = H:\FAXWORKS\FAX.ADP 
tk Lin slot=36 cnest=l 
IdrGP cr2=178dl000 hMTE=618 bno=2 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=13e51000 hMTE=281 bno=118 
name = H:\0S2\DLL\PMMERGE.DLL 
IdrGP cr2=178db000 hMTE=618 bno=c 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=10e70000 hMTE=618 bno=la 
name = H:\FAXWORKS\FAX.ADP 
IdrGP cr2=114000 hMTE=5el bno=83 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=26000 hMTE=5el bno=17 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=14000 hMTE=5el bno=5 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=13f7e000 hMTE=279 bno=dO 
name = H:\0S2\DLL\PMWP.DLL 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name COMETDLL 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=86 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=11000 hMTE=5el bno=2 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=3b000 hMTE=5el bno=2c 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c7000 hMTE=60b bno=8 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c0000 hMTE=60b bno=l 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c0000 hMTE=60b bno=l 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c0000 hMTE=60b bno=l 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c0000 hMTE=5el bno=86 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 



IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=f6000 hMTE=5el bno=65 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=87 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=88 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c7000 hMTE=60b bno=8 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=13c80000 hMTE=419 bno=34 
name = H:\0S2\DLL\HELPMGR.DLL 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name HPMGRMRI 

lpi Processing imports slot=0036, module=H : \0S2\DLL\HPMGRMRI . DLL 
ldr walking tree hMTE=062a, name=H : \0S2\DLL\HPMGRMRI . DLL 
ldr walking tree going up 

lrm, Skipping init hMTE=062a, flagsl=2098bl8a, name=H : \0S2\DLL\HPMGRMRI . DLL 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=178c7000 hMTE=62a bno=8 

name = H:\0S2\DLL\HPMGRMRI.DLL 
IdrGP cr2=10000 hMTE=5el bno=l 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=113000 hMTE=5el bno=82 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=21000 hMTE=5el bno=12 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrDLM entry - slot 36 ptda ab99a000 

IdrDLM name - slot 36 name H:\0S2\DLL\HELV.F0N 

lpi Processing imports slot=0036, module=H : \0S2\DLL\HELV . FON 
ldr walking tree hMTE=035e, name=H : \0S2\DLL\HELV . FON 
ldr walking tree going up 

lrm, Skipping init hMTE=035e, flagsl=2098b3c8, name=H : \0S2\DLL\HELV . FON 

IdrDLM free - slot 36 

IdrDLM exit - slot 36 

IdrGP cr2=28000 hMTE=5el bno=19 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=60b bno=3 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=42000 hMTE=5el bno=33 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=44000 hMTE=5el bno=35 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=41000 hMTE=5el bno=32 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=60b bno=l 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c7000 hMTE=60b bno=8 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=43000 hMTE=5el bno=34 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=40000 hMTE=5el bno=31 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=29000 hMTE=5el bno=la 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=53000 hMTE=5el bno=44 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=3d000 hMTE=5el bno=2e 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=112000 hMTE=5el bno=81 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=12000 hMTE=5el bno=3 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 



name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c0000 hMTE=5el bno=8f 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178cl000 hMTE=5el bno=90 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c2000 hMTE=5el bno=91 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=22000 hMTE=5el bno=13 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=24000 hMTE=5el bno=15 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=37000 hMTE=5el bno=28 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=23000 hMTE=5el bno=14 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=13e52000 hMTE=281 bno=119 
name = H:\0S2\DLL\PMMERGE.DLL 
IdrGP cr2=13e53000 hMTE=281 bno=lla 
name = H:\0S2\DLL\PMMERGE.DLL 
IdrGP cr2=13e54000 hMTE=281 bno=llb 
name = H:\0S2\DLL\PMMERGE.DLL 


The following shows the loader sequence when FAXWORKS.EXE is terminated: 

IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c7000 hMTE=60b bno=8 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=178c6000 hMTE=60b bno=7 
name = H:\FAXWORKS\FX044.LOL 
IdrGP cr2=50000 hMTE=5el bno=41 

name = H:\FAXWORKS\FAXWORKS.EXE 
IdrGP cr2=178e4000 hMTE=618 bno=15 
name = H:\FAXWORKS\FAX.ADP 


DosDebug Logging Facility 



The kernel worker routines for the DosDebug API implement a number of logging functions for use in debugging errors in DosDebug itself. 
These are activated by setting bits in the double-word at symbol: _DBGbugbug. 

The following flags bits are defined: 


0x01000000 

Display input to DosDebug 

0x02000000 

Display output from DosDebug 

0x00000010 

Display exceptions in DosDebug processing. 

0x10000000 

Display execution flow in debugger processing. 

0x20000000 

Display execution flow in debuggee processing. 

0x40000000 

Display execution flow in watchpoint and debug register processing. 


DosPTrace Logging Facility 

The kernel worker routines for the DosPTrace API implement a number of logging functions for use in debugging errors in DosPTrace itself. 
These are activated by setting bits in the double-word at symbol: _PTbugbug. 

Note: 

DosPTrace internally thunks to DosDebug therefore DosDebug Logging Facility may be a useful diagnostic aid with DosPTrace. 
The following flags bits are defined: 


0x01000000 

Display output buffer set-up passed to user. 

0x02000000 

Display input buffer set-up passed from user. 

0x04000000 

Display conversion routine flow. 

0x08000000 

Display alias conversion routine flow. 

0x10000000 

Display input and output return codes only. 

0x20000000 

Display processing of notifications from DosDebug. 

0x00000001 

Display floating point information, processing. 


Kernel Debugger Breakpoints 


The break-point command set of the Kernel Debugger provides a mechanism for intercepting the execution of code through a particular 


path. For debugging application programs, break-points are generally required within the application itself or on call to or return from one or 
more system APIs. 

Each system API results either in a call to a system DLL or to the Kernel through a CallGate. The name of a system interface that is called 
when an application uses an API is either identical to the API name or may be determined from one of the following conventions: 

Doslaa/ao Kernel Callgate name corresponding to API Dosaame. 

Dos 32/7<?/77 i? DOSCALL1 32-bit entry point corresponding to API Dosname. 

Dosl 'oname DOSCALL1 1 6-bit entry point corresponding to API Dosname. 

Other system DLLs such as PMWIN.DLL, PMMERGE.DLL, etc. adopt similar conventions, for example API WinCreateWindow calls 
Win32CreateWindow in PMMERGE.DLL. 

In nearly all cases the system entry points have corresponding system tracepoints with the entry point name prefixed with either pre or 
post. Thus the System Tracepoints Reference provides a comprehensive source for deriving API related break-points. 

Physical Device Driver helper routines pass through a common router, then to specific worker routines. Worker entry point names generally 
adhere to the following convention: 

DosFHp_/7<?/77£> worker routine <t?n_name. 

Virtual Device Driver helper routines have entry points in the kernel with identical names (folded to uppercase) to the helper name. 

File System Driver and Mini-File System Driver helper routines have entry points in the kernel with identical names to the helper name. 

In addition to API and Driver FHelper related break-points, the following system labels may also prove useful when intercepting errors or 
program initiation: 

_tkSchedNext 

This routine is called when a new thread is selected for scheduling. The out-going thread slot number is recorded in 
variable Tasknumber. 

_tkSchedNext exits from one of two points: 

SchedNextRet A new thread slot is selected. 

SchedNextRet2 The same thread slot is selected. 

These labels maybe used to obtain a trace of dispatching activity. This is particularly useful when trying to establish 
the scope of hang conditions. 

The following example illustrates how to obtain a trace of dispatched tasks using this break-point. 


##bp tkschednext, " .p 
##g 

Slot Pid Ppid Csid 

#;g" 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0033# 

0019 

0000 

0019 

0001 

blk 

081e 

7b98c000 

7bb4b288 

7bb2d394 

lbf 8 

10 

wkstahlp 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0034# 

0018 

0000 

0018 

0002 

run 

021f 

7b98e000 

7bb4aa5c 

7bb2d548 

lea8 

10 

wksta 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0034# 

0018 

0000 

0018 

0002 

blk 

021f 

7b98e000 

7bb4aa5c 

7bb2d548 

lfOO 

10 

wksta 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0038# 

0018 

0000 

0018 

0003 

blk 

0200 

7b996000 

7bb4aa5c 

7bb2dcl8 

leb8 

10 

wksta 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*000b# 

0004 

0000 

0004 

0001 

blk 

080b 

7b93c000 

7bb4507 8 

7bb28f 74 

lcf 0 

00 

landll 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 

Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

*0008# 

0006 

0001 

0006 

0001 

blk 

0500 

7b936000 

7bb4 60d0 

7bb28a58 

leb8 

01 

pmshell 


Note: 


The status shows as blocked since _tkSchedNext has been called because the current thread is giving up its 
time-slice. 


DosLiblDisp 

This API is called to initiate DLL initialisation whenever a new module is loaded into memory. Since this is called for 
every .EXE at load time, in the context of the new process and thread, it provides an excellent breakpoint for 
intercepting the loading of a new module in a new process. 

When DosLiblDisp receives control, the MTE, SMTE have been created and the program module has been loaded. 
From the SMTE we can determine the entry point of the new module and thus set a breakpoint on this address. 

The following example illustrates how to set a breakpoint on entry to a new module. 

>> Add breakpoint at DosLiblDisp, then start CMD.EXE 

##bp doslibDisp 
##g 

eax=00000000 ebx=000029f4 ecx=00000010 edx=00000014 esi=00000bc8 edi=00000c0a 
eip=00000294 esp=0000773c ebp=00007752 iopl=2 — — — nv up ei pi nz na po nc 
cs=ffd7 ss=001f ds=ffa7 es=ffaf fs=150b gs=0000 cr2=lfc70490 cr3=001d0000 

doscalll :CODE16_GROUP :DOSLIBIDISP : 

ffd7 : 00000294 b80100 mov ax, 0001 ;br0 

##.p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*0044# 002c 0006 002c 0001 run 0400 7b9ae000 7bb4fcl4 7bb2f088 lf48 19 cmd 


>> The hmte for the current process is found in the PTDA at 
» ptda_module 

##dw ptda_module 11 
0030 : OOOOffaa 03al 


##.lmo 3al 

hmte=03al pmte=%fe97ebe4 mf lags=84903152 
obj vsize vbase flags ipagemap 

0001 0000c6a8 00010000 80001025 00000001 

0002 00007efa 00020000 80001025 OOOOOOOe 

0003 00009730 00030000 80001043 00000016 


c : \os2\cmd.exe 
cpagemap hob sel 
OOOOOOOd 03a0 OOOf 
00000008 03a2 0017 
00000002 0000 OOlf 


r-x shr alias 
r-x shr alias 
rw- prel alias 


>> Now dump the MTE and SMTE, whose address is at MTE+0x4 


##dd %fe97ebe4 18 
%fe97ebe4 03al0002 
%fe97ebf 4 84903152 


fd4341d0 

00000007 


fe97eclc 

00060050 


fe9al43c 

fe908e74 


##dd %fd43 

%fd4341d0 

%fd4341e0 

%fd4341f 0 

%fd434200 

%fd434210 

%fd434220 

%fd434230 

%fd434240 


41d0 

00000017 
00007790 
00000003 
00000000 
f d4343c9 
00000000 
00000000 
00000000 


00000002 
00000009 
f d4342a9 
fd434361 
fd4348f 1 
00000000 
OOOOlfaO 
00003f 40 


000044fa 
000005d9 
OOOOOaOO 
fd434368 
fd434924 
00000003 
f d434252 
00000000 


00000003 

fd434261 

00000000 

fd434369 

OOOOOaOO 

00000000 

00000000 

OOOOOOOe 


>> SMTE+0x4 is the entry point object number 
>> SMTE+0x8 is the entry point offset offset 
» For CMD.EXE this is 2:44fa 

>> Since object 2 starts at %20000, we can define a breakpoint on 
» entry to CMD.EXE at %20000+44fa 


##bp %00020000 +44fa 


##bl 

0 e ffd7 : 00000294 [DOSLIBIDISP] 

1 e %000244fa [ astart] 


>> Disable BP 0 since DosLiblDisp is called for every DLL that will be 
>> initialised in the new process . 


##bd 0 


##g 

eax=00000027 ebx=00000491 ecx=00009730 edx=0000f834 esi=00001fa0 edi=000003al 
eip=000044fa esp=00007790 ebp=00000000 iopl=2 — — — nv up ei pi nz na po nc 
cs=0017 ss=001f ds=001f es=0000 fs=150b gs=0000 cr2=00063ffe cr3=001d0000 

cmd:_TEXT3 : astart : 

0017 : 000044fa fc cld ;br2 


VMLockMem 

This breakpoint is on entry to the memory locking subroutine of Virtual Memory Management. It may be used in 
conjunction with the VM Lock Trace 

_XCPTBuildR3DispatcherStack 

This routine is called whenever a process fatal exception is generated by the kernel, regardless of whether exception 
handlers are registered. It therefore makes a stronger method than VSF * for intercepting fatal user exceptions. 

Exception management and how to intercept exceptions is discussed in more detail in Trap and Exception 
Processing. 

Dos32R3ExceptionDispatcher 

This entry-point is DOSCALL1.DLL is called by the kernel to process all user exception handlers. A breakpoint on the 
label allows one to intercept user exceptions before the user context is modified by any user exception handlers. On 
entry ESP+0x4 contains the trap number, ESP+0x8 points to the exception report record and ESP+Oxc points to the 
exception context record. 

_xcptR3ExceptionDispatcher. 

This routine is called from Dos32R3ExceptionDispatcher to process each of the user exception handers. It does 
this by locating exception registration records from the TIB at +0x0. 

On entry to the Ring 3 Exception Dispatcher, ESP+0x4 and EXP+0x8 point to the exception report record and 
exception context record, respectively. 

The exception report record contains the exception number, and exception address. 

The exception context record contains all register values at the time of exception. 

The layout for both these records is given in the BSEXCPT.H header file of the OS/2 Programmer's Toolkit. 

Most exceptions are generated from a hardware detected exception such as a trap. These are readily intercepted by 
using the Kernel Debugger VSF command. Exceptions may also be generated by the DosRaiseException API. 
Whatever the source all exceptions will eventually result in a call to _xcptrR3ExceptionDispatcher. This makes this 
label an excellent break-point for intercepting and filtering any exception that will drive a user's exception handler. 

The following example illustrates the use of this break-point, where the system generates a C0000005 exception 
following a Trap E in an application program. 


>> Beak on entry to the Ring 3 Exception Handler Dispatcher 
##bp _xcptr3exceptiondispatcher 

>> Intercept all fatal exceptions 
##vsf * 

##g 

Symbols linked (trape) 

Trap 14 (OEH) - Page Fault 0004, Not Present, Read Access, User Mode 
eax=00000000 ebx=00000000 ecx=0002059c edx=000a0000 esi=00000000 edi=00000000 
eip=0001011c esp=00022e6c ebp=00022e74 iopl=2 rf — — nv up ei pi nz ac pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001d0000 

005b : 0001011c 8b00 mov eax,dword ptr [eax] ds : 00000000=invalid 

>> A fatal exception has been intercepted at %1011c 
>> Now GT and see the exception dispatcher called. 

##gt 

eax=00022dl8 ebx=00000000 ecx=0002059c edx=000a0000 esi=00000000 edi=00000000 
eip=lff9c8d8 esp=00022bf0 ebp=00022d04 iopl=2 — — — nv up ei pi zr na pe nc 
cs=005b ss=0053 ds=0053 es=0053 fs=150b gs=0000 cr2=00000000 cr3=001d0000 

doscalll : FLAT32 :_xcptR3ExceptionDispatcher : 

005b : If f 9c8d8 55 push ebp ;br0 


>> %ESP+4 points to the exception report record 
>> %ESP+8 points to the exception context record 


##dd %esp 


%00022bf 0 
%00022c00 
%00022cl0 
%00022c20 
%00022c30 
%00022c40 
%00022c50 
%00022c60 


If f 9c7e9 
00000000 
00010002 
0058f faf 
52110000 
e91f0000 
0008ffa7 
00008000 


00022dl8 
2cla0002 
00000000 
2c520066 
ff 9f3130 
e9270116 
e9170000 
00000000 


00022d3c 
154b0000 
032b0000 
154b0000 
00000000 
f fa70066 
00570000 
00f80000 


00000000 
00100000 
f fa72212 
033e0002 
00172c52 
3029ffa7 
00000019 
80000000 


>> The exception report record contains the exception code at 
» offset +0x0 (in this case C0000005) . 

>> At offset +0xc is the address at which the exception occurred. 

>> This agrees with the address seen after VSF intercepted the fatal 
>> exception. 


##dd %00022dl8 
%00022dl8 C0000005 

%00022d28 00000002 

%00022d38 f fdf 9264 
%00022d48 00000433 

%00022d58 00000433 

%00022d68 f f If 5a50 
%00022d78 00000000 

%00022d88 00000000 


00000000 
00000001 
00000007 
ffdf 9264 
0000 6 9bc 
fe86106c 
00006a04 
7b9afe3c 


00000000 
00000000 
0000699c 
7b9afe0c 
f f f 54ef 2 
00000000 
fff 6d8d9 
f f If 5a50 


0001011c 
7bb4f c94 
fff 5416b 
ffdf 6378 
ffdf 9264 
f ed022d0 
00000053 
7cf 8014c 


>> The context record contains the registers at time of exception. 
» Note the cs:eip at +0xa0 and +0x9c. Also the ss:esp at +0xbc abd 
» +0xb8 and ebp at +0x98. 


##dd %00022d3c 
%00022d3c 00000007 

%00022d4c ffdf 9264 
%00022d5c 0000 6 9bc 

%00022d6c f e8 61 0 6c 
%00022d7c 00006a04 

%00022d8c 7b9afe3c 
%00022d9c 00000001 

%00022dac 00000000 

##d 

%00022dbc 00000000 

%00022dcc 0002059c 

%00022ddc 0000005b 

%00022dec 00060210 

%00022df c 000205fc 
%00022e0c 00000000 

%00022elc 00002000 

%00022e2c 00011fa8 


0000699c 
7b9afe0c 
f f f 54ef 2 
00000000 
fff 6d8d9 
f f If 5a50 
7cf 80088 
0000150b 

00000000 

OOOaOOOO 

00012216 

00000000 

00020a40 

00000000 

00000000 

000205fc 


fff 5416b 
ffdf 6378 
ffdf 9264 
f ed022d0 
00000053 
7cf 8014c 
00000001 
00000053 

00000000 

00022e74 

00022e6c 

00000000 

00000000 

00000000 

00090000 

00090000 


00000433 
00000433 
f f If 5a50 
00000000 
00000000 
7cf 80088 
7bb2fdb2 
00000053 

00000000 

0001011c 

00000053 

000205fc 

00000000 

OOOaOOOO 

00022e50 

00000000 


Dos32Exit and DosR3ExitAddr 

Both these labels provide good breakpoints to catch an application terminating normally. 

Dos32Exit is the entry point for the DosExit API. 

DosR3ExitAddr is the entry point in DOSCALL1 .DLL, called when an application issues the return statement to 
return to the system. 


Win32SetErrorlnfo 

This API is called by PM whenever it needs to record a PM error. When this is used as a break-point, the 
double-word at %esp+0x4 contains the PM Error code about to be recorded. 

NWDHandler 

This symbol is the entry point to the trap 2 interrupt handler. The IDT entry for trap 2 contains a Task Gate that points 
to NWDHandler. When NWDHandler receives control the Task Register will contain the selector for the current TSS. 
The link field of the current TSS will contain the previous value of the TR, where the processor saved the current 
registers when the interrupt occurred. 

Frequently NMI interrupts are associated with disabled code and obscure hardware or software problems. If can be 
useful on these occasions to set up a KDB.INI file with the following commands to display information when the trap 2 
occurs. This is particularly advantageous when dealing with NMI interrupts caused by the NMI Watch Dog timer 
firing. 

bp nwdhandler , " ? 'curr tss';dt tr:0;? 'prev tss';dt # (wo (tr : 0) ) : 0" 


Note: 


When the first NMI occurs, the following would be displayed: 

curr tss 

eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000 

eip=fff4074c esp=00000400 ebp=00000000 iopl=0 — — — nv up di pi nz na po nc 

cs=0170 ss=leaO ds=0168 es=0168 fs=0000 gs=0000 cr3=001dd000 

ss0=0000 esp0=00000000 ssl=0000 espl=00000000 ss2=0000 esp2=00000000 

ldtr=0000 link=0010 tflags=0000 i/o map=ffff 

ports trapped: 0-ffff 

prev tss 

eax=000002f f ebx=139b0000 ecx=00000400 edx=00009ae8 esi=139b993c edi=139d0400 
eip=lb7228fe esp=0006eeaa ebp=0006eee0 iopl=2 — — — nv up ei pi nz na po nc 
cs=005a ss=004a ds=0053 es=0053 fs=150b gs=0000 cr3=001dd000 

ss0=0030 esp0=00006d80 ssl=0000 espl=00000000 ss2=0036 esp2=0000f 000 

ldtr=0028 link=0000 tflags=0000 i/o map=dfff 

ports trapped: 0-ffff 
## 


The register values when the NMI occurred are displayed under the label prev tss. 

After NDWHandler has processed the NMI it performs a task-switch back to the pervoius TSS, but only after 
editing the previous TSS to ensure that control is passed to TRAPCommonFaultEntry. The task switch is 
effected using IRETD with the NT flag set in EFLAGS. This leaves the NMI TSS' EIP pointing at the 
instruction following the IRETD at aproximately NWDHandler+25. To allow more that one NMI to be handled 
the instruction following the IRETD is a JMP NDWHandler. Therefore whenever the NMI TSS' EIP doesn't 
point to the NDWHandler entry point it is a sure indication that at least one NMI has occurred. 


Trap and Exception Processing 


The fine detail of exception management by OS/2 is complex. However the principles are easy to grasp. This section gives an overview of 
OS/2 Exception Management sufficient to provide the reader with a technique for intercepting exceptions in user code under the Kernel 
Debugger. 

Exception Definition 

Exceptions may be summarised as follows: 

• Exceptions refer either to: 

Hardware Traps and Faults - INTEL defined. 

Software generated exceptions - OS/2 and User defined. 

• Each Hardware Exception has an associated vector, which the processor uses to index the IDT to give control to the appropriate 
system exception handler. 

• OS/2 Converts Traps and Faults to software exceptions. For example, traps Oxd and Oxe are converted to exception 
0xc0000005. 

• Software exceptions are generated from three sources: 

1 . Converted Hardware Traps and Faults. 

2. Software Signals. 

3. Software Exceptions from DosRaiseException. 

• Exceptions occur for both normal and abnormal reasons. In the normal case additional processing is required to be executed in a 
manner transparent to the main line code. Examples of this are: 


Page fault exceptions. 


Trap 1 and 3 for system trace 
387 Co-processor emulation 
VDM privileged instruction emulation 

In the abnormal case, an error condition has been detected. If the error cannot be corrected then either a process or the system 
dies depending on whether the error can be isolated to a particular process. Usually traps and faults in ring 0 code result in 
system termination. Bad parameters passed in system APIs may cause the kernel to trap. The system recovers by directing an 
exception 0xc0000005 to a process. Unless the process can handle this exception, it dies. 

• Full details of OS/2 defined exceptions are given in OS/2 System Exception Codes. 

Exception Logic 

The essential logic for exception handling is as follows: 

• If the processor generates a hardware exception then control is given to the first level exception handler pointed to by the IDT 
descriptor that corresponds to the hardware exception vector. 

■ If the Kernel Debugger Vector Commands have been specified without the fatal flag then first level exception handlers have 
been replaced by the Kernel Debugger routines. These may give control to the debugging console or enter the normal system 
handlers if interception criteria are not satisfied. 

• The non-debugger first level routines perform any specific processing for the current exception, for example processing single 
step and breakpoint traps. 

• If full recovery is possible then the first level routines exit with an IRET instruction. 

• In most cases control passes from the first level trap handlers to TrapCommonFaultEntry. This performs common processing 
for all hardware exceptions. If recovery is possible, for example by satisfying a page fault or making a segment present, then this 
is done and control returned to the interrupted code. 

If recovery is not directly possible or further special processing is required then control passes to one of the following second 
level exception handlers: 

V8086 Emulation for instruction emulation. 

VDM Exception Flandler to reflect non-fatal exceptions back to the VDM using its IDT. 

Process Fatal Fault Flandler (_TRAPProcessFatalFault) for non-kernel mode code (lnDos=0). 

Kernel Fault Flandler for kernel code (lnDos=1) 

Special handlers for Co-processor handling, NMIs etc.. 

■ The Kernel Fault Flandler checks for the presence of a local fault handler by inspecting TSDpfnFault. If this is non-zero then 
passes control to the local fault handler, otherwise it passes to the System Fatal Fault handler (SystemFatalFault). 

• Ths System Fatal Fault handler will enter the Kernel Debugger (if in a non-RETAIL kernel), otherwise it will call and Device 
Drivers that have registered for notification of fatal system faults, then exit to the panic routine with a formatted message - 
usually the IPE trap screen. Once in panic the system will not dispatch any more threads. If TRAPDUMP or REIPL are specified 
then these are acted on otherwise the system waits to be re-booted. 

• The Process Fatal Fault handler will check for fatal fault interception by the Kernel Debugger (VSF command) and enter the 
kernel debugger if interception criteria are satisfied. Otherwise user exception processing begins, if it is not possible to dispatch 
user exception handlers then DelayHardErr is called immediately to build the trap screen and wake the Hard Error process. 
Normally control passes to the _XCPTBuildR3DispatcherStack. 

• _XCPTBuildR3DispatcherStack is entry-point for all kernel initiated exceptions to be sent to user. It is responsible for 
massaging the users stack so that when the kernel exits, control returns to the Exception Dispatcher 

(Dos32R3ExceptionDispatcher in DOSCALL1.DLL). 

The parameters to XCPTBuildR3DispatcherStack are: 

Trap number or OxOOOOffff for S/W generated exceptions 

Exception number 

Count of exception info parameters 

Pointer to the array of exception info parameters 

Boolean, if true then exception is non-contnueable. 

Pointer to any additional nested report record 


The parameters to Dos32R3ExceptionDispatcher are: 


Trap number 

Pointer to the exception report record 
Pointer to the exception context record 

If no exception registration records exist for the current thread then the thread enters termination and the Exception Dispatcher is 
not called. 

The Exception Dispatcher runs the chain of exception registration records, anchored from the TIB of the current thread. Each 
registered user exception handler is called in turn (via an intermediate routine, _xcptExecuteUserExceptionHandler). The 
return code (excetion disposition) passed back by the exception handler is examined. If it specifies 

XCPTCONTINUEEXECUTION then control returns to the kernel via Dos32ExceptionCallBack, whereupon the thread's stack 
is prepared for returning to the interrupted program. If XCPT_CONTINUE_SEARCH is specified then the next exception handler 
in the chain is dispatched. When the last exception handler has been dispatched (and all have returned 
XCPT_CONTINUE_SEARCH) then control passes to the kernel via Dos32ExceptionCallBack and the thread is terminated. 
XCPT_CONTINUE_STOP) may be returned by a debugger via DosDebug to indicate that debugger handler the exception and 
that exception handler scheduling should be halted immediately. 

The values for the various return codes are as follows: 


Name Bit Mask 

XCPT_CONTINUE_SEARCH 0x00000000 

XCP T_CONT INUE_EXECUT ION OxFFFFFFFF 
XCPT_CONTINUE_STOP 0x00716668 


Description 

Exception not handled 

Exception handled 

Exception handled by 
debugger (via 
DosDebug) 


The following additional return codes are used by internal excfeption handlers to manage nested exceptions. 


Name Bit Mask 

NESTED OxfOfOfOfO 

COLLIDED_UNWIND OxOfOfOfOf 
EXIT_UNWIND 0x657 96C4B 


Description 

An exception occurred while an exception 
was active 

Indicates collided unwinds 
Indicates the end of an exit unwind 


Dos32ExeptionCal!Back is the kernel entry-point that is called after all user exception handlers have been called. It is passed 
the following parameters: 

Trap number 

Pointer to the exception report record 
Pointer to the exception context record 
Exception disposition 

This entry-point calls _xcptExceptionCallBack which either takes the default action according to the exception disposition and 
the exception type (fatal or non-fatal). The either user's context is retored from the exception context record or control passes to 
_xctDefaultAction. The latter action usually implies proces termination but also may result in a process or system dump being 
initiated. 

For fatal exceptions _xctDefaultAction. calls DelayHardError to format the trap screen information from the context record and 
wake the Flard Error process. It also writes the POPUPLOG.OS2 entry and calls the Kernel Debugger if the VSU command has 
been specified. 

Local Fault Flandlers are exception handlers registered by kernel routines. Typically one is registered on entry to the kernel by an 
API call, and de-registered on exit. If a Local Fault Flandler cannot resolve the fault then it will call panic if a serious system fault 
has occurred, or _XCPTBuildR3DispatcherStack if user code is at fault, for example when a bad parameter supplied to an API 
by an application program causes the kernel to trap. 

Multiple nested Local Exception Flandlers may be registered. When the system calls a Local Exception Flandler, the current 
handler deregisters itself and reinstates the previous nested handler. This is done by restoring the previous handler address from 
the top-most long-jump buffer saved in TSDpIjmp and updating TSDpfnFault. The register values saved in the long-jump buffer 
are restore then then fault handler returns to the main-line code that registered. EAX is set by the fault handler to indicate that an 


error occurred. When no more local exception handlers are registed then TSDpfnFault. is zeroed, thereby de-registering all local 
exception handlers. Local Exception Handlers are always deregistered on exiting the kernel. 

• The DosRaiseException API is called to create a user exception. This passes control to _xcptExceptionCallBack and normal 
user exception processing follows. 

These details are summarised in the following diagrams: 
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Intercepting Exceptions and Traps 


The following list provides guidelines for intercepting traps and exceptions under the Kernel Debugger for various circumstances: 

Fatal exceptions occurring in application ring 2/3 code. 

BP _XCPTBuildR3DispatcherStack will trap every software and hardware exception. The breakpoint is in the 
kernel, so use .R to display the registers at the time of the exception. This break-point works regardless of whether 
exception handlers are registered. 

Note: If the exception is generated through use of an API (bad parameter or DosRaiseException) then the CS:EIP 
will point after the call gate instruction. 

Fatal Flardware Traps and Faults in application ring 2/3 code. 

VSF * will intercept all such exceptions at the point of the exception. 

Fatal Flardware Traps and Faults in ring 0 code. 

VTF * will intercept all such exceptions at the point of the exception, providing no Local Fault Handler has been 
registered. 

All ring 0-3 traps and faults. 

VT * will intercept them all. 

All application ring 2/3 code traps and faults. 

VS * will intercept them all. 

Exceptions in application ring 2/3 code that will drive exception handlers. 

BP _xcptr3ExceptionDispatcher will be intercepted if any are registered, but this will be called once to process the 
entire chain. 

Each User Exception Handler. 

BP _xcptExecuteUserExceptionHandler will be called to dispatch each exception handler. Alternatively use the 
registration records from the TIB to locate the entry point of a given exception handler. 

Post User Exception Handling 

VSU will intercept and unrecovered fatal exception delivered to ring 2 and 3 after exception handler processing. 


Note: 


User exception handlers can be disabled under the Kernel Debugger by locating the TIB, then storing Oxffffffff at offset 0x0, which is 
the pointer to the exception registration record chain. The chain is terminated by Oxffffffff and can be re-worked manually for 
debugging purposes - provided that the system is not already processing an exception for this thread. 


Dump Formatter User Guide 


The Dump Formatter is an interactive line-mode utility that supports a variety of commands for extracting and displaying information from a 
system dump. There are two versions of the Dump Formatter: 

df_ret.exe The Dump Formatter for dumps from systems running either the RETAIL or HSTRICT kernels. 

df_deb.exe The Dump Formatter for dumps from systems running the ALLSTRICT kernel. 

Note: Refer to the Kernel Debugger User Guide for a discussion on the different OS/2 Kernels. 


Each of the two Dump Formatters is generated for each build of the OS/2 kernel. Thus the Dump Formatter is system level and fix-pack 
level dependent, in a similar way to the debug kernels. Several base versions of the Dump Formatters are distributed with the OS2PDP 
package. Versions of the Dump Formatter that apply to a particular fix-pack may be obtained from the following sources: 


• The OS/2 Base Product CDROM for WARP is distributed with the ALLSTRICT kernel and Dump Formatter. (For the initial 
release of WARP this was only available on the US version of WARP). 

• The Developer Connection CDROM - this may be ordered through the Developer Assistance Program (DAP) or the System 
Library Subscription Service (SLSS). 

• From your local IBM Marketing Representative. 

• Calling the SDM BBS at USA 407-443-8000. 

• For IBM internal users by FTP to the SDM at node: 

sdm . bocaraton . ibm . com 
or 

9 . 83 . 12.237 

Logon using Id and Password Anonymous. A list of files is contained in files. bbs. 

The Dump Formatter has a named pipe interface that allow it to be controlled from another program. This is exploited by the PMDF program, 
which is also distributed with the OS2PDP package. 

PMDF provides: 

• A PM interface to the Dump Formatter. 

• Automatic Dump Formatter version management. 

• The ability to log output to a file. 

• Use of Drag and Drop on Dump Formatter output to the PMDF commands line. 

• A REXX interface that allows REXX EXECs to issue Dump Formatter commands and capture their output. 

• Process Dump Formatting. 

The command set supported by Dump Formatter is very similar to that of the Kernel Debugger. In many cases they share common 
commands. These are documented in the Kernel Debugger and Dump Formatter Command Reference. 


Taking a System Dump 


A system dump may created by any of the following means: 

• Manually by using the command sequence: 

Ctrl-Alt-FI 0-F1 0 or Ctrl-Alt-Numlock-Numlock 

• Automatically when an application or system trap occurs. See the description of the TRAPDUMP CONFIG.SYS setting for 
details. 

• Directly from an application program by using the DosForceSystemDump API. 

• Directly from a physical device driver by calling the VectorSDF address returned by the DevHlp_GetDOSVar helper service. 

• Under the kernel debugger from the debug console by giving control to the RASRST routine. See Forcing a System Dump From 
the Kernel Debugger for further details. 

Note: 


Whilst it can be advantageous to take a dump when the system trace is active, it is not a pre-requisite. Occasionally system trace 
has been found to caused other traps. 


Dump Formatter Installation 


The Dump Formatter may be installed together with PMDF by using the installation procedure supplied with the OS2PDP package. 
Alternatively copy the *.EXE files to either a private directory or a directory in your current PATH. The only files the Dump Formatter 
accesses implicitly are Symbol Files, which if used, are convenient to have installed in the same directory as the *.EXE program files. 

The command line syntax for Dump Formatter is as follows: 


DF_RET dump file 

DF_DEB 


-P pipname 


The parameters have the following meaning: 
dumpfi/e 

The file name of the (decompressed) dump to be analysed. If a path is not prefixed to the file nape then the Dump 
Formatter assumes the current path. See Dump Decompression below. 

-9 pipename 

The name of a named pipe through which Dump Formatter output and commands are channelled. 

Note: This parameter is intended for use when df_ret.exe or df_deb.exe is started from another program using the 
DosExecPgm API. 


Note: 


If no parameters are entered then the Dump Formatter give a syntax message. This message implies that a COM port may also be 
used as an interface, but this has not been implemented. 


When the Dump Formatter is started it displays the build level of the system from which the dump was taken and then the build level of the 
formatter. If these do not match unpredictable results may occur. However, if the levels are close then it is probably safe to use the Dump 
Formatter, though not guaranteed. 

If the incorrect type of Dump Formatter is used, for example retail Dump Formatter with a ALLSTRICT dump, then the Dump Formatter will 
probably trap. If it does not, then an error message will appear. 

In general the dump formatter traps for one of three reasons: 

• The reasons stated above, where there are type and level mismatches. 

• The dump file is incomplete or corrupted. 

• The Dump Formatter stack overflows. 

The latter problem usually occurs when the ,P command is used. This is sometimes circumvented by using the EXEDHR utility to increase 
the stack size of the Dump Formatter. Another approach is to use the %PS REXX to display each thread slot individually. 

As part of the initialisation sequence, the Dump Formatter attempts to load symbol files, from the current directory, for each module that was 
loaded on the dumped system. 

Notes: 


Windows, WINOS2 and DOS symbol files are not usable under the Dump Formatter However, the SYMLST REXX exec in the 
tools directory of the accompanying CD-ROM may be used to list a symbol file. This can sometimes be used in conjunction with 
the Dump Formatter provided that at least one location of a module or its data can be determined absolutely. 

Symbol files not present in the current directory may be manually loaded using the WA command. The syntax and function of 
this command differs subtly from the Kernel Debugger equivalent: 

■ Under Dump Formatter names are symbol file names unlike Kernel Debugger where they are symbol map names. 
This allows relative path names to be used. 

• Under Dump Formatter WA reads the symbol file, whereas under Kernel Debugger it is just marked active provided it 
was loaded when the module was loaded. 


The Dump Formatter prompts for command input with a single # sign. Unlike the Kernel Debugger this is not used to signify the processor 
mode or whether paging is enabled. Consequently the Dump Formatter always assumes that the current processor mode is Protect Mode 


with Paging Enabled. The user must therefore explicitly prefix segment:offset addresses in Virtual 8089 mode with an ampersand (&). 
Commands may be interrupted by pressing the ESC key. 


Dump Decompression 


Dumps may be taken either to a dedicated FAT hard disk partition or to diskette. For details on setting up the dump partition refer to the 
TRAPDUMP CONFIG.SYS command description. 

Dumps taken to a hard disk partition may be used directly by Dump Formatter or PMDF. 

Dumps taken to diskette have their data compressed and have to be decompressed to produce a single dump file. This may be done from 
within PMDF by selecting the New option of the File pull-down. PMDF offers the additional facility of decompressing diskette dumps directly 
from diskette images created by OS2IMAGE. See PMDF File Menu below, for details. 

Sometimes PMDF fails to decompress a dump. This normally occurs when diskette 1 has not been re-inserted to complete the dump 
process. If this happend the PATCFIDMP utility may be used to correct the dump header on the fist diskette. PATCFIDMP may be found on 
the accompanying CDROM. 

If PMDF is not being used then the DCOMP command may be used to decompress a dump. The syntax for DCOMP is as follows: 


NDCOMP 


/ f 


source drive 


file name 


/f 


Undocumented. 


source dr/ ire 

Specifies the drive where the DUMPDATA.nnn file will be found. This may specify either a hard disk drive or a 
diskette drive. The DUMPDATA.nnn files from a diskette dump may be copied to a hard drive root directory before 
using NDCOMP. 

fi/e name 

The target dump file name including path information. 


PMDF Installation 


PMDF provides a convenient front-end to the Dump Formatter. By installing PMDF in an appropriate directory structure it is able to select 
automatically the correct version of Dump Formatter for the dump to be analysed. 

PMDF is installed by using the installation of the OS2PDP package. The resulting directory structure is as follows: 


\PMDF \ 

PMDF.EXE 

PMDF. INF PMDF.HLP PMDFMSG.DLL 

PMDFVERS . LST 

* . CMD 

\GA2 1 \ 

DF_RET . EXE 

DF_DEB . EXE * . SYM 

* . SDF 



\GA2 1MR1 \ 

DF_RET . EXE 

DF_DEB . EXE * . SYM 

* . SDF 



\Warp\ 

DF_RET . EXE 

DF_DEB . EXE * . SYM 

* .SDF 



\Warp_fp\ 

DF_RET . EXE 

DF_DEB.EXE * . SYM 

* .SDF 




Each version of OS/2 is represented by a subdirectory containing the Dump Formatters and symbol files and structure definition files for that 
version. 

The home directory contains the PMDF executables and help files, the version control file - PMDFVERS.LST, and any REXX EXECs to be 
installed in their default directory. 

PMDFVERS.LST 


More versions of the Dump Formatter may be installed by creating a new subdirectory for the new Dump Formatter and adding an entry to 
the PMDFVERS.LST file. Each entry of this file corresponds to an OS/2 build level or version. The format of an entry is as follows: 


relative path: build level : descriptive text 


Notes: 


The path is relative to the home directory. 

The build level is the internal system build level and may be determined either by browsing the OS2KRNL load module and 
searching for the text @#IBM:n.nnn#@ near the end of the module, or by using the BLDLEVEL utility in the OS2 directory. The 
VER /R command is not reliable since it only reports the base version level, not the fix-pack version level, in some releases. 


The directory structure in the example above would be represented by the following entries: 

ga2 1 : 6 . 514 ; OS/2 2.1 General Availability 

ga2 lmr 1 : 6 . 617 : OS/2 2.11 MR1 

warp : 8 . 1 62 : Warp 

warp_fp : 8 . 200 : Warp Full Pack 


PMDF Menus and Options 


PMDF offers a number of facilities from its pull-down menus and also from the mouse buttons. 

From the Keyboard Ctrl-C and Esc serve to interrupt the Dump Formatter. 

Warning: 

Do not use the Dump Formatter Q command. Under PMDF this may cause PMDF to hang. To terminate the Dump Formatter either quit 
PMDF from the system menu or select another dump for processing. 


The PMDF screen appears as follows: 



PMDF File Menu 


The File pull-down menu offers the following options: 

New Dump 

Select this option to decompress a new dump. 

Notes: 

For diskette dumps the DUMPDATA.nnn files may be copied for a directory on the hard drive and 
decompressed from there. 

PMDF has the ability to decompress diskette images created by OS2IMAGE without re-creating the original 
diskettes. To use this facility each of the image file must be named image. nnn where nnn is a numeric 
sequence number that corresponds to the disk number. 

Open Dump 

This option prompts the user for the dump file name then invokes Dump Formatter. 

Log Output 

This option prompts the user to start or stop logging output to a file. Data may be appended to an existing log file. 

Save Output 

This option allows the user to save all output displayed in the PMDF scrollable window. 

Connect 

Connect allows PMDF to be used as a terminal emulator to drive a Kernel Debugger session. See the Kernel 
Debugger User Guide for more information. 

Disconnect 

Disconnect terminated the communications session with the Kernel Debugger. 


The following diagram illustrates the File pull-down menu options. 




PMDF Edit Menu 


The Edit pull-down menu offers the following options: 
Search String 


Undo 


Locates text within the scrollable window. 


Copy 

Cut 


Reverse the previous Edit Cut action. 
Copy marked text to the clip board. 


Clear Screen 


Move marked text to the clip board. 


Clears the scrollable window of all text. This is not a reversible action. 


The following diagram illustrates the Edit pull-down menu options. 






PMDF Options Menu 


The Options pull-down menu offers the following options: 

Font Settings 

This allows font selection for displayed output. 

Function Keys 

This provides a menu to predefine function keys as strings of Dump Formatter command strings. Commands may be 
separated by a semi-colon. 

Terminal Settings 

Allows the communications parameters to be specified for when the Connect option of the File pull-down is selected. 

Save Settings 

This will save the current options in PMDF.INI for use next time PMDF is started. 

The following diagram illustrates the Options pull-down menu options. 



PMDF Analyze Menu 


The Analyse pull-down menu offers four selections, each of which displays its own menu selection. Where parameters are required they 
should be highlighted by double-clicking mouse button 1 on text in the scrollable window. 

CAUTION: 

The output from the Analyze options needs to interpreted with care. Some options are precise since they follow control block chains 
anchored from the SAS, for example the Physical Device Driver Chain and Kernel Heap. Others depend, for correct results, on correct 
symbols being loaded. Some options, for example those that display stacks, are more speculative in what they display. 

Before these facilities are relied on, the user should thoroughly acquaint themselves with the manual techniques that belie their function. 
This information is available in the course materials that comprise the first section of this Handbook. 


The following selections are available: 
System 


The System menu display the following options: 




Process 

The Process menu display the following options: 



Threads 


The Threads menus dumps stacks related to a given thread. The following menu is displayed: 



Synopsis 

This offers a miscellaneous collection of options, the most important of which is the Trap Screen display. The 
following menu is displayed: 



PMDF Help Menu 


The Help pull-down menu offers standard help facilities. 

The following diagram illustrates the Options pull-down menu options. 




PMDF Mouse Options 


Standard CUA mouse selection and highlighting are implemented. Marked items may be dragged and dropped onto the command line. 

A double-click with mouse button 1 will highlight a blank delimited string. 

A single click with mouse button 2 will display pop-up menu whose items take the highlighted text in the scrollable output window as input. 

The following diagram shows an example of the mouse pop-up menu. In this example the Structures option is displayed. This particular 
option acts as a supplement to the Dump Formatter .D command. For it to work correctly, the Structure Definition Files f.SDF) are required 
to be present in the same directory as the Dump Formatter. These files are build level dependent and will only display correct information if 
matched to the dump level. There is no validation performed by these displays. The user must ensure that an appropriate input address is 
highlighted. 
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PMDF REXX interface 


PMDF provides a REXX interface that allows REXX EXECs to issue Dump Formatter commands and capture their output in REXX 
variables. EXECs are able to display output on PMDF's scrollable output window, command line and enter 

EXECs are invoked by entering the REXX EXEC name, with optional directory information, prefixed with a '%' character from the PMDF 
command window. If the exec is not installed in a directory in the PATH or in the same directory as PMDF then it must be prefixed with the 
fully qualified path name. For example: 


%SEGTAB 123 

%C : \MYEXECS\TEST1 parml parm2 


It is also possible to use relative path expressions thus: 


% . . \SEGATB 123 


If a path has to be specified when passing an exec name as a parameter to another exec then quotation marks around the path and file 
name will be required. 

PMDF implements its interface to the Dump Formatter by creating a REXX subcommand environment. The REXX address instruction 
allows an EXEC to execute and capture the output from a Dump Formatter command by addressing this subcommand environment. 

The syntax and parameters for this implementation of the address instruction are: 


address df ' CMD' <output> <df_cmd> 



Where: 


<output> 

is the name of a stem to a REXX compound variable that will be assigned to capture output from the Dump Formatter 
command. 


'output. 0" will be set to the number of lines, "output. n" will contain the nth line of output. 


<df_cmd> 

is the dump formatter command and parameters. 


Parameters following the EXEC name will be passed to the EXEC as a one parameter string. 

A number of general purpose EXECs are provided in the OS2PDP package on the CD-ROM accompanying this book. These are: 


RUNCHAIN 

Generalised Control Chain Running EXEC. 

PS 

Generalised EXEC for executing Dump Formatter commands per thread slot. 

TEMPLATE 

A Template EXEC containing a collection of subroutines useful for writing other EXECs. 


There are also a number of example EXECs that format control blocks and illustrate how to use the REXX interface and the subroutines 
contained in TEMPLATE. 

The RUNCHAIN EXEC 

Syntax 

RUNCHAIN <addr> link (<of f set>, <s>) stopvalue (<stop>) chain (<nnn>) exec(<cmd>) 
print (<file>) 

This exec provides a generalised control block chaining facility, where at each hop of the chain a command or exec may be executed. The 
starting address and link offset are required. Other parameters are optional. The parameters to RUNCHAIN are: 


<addr> 

is an address expression of the start of the chain 

<offset> 

specifies the decimal or hexadecimal offset of the linking address. Default is 0 

<s> 

specifies the length of the linking field as: D (double) or W (word) - Default is D 

<stop> 

specifies a termination value for the linking field. This take precedence over <chain> and may be specified as a 
hexadecimal or decimal value. 

<nnn> 

specifies the maximum number of chain hops to traverse. Default is 1 0 

<cmd> 

specified a command to be executed at each hop. If the command is prefixed with a % then an exec is executed. @L 
will cause the linear address of the current block to be substituted. Default is DD @L L4. 

<file> 

Note: 

specifies a print file to which the output will be copied. 


Hexadecimal values are specified as ’nn’x 

As an example: suppose the linear address of an MTE is %fff2bde0. MTEs are linked at +c in os2 2.1 . To run the chain of MTEs displaying 8 
double words do the following: 

%RUNCHAIN %f f f 2bde0 link(c) exec (DB 0L L40) 

The resulting output would be appear thus: 


Block 1 at %FFF2BDE0 


%f f f 2bde0 00060002 fff2bdfc fff2bfc3 feOaldac 

%f f f 2bdf 0 0000b980 00000000 00010000 00000000 

Block 2 at %fe0aldac 

%fe0aldac 02600002 fcace908 feOaldfc fe083e40 

%feOaldbc 4498blc6 OOOOOOOd 0000003a feOaddfO 

Block 3 at %fe083e40 

%fe083e40 024e0002 fcac52f0 fe083e70 fe0adef8 

%fe083e50 4498blc6 00000005 00000038 fdf40fac 

Block 4 at %fe0adef8 

%fe0adef8 01aa0002 fcac07a0 fe0adfl4 fdf61cc8 

%fe0adf 08 0498blc8 00000000 00000035 4d495405 

Block 5 at %fdf61cc8 

%fdf 61cc8 01a80002 fca9ad58 fdf61ce4 fdf61d68 

%fdf 61cd8 04 98blc8 00000000 00000036 53595307 

Chain run successfully for 5 hops 


To format the first 40 MTEs in the chain do: 


%RUNCHAIN %fff2bde0 link(c) exec ( .Imo 0L) chain (40) 


The PS EXEC 

Syntax 

PS <sl> <s2> <cmd> <parms> <;cmd> <parms> 


This is the Per-Slot exec. It will repeatedly execute a DF command string or REXX exec for each thread slot in the range specified. The 
linear addresses of slot related control blocks (TCB, PTDA and TSD) may be specified symbolically in the command string so that the 
correct address will be substituted for each slot traversed by PS. 

The parameters to PS are: 

<s1> Starting (hexadecimal) slot number 

<s2> Ending (hexadecimal) slot number or *, which signifies highest active slot in the system. 

<cmd> is any string of DF commands separated by ; or a single REXX exec prefixed by %. 

<parms> are any valid parameters where @TCB, @PTDA and @TSD are substituted with their corresponding linear 

addresses. @disp is the scheduler's ESP relative to the TSD. N.B @disp is only defined when page table entries are 
present for the TSD. 


Example 1 : 


Display priority information (on a 2.1 1 system) for slots 30 to 33 where priority class is at TCB+e4, priority delta is at TCB+e5 and 
dispatching priority is a word at TCB+e8. 


Enter: 


%PS 30 33 DB 0TCB+e4 L2 ; DW 0TCB+e8 LI 



Slot 30 

Warning: not all addresses are present 
DB %7BA8FE78+E4 L2 ; DW %7BA8FE78+E8 LI 

%7ba8f f 5c 02 Of 
%7ba8f f 60 020f 

Slot 31 

DB %7BA9002C+E4 L2 ; DW %7BA9002C+E8 LI 

%7ba90110 02 00 
%7ba90114 0200 

Slot 32 

Warning: not all addresses are present 
DB %7BA9002C+E4 L2 ; DW %7BA9002C+E8 LI 

%7ba90110 02 00 
%7ba90114 0200 

Slot 33 

DB %7BA90394+E4 L2 ; DW %7BA90394+E8 LI 

%7ba90478 03 00 
%7ba9047c 0800 

ps ended rc: 0 


Note: 

For slot 30 a warning message is issued because in this instance .s30 gave an error because slot 30 page tables were swapped out. 


The TEMPLATE EXEC 


Template is not intended to be executed. Rather, it is a model for creating new execs. It contains a number of generally useful subroutines 
used in other execs. 

Currently included in TEMPLATE are the following subroutines: 
linaddr <address> 

Converts an address expression to a linear address (without the % prefix). If storage cannot be referenced then a null 
string is returned. 

getstor <h>,<a>,<s>,<f> 

Retrieve a byte, word or double word from storage If storage can't be retrieved then the DF error msg is returned. 


<h> 

is a dump handle 

<a> 

is a DF address expression 

<s> 

is the size specified as: B, W or D 

<f> 

is the optional output format, which may be specified as C for character, N for 
decimal or X for hexadecimal string. X is the default. 


gethxstr <h>,<a>,<l> 

Retrieve a string of hex bytes from storage. If storage can't be retrieved then a null string is returned. The string is 
returned as a concatenated string of bytes. 


<h> 

is a dump handle 

<a> 

is a DF address expression 

<l> 

is the length of storage to retrieve 



getbytes <h>,<a>,<l> 


Retrieve a one or more bytes from storage. If storage can't be retrieved then a null string is returned. The string 
returned as a string of bytes separated by blanks. 


<h> 

is a dump handle 

<a> 

is a DF address expression 

<i> 

is the length of storage to retrieve 

getwords <h>,<a>,<l> 

Retrieve a one or more words from storage, if storage can't be retrieved then a null string is returned. 

<h> 

is a dump handle 

<a> 

is a DF address expression 

<i> 

is the length of storage to retrieve 

getdwords <h>,<a>,<l> 

Retrieve a one or more double words from storage. If storage can't be retrieved then a null string is returned. 

<h> 

is a dump handle 

<a> 

is a DF address expression 

<i> 

is the length of storage to retrieve 

getqwords <h>,<a>,<l> 

Retrieve a one or more quadruple words from storage. If storage can't be retrieved then a null string is returned. 

<h> 

is a dump handle 

<a> 

is a DF address expression 

<i> 

is the length of storage to retrieve 

format <name>,<offset>,<base>,<type>,<desc> 

Format a field from a control block and returns the value of the field. 

<name> 

is the field name. 

<offset> 

is a relative hex offset (prefix with + or -) 

<base> 

is the base address of the control block 

<type> 

is the filed type (b=byte, w=word, d=double word) 

<desc> 

is a description of the filed. 

fmtblock <name>,<offset>,<base>,<type>,<number>,<desc> 

Formats a table of bytes, words or double words imbedded in a control block. 

<name> 

is the field name. 

<offset> 

is a relative hex offset (prefix with + or -) 

<base> 

is the base address of the control block 

<type> 

is the filed type (b=byte, w=word, d=double word) 

<number> 

is the number of entries in the table 

<desc> 

is a description of the filed. 

Process Dump 

Formatter 



PMDF provides a Process Dump Formatter facility which is invoked automatically when the Open option of the File pull-down menu is 
selected against a Process Dump. 

The Process Dump Formatter offers a limited subset of the full Dump Formatter command set. These are: 

.D Display storage in Bytes, Words or Double-Words. 

DL Disply LDT entries. 

L List, Symbols, Maps and Symbol Groups 

.LM and .LMO Display Module Table Entries and Object Tables 

.MA Display Arena Records for storage dumped. 

.MO Display Object Records for storage dumped. 

.ML Display Information on Dumped Memory. 

Note: 

This command does not perform the same function as the similarly named Kernel Debugger .ML command, 
which formats VM Alias Records. 

.P Display threads. 

Note: 

Unlike the Dump Formatter and Kernel Debugger version of this command, .P is used to select the thread 
ordinal within the dumped process. Thus for single thread processes .P 1 is the only valid combination. 

.PB Display thread Block IDs. 

Note: 

Unlike the Dump Formatter and Kernel Debugger version of this command, .PB is used to select the thread 
ordinal within the dumped process. Thus for single thread processes .PB 1 is the only valid combination. 

R Display registers for each thread. 

.S Set default thread slot. 

Note: 

Unlike the Dump Formatter and Kernel Debugger version of this command, .S is used to select the thread 
ordinal within the dumped process. Thus for single thread processes .S 1 is the only valid combination. 

W Load and Unload Symbol files 

? Syntax help for internal commands 

.? Syntax help for external (dot) commands. 

Note: 

Except where noted above, the command set for the Process Dump Formatter does not support any of the optional parameters 
supported by their equivalent Kernel Debugger commands. 


When a Process Dump is loaded PMDF displays the following screen: 



Note: 

The data and time of the dump are displayed. 

If the dump was created because of a trap then the trap number is displayed otherwise the trap number is shown as ffffffff. 
The current thread slot and register are shown last. 


The Analyze pull-down menu differs from the standard PMDF Analyze facility. This offers the following choices: 

Registers 

This performs the R command for each thread dumped. 

Task Summary 

This performs a .P command followed by an R command for each thread dumped. 

Local Descriptors 

This performs a DL command. 

Virtual Memory Control Blocks 

This performs a .MA and .MO command. 

Module Table 

This is a much more extensive version of the .LMO command. The entire MTE and SMTE for each module dumped 
is formatted. 

Process Synopsis 

This formats the entire Process Dump, including dumping all memory in Byte format. 


The Analyze option menu appears as follows: 




For information on taking and controlling Process Dumps see: 
The CONFIG.SYS DUMPPROCESS command. 
The DosProcessDump API. 


Kernel Debugger and Dump Formatter Command Reference 


The Kernel Debugger and Dump Formatter share a common subset of commands which comprises the vast majority of the combined 
command set. The following symbols will be used to denote to which tool commands are applicable: 



Dump Formatter 


Kernel Debugger 

References to some system control offsets blocks are made in the descriptions of the commands. For the sake of brevity, the ALLSTRICT 
version of the OS/2 WARP 3.0 kernel is assumed and in some cases the equivalent RETAIL and HSTRICT kernel offsets are given in 
parentheses. For example: 

JFN_pTable (PTDA +0x5b8 (H/R: +0x5b0)) 



The reader should refer to System Reference, for control block layouts of the ALLSTRICT, HSTRICT and RETAIL kernels for OS/2 WARP 
3.0 and OS/2 2.1 1 kernels. 

Commands are categorised into two classes: 


Internal 


Internal commands begin with an alphabetic character. They are control program independent in the sense that they 



relate only to the Intel 80x86 hardware architecture. 


External External commands are prefixed with a period. They relate to the software environment under analysis and are 

dependent on the data structures of the operating system environment. 

For a description of the conventions used in the syntax diagrams, see Syntax Diagrams - Notation 

Complex expressions may be used where substituted values are required. The rules governing expressions are described in The expression 
evaluator. 


Syntax Diagrams - Notation 


The command syntax descriptions for the Dump Formatter and Kernel Debugger use a graphical notation, which is now in common use. The 
diagrams should be read as a roadmap starting at the sign: 


and ending at the sign: 


The command verb and options are shown in upper case type. 

Parameter values to be supplied by the user are shown in lower case. The rules governing the use of complex expressions are described 
under The expression evaluator. 

Continuation of the syntax diagram is shown by: 


at the break, and 


at the beginning of the continuation line. 

Expansion of syntax into detailed subsections is indicated thus: 

section name 


Expanded section begins: 

section name: 

Expanded section ends: 


See below for a more detailed description and example of subsections. 

Mutually exclusive options where a non-mandatory selection is required are shown thus: 


A 

B 

C 


Flere at most one of A, B or C may be selected. 


Mutually exclusive options where a mandatory choice is required are shown thus: 

A 

B 

C 


Multiple selections are shown: 


D 

A E 

B F 

C 


One or more of A, B or C is optional, whereas at least one of D, E or F is required. 

If a separator is required between parameters then it is shown in the diagram. For example, a comma is required between each selection in 
the following: 


A 

B 

C 


D 

E 

F 


For the Dump Formatter and Kernel Debugger spaces between parameters options are optional. 
Ordered non-exclusive selection lists and parameters are shown in the order they must be specified. 


A 

B 

C 


D = value 

E H 

F I 


Here, X must be specified first, followed optionally by zero or more of A, B or C separated by commas, followed by at least one of D, E or F 
separated by commas, followed optionally by H or I and finally by the character = and a quantity substituted for value. 

The following examples would be correct interpretations of this last syntax diagram: 

X D = 55 
XA,B 1=444 


Where complex diagrams require splitting into multiple sections, the sections are identified by a lower case italic name. For example: 


section 1 
section 2 


section 1: 


A 


B 

C 


In this example the syntax for section / is exclusive with section 2. The options for section 1 are shown at the label section / / 



The Expression Evaluator 


The Kernel Debugger and Dump Formatter expression evaluator supports a variety of arithmetic, boolean and addressing operators to form 
a value to be substituted into a command parameter may be derived. The atomic entities used within expressions may be string or numeric 
in type. Arithmetic expressions may be used with addressing separators to represent a physical, linear, selector:offset or segment:offset 
address's. Certain conventional values may be represented in expressions by mnemonics. 

Symbols defined by symbols files may also be used to represent either their equivalent address operator and address arithmetic value 
combination or constant arithmetic value in command line expressions. 


String Expressions 


These are identified by being enclosed in either single or double quotes. A string may contain any keyboard character including quotation 
marks, which must be duplicated so as not to act as a string terminator. Examples are: 

’this is a sting’ 

’ That ’ ’ s an other example’ 

"and so is this" 


Where there is no ambiguity then terminating quote may be omitted. 


Arithmetic Expressions 


The expression evaluator will accept numeric values in a decimal, hexadecimal, binary and octal notation. These are indicated thus: 

nnnnnnY 

Binary number nnnnnn. 

nnnnnnO 

Octal number nnnnnn. 

nnnnnnQ 

Alternative notation for octal number nnnnnn, 

nnnnnnT 

Decimal number nnnnnn. 

nnnnnnH 

Flexadecimal number nnnnnn. 

The base suffix may be in upper or lower case. 

The default base when a suffix is omitted is hexadecimal. 

The following represent the same number, expressed in each of the permissible forms: 

31 

31t 

lfh 

37o 

37q 

lOOOlllly 


Arithmetic expressions are of three types: 


Absolute 


An arithmetic expression that resolves to a numeric value. 


Absolute expressions may be formed from numeric values using arithmetic binary and unary operators and in-built 
functions together with parentheses (), to influence evaluation order. 

Boolean Boolean expressions are ones that resolve to either a TRUE or FALSE value. 

Boolean expression may be formed from arithmetic expressions using boolean binary and unary operators together 
with parentheses (), to influence evaluation order. 

Boolean expressions me be used as absolute values in arithmetic expressions. Whereupon TRUE assumes the 
value 1 and FALSE 0. 

Address An arithmetic expression that resolves to one or two numeric values that represent a linear, physical, segment:offset 

or selector:offset address. 

Address expressions are be formed from absolute expressions using addressing separators. 

Note: 


The expression evaluator allows arithmetic values to be expressed in hexadecimal. A potential conflict may occur where symbol 
names exist that begin with letters: a - f. For example, a linear address expressed as %fe1234 may be rejected with the message: 


Invalid expression 


where a symbol f or fe is defined. To avoid this conflict prefix the hexadecimal numeric value with a zero, thus: 

%0fel234 


If the same error message persists then the address refers to either paged out or unallocated virtual memory. 


Binary Operators 

Arithmetic operators: 

The following binary operators are permissible in any arithmetic expression: 



Multiplication 

/ 

Integer division 

MOD 

Modulo or remainder operator 

+ 

Addition 

" 

Subtraction 

AND 

Bitwise AND 

XOR 

Bitwise exclusive OR 

OR 

Bitwise OR 


Boolean operators: 


The following binary operators are permissible in any boolen expression: 


> 


< 


&& 

II 


Greater than 
Less than 

Greater than or equals 
Logical equality 
Logical inequality 
Logical AND 
Logical OR 


Unary Operators 

Arithmetic operators: 

The following unary operators are permissible in any arithmetic expression: 

NOT 

Bitwise ones complement 
Bitwise Twos complement 

Boolean operators: 

The following unary operator is permissible in any boolean expression: 

! 

Logical negation 


In-built Functions 


The following in-built functions operate in a single address expression operand: 

SEG 

Returns the segment or selector portion of an address that resolves to either a &segment:offset or #selector:offset 
form. 

OFF 


BY 


Returns the offset of an address the resolves to either a &segment:offset or #selector:offset form. 


WO 

DW 


Returns one byte from an address location. 
Returns one word from an address location. 



Returns one double word from an address location. 


POI 


PORT 

WPROT 


Example: 


Returns one double word far pointer (selector:offset or segment:offset address) from an address location. The low 
order word returned is treated as the offset. The high order word returned is treated as a selector or segment based 
depending on the default addressing mode. See the D command for more information. 


Returns one byte from an 8-bit I/O port address. 


Returns one word from a 16-bit I/O port address. 


DD % (dw (%7abcde0+10) ) 


Display the storage whose linear address is at location %7abcdf0. 


Address Separators and Address Expressions 


The following separators may be used with absolute expressions to form elements of an address: 


%% 


Segment prefix 
Selector prefix 
Linear address prefix 
Physical address prefix 


A segment/offset address separator. 

I 

Thread slot number qualifier. 

Where virtual addresses map to different physical addresses in different processes (typically private arena data and 
shared arena instance data) then | may be used to qualify the address by thread slot number. 

Note: 

This qualifier is ignored by the Dump Formatter 

Examples: 

%ebp 


The value of EBP assumed to be a linear address. 


%%10034 


The physical address at location 1 0034. 

38 | #lf : 0 


The selector:offset address 1f:0 in the context of slot 38. 


Evaluation Order 


Expression are evaluated left to right by applying the following order of precedence to operators, separators and in-built functions: 

1 - 0 

2 . | : 

3. & # % %% _ ! NOT SEG OFF BY WO DW POI PORT WPORT 

4. '/MOD 

5. + - 

6 . > < >= <= 

7. == != 

8. AND XOR OR 

9. &&II 


Mnemonics and Symbols 


Symbols defined in symbol files may be used in any arithmetic expression. Absolute symbols (that is, symbols of constants) are treated as 
absolute expressions. Other symbols are treated as address expressions. Symbols are activated using the WA command. 

The in-built register mnemonics supported by the Kernel Debugger and Dump Formatter are: 

• 16-bit registers: 

ax, bx, cx, dx, si, di, bp, ip, pc 

• 32-bit registers: 

eax, ebx, ecx, edx, esi, edi, ebp, eip 

• Segment registers: 
cs, ds, es, fs, gs, ss 

• Flag registers: 
fig, eflg 

• Control registers: 
crO, cr2, cr3 

• GDTR register: 
gdtb, gdtl 

• IDTR register: 
idtb, idtl 

• Task control registers: 
tr, Idtr, msw 


Debug registers: 


drO, drl , dr2, dr3, dr4, dr5, dr6 


• Test registers: 
tr6, tr7 

These may be used as absolute expressions for the current register value. See the R command for information on displaying and setting 
current register values and for the definition of the register mnemonics. 

The Kernel Debugger also defines mnemonics: 

• brO, brl, br2, br9 

to represent the addresses of breakpoints defined by the BP and BR commands. 

The expression evaluator allows the prefix @ to a symbol name to distinguish it from a similarly named mnemonic name. For example, @ax 
refers to the symbol ax, whereas ax refers to the ax register value. 

Similar conflicts may also arise between hexadecimal values and symbols. These may be avoided by prefixing and hexadecimal numeric 
value with a zero. 


Internal Commands 


The following comprise the set of internal commands: 


B 

BC 

BD 

BE 

BL 

BP 

BR 

BS 

BT 

C 

D 

DA 

DB 

DD 

DG 

Dl 

DL 

DP 

DT 

DW 


Display internal command help 
Breakpoint command family. 

Clear breakpoint 

Disable breakpoint 

Enable breakpoint 

List breakpoints 

Set or change a breakpoint 

Set a debug register breakpoint 

Show time-stamped breakpoint trace 

Set time-stamped breakpoint trace 

Compare memory 

Dump memory data (default) 

Dump memory ASCII data 
Dump memory byte data 
Dump memory double-word data 
Dump global descriptor table 
Dump interrupt descriptor table 
Dump local descriptor table 
Dump Page Tables 
Dump Task State Segment 
Dump memory word data 


DX 

E 

F 

G 

H 

I 

J 

K 

L 

M 

O 

P 

Q 

R 

S 

T 

U 

V 

w 

Y 

z 


Dump 80286 Loadall buffer 
Enter memory data 
Fill memory 
Go 

Perform hexadecimal arithmetic 

Input from 16-bit I/O port 

Execute commands conditionally. 

Display current stack 

List maps, groups and symbols 

Move memory data 

Output to 1 6-bit I/O port 

Process Trace 

Quit the Dump Formatter 

Display/Alter registers 

Search 

Trace 

Unassemble 

Trap Vectors Command family 
Add/remove symbol map 
Set Kernel Debugger options 
Set/list/execute the default command 


? - Show Internal Command Help or Evaluate an Expression 



Display help for internal Kernel Debugger and Dump Formatter commands and evaluate complex expressions. 


Syntax: 


expr 

string 


Parameters: 

fdefau/tj 

Displays a help summary for most of the Dump Formatter and Kernel Debugger internal commands. 

Note: 


Some of the information displayed is out-of-date. 



Two pages of information are displayed with an intervening --More-- prompt. 


expr 

string 

Results & Notes: 


An expression that resolves to either a simple numeric value or an address using any of the expression evaluation 
operators. Symbols of addresses and symbols of absolute values may be specified. 

A string enclosed in single or double quotes. 


If an expression is specified then it is evaluated. If it resolves to an address then it is displayed in equivalent forms, as follows: 


sel: offset %linaddr %%physaddr 


Where: 

se/:offset 

Specifies the selector and offset form of the address if the expression resolves to a sei:offset form. 

%/inac/dr 

Specifies the linear address equivalent of the expression if it resolves to either a se/:offset or %/inaddr form. 

%physaddr 

Specifies the physical address equivalent of the expression. If the expression resolves to a virtual address then the 
page tables must be present to perform the address translation. 

See the DP command for information on displaying page table entries and the .1 command for information on paging 
in memory. 

if the evaluated expression resolves to an absolute value then it is displayed in hexadecimal, decimal, octal, binary, character and boolean 
forms. For example: 


##? 5 

05H 5T 5Q 00000101Y ' . ' TRUE 
? bmp_segsize 

12H 18T 22Q 00010010Y ' . ' TRUE 


Notes 

Each arithmetic value is suffixed with a modifier that indicates the base used: 

H Signifies hexadecimal 

T Signifies decimal (Tens) 

Q Signifies octal (Octal?) 

Y Signifies binary (Yes/no?) 

In the last example above, bmp_segsize is an absolute symbol of value 0x0012 defined in map OS2KRNL. 


If a string expression is displayed then it is echoed back to the console. For example: 


##? "This is a way of anotating the debug log from this session's analysis 
This is a way of annotating the debug log from this session's analysis 

## 


Note: 


Evaluation of simple expressions involving two absolute expressions may be done using the FI command. 


B - Breakpoint Command Family 



The breakpoint family of eight commands provide a means of defining and managing sticky breakpoints. 

Syntax: 


B 


C 

D options 

E 

L 

P 

R 

S 

T 


Parameters: 

C 

Clear breakpoints. 

See BC command for options. 

D 

Disable breakpoints. 

See BD command for options . 

E 

Enable breakpoints. 

See BE command for options . 

L 

List breakpoints. 

See BL command for options . 

P 

Set or change breakpoints. 

See BP command for options . 

R 

Set a debug register breakpoint. 

See BR command for options . 

S 

Set a time-stamped breakpoint trace. 

See BS command for options . 

T 

Display a time-stamped breakpoint trace. 
See BT command for options . 


options 


See the associated command for details. 


BC - Clear Breakpoints 



Clear 1 or more breakpoints. 

Syntax: 


BC 


Parameters: 

n 

Breakpoint number to be cleared. 

* may be specified to clear all breakpoints. 

See Breakpoint commands for information on listing and setting breakpoints. 

Results & Notes: 

The specified breakpoints are cleared. No information is displayed. 


BD - Disable Breakpoints 



Disable 1 or more breakpoints. 

Syntax: 


BD 


Parameters: 

n 

Breakpoint number to be disabled. 

* may be specified to disable all breakpoints. 

See Breakpoint commands for information on listing and setting breakpoints. 

Results & Notes: 

The specified breakpoints are disabled. No information is displayed. 


BE - Enable Breakpoints 



Enable 1 or more breakpoints. 

Syntax: 


BE 


Parameters: 

n 

Breakpoint number to be enabled. 

* may be specified to enable all breakpoints. 

See Breakpoint commands for information on listing and setting breakpoints. 

Results & Notes: 

The specified breakpoints are enabled. No information is displayed. 


BL - List Breakpoints 



List all breakpoints defined by the BP and BR commands. 

Syntax: 


BL 


Parameters: none. 
Results & Notes: 


BL lists the definitions of all currently defined breakpoints. An example of this follows: 


bl 

0 e 0158:00005874 [DOSOPEN] 5 (5) ”.P*;G" 

1 d 0158:00007384 [DOSHOLDSIGNAL] 

2 e %f f f 461a4 [_tkSchedNext ] 12 (15) ".P*" 

3 dT %fff474e4 [_PGSwitchContext ] 

4 d %la022298 [DOS32WRITE] 10 (10) 

5 e W2 0030 : OOOOf fee [Ppid] 

6 dl El 0000:00000000 5 (5) "DW TASKNUMBER LI 

7 e II 00002e7 
## 


Breakpoint definitions are of two forms: 

1 . The general layout of the BP breakpoint definition is: 

n st addr [symbol] pc (me) "cmd, cmd, . . . . 


2. The general layout of the BR breakpoint definition is: 


n st tn addr [symbol] pc (me) "cmd, cmd, . . . 


Each of the fields has the following meaning: 


n 


The breakpoint number assigned to the given breakpoint. 


st 


tn 


The status of the breakpoint: 

d Disabled breakpoint. See BD command 

e Enabled breakpoint. See BE command. 

The suffix T signifies that the breakpoint is a time-stamp breakpoint created using 
the BT command. 

The suffix I indicates that the address has become invalid. 


The register breakpoint type (t) and size (n): 

R Read breakpoint. 

W Write breakpoint. 

I I/O breakpoint. 

Note: I/O breakpoints are only available to Pentium (and later) processors. The 
support for I/O breakpoints was introduced into the Kernel Debugger with fix 
pack 29 for Warp 3.0 and base Warp 4.0. 


adc/r 


The address at which the breakpoint is defined. 


[symbol] 

The breakpoint offset to the nearest symbolic address, if it exits. See LN and WA commands for information on listing 
and loading symbol definitions. 


pc 

The remaining passcount for this breakpoint. If a passcount is not defined then this value is not displayed. See BP 
and BR commands for more information on passcounts. 

(me) 

The initial passcount defined for this breakpoint. If no passcount was defined then this value is not displayed. See BP 
and BR commands for more information on passcounts. 


" cmd, cmd, ... " 

A list of commands to be executed when the breakpoint fires. Each command is separated by commas and the 
entire string is enclosed in quotes. If no command string is defined then this field is not displayed. See BP, BR and Z 
commands for more information on breakpoint command lists. 


BP - Set or Alter a Breakpoint 



Set or re-specify a software sticky breakpoint, by inserting an INT 3 instruction. 

Syntax: 


BP 

BPn 


addr 


passcount 


cmd 

cmd 


Parameters: 


Explicitly specifies a breakpoint number to be assigned to this breakpoint. A value from 0 to 9 may be specified. If 
specified there must be no space between the number and the BP command. 

The default is to assign the lowest available number. If all 10 breakpoint numbers have been assigned then the 
following message appears: 

Too many breakpoints 


addr 


The address of the breakpoint. 

The Kernel Debugger saves the byte of storage at the location specified by addr and inserts an INT 3 instruction in 
its place. 

Notes 


Whenever the Kernel Debugger is entered the storage overlayed by any breakpoints is temporarily restored. 
When the Kernel Debugger gives control back to the system, enabled breakpoints are re-instated. 

If addr specifies the address of an existing breakpoint then the existing breakpoint is updated with the new 
parameters. 

Each break-point address is recorded with its associated process context. For shared data this is of no 
consequence. However for private addresses, especially those in the private arena the addr may be 
qualified by slot number by using the | operator. This acts as a shorthand to save changing contexts using 
the .S command in order to set the breakpoint correctly. For example, suppose the current slot is 8, then: 

BP 31 | %10032 


is equivalent to: 

.3 31 

BP 31 | %10032 
.3 8 


passcount 

Specifies the number of times the breakpoint may be passed before the Kernel Debugger is entered. Each time the 
breakpoint is passed the count is decremented by 1 until 1 is reached. When the breakpoint is encountered with a 
count of 1 then it will fire and the Kernel Debugger will be entered. Thus if passcount is 5 then the breakpoint will 
fire on the 5th encounter. 

The default passcount is 1 , that is, the breakpoint will fire on first encounter. 


cmd 

Specifies a command to be executed when the breakpoint fires. More than one command may be specified by using 
a semi-colon separator and enclosing the entire command list in single or double quotes. 

If no command string is specified then the default command string, as specified by the Z command will be executed. 


Results & Notes: 


If the specified address is valid then the breakpoint definition is accepted otherwise one of the following messages is generated: 

Invalid linear address: %nnnnnnnn 
Invalid selector: selector : of f set 

Past end of segment selector : of f set 


If the break-point is successfully defined then the in-built mnemonic BRn, where n corresponds to the break-point number, takes the value 
of the break-point address. This may be used in any address expression or any command. 

Note: 


Since BP break-points are implemented by the insertion of INT 3 instructions, it is possible for such break-points to become 
discarded if the page of code is discarded and subsequently paged back into memory. 


If the .1 command is used to swap in a page of code, then the break-points are automatically restored. (In earlier versions of OS/2 it 
was necessary to specify the B option of .1). 

This complexity may be avoided by setting register break-points with the BR command. 


BR - Set or Alter a Debug Register Breakpoint 



Set or alter a sticky breakpoint, using the debug registers. 

Syntax: 

BR 
BRn 


E addr 

Wb pc , cmd 

Rb , " cmd 

lb 


Parameters: 


Explicitly specifies a breakpoint number to be assigned to this breakpoint. A value from 0 to 9 may be specified but 
from this range only a total of 4 may specify enabled debug register breakpoints. 

If a value n is specified there must be no space between the number and the BR command. 

The default is to assign the lowest available number. If all 10 breakpoint numbers have been assigned then the 
following message appears: 

Too many breakpoints 


If all four debug registers are in use then the message: 

Out of debug registers 


is displayed. 

Note: 

A disabled debug register breakpoint does not commit the use of a debug register. Thus more that 4 debug 
register breakpoints may be defined, but only a maximum of 4 enabled at any time. 

See the BE and BD commands for information on enabling and disabling breakpoints. 


Specifies that the breakpoint is to fire when an instruction at the breakpoint address is fetched for execution. 
This is mutually exclusive with the W and R parameters. 


Specifies that the breakpoint is to fire when storage at the breakpoint address, for length b is referenced, b may 
specify 1 , 2 or 4 bytes and defaults to 1 byte if left blank. 

This is mutually exclusive with the W, I and E parameters. 

\Nb 

Specifies that the breakpoint is to fine when storage at the breakpoint address, for length b is stored, b may specify 
1 , 2 or 4 bytes and defaults to 1 byte if left blank. 

This is mutually exclusive with the R, I and E parameters. 


Specifies that the breakpoint is to fire when data is read or written from an I/O port address specified by addr. The 
length operand, b is used by the processor to mask out the low order bits of the I/O address. Thus: 

BR 12 %13f 


places an I/O breakpoint on ports 13c - 13f. b may specify 1 , 2 or 4 bytes and defaults to 1 byte if left blank. 

Note that the 10 port address must be specified as a linear address, otherwise the expression evaluator will attempt 
to use the base address of the current CS register to resolve the address parameter. 

This is mutually exclusive with the R, W and E parameters. 

Note: I/O breakpoints are only available to Pentium processors. Support for this was introduced from fix pack 29 of 
Warp 3.0 and base Warp 4.0, however a bug has prevented them from working correctly until Fix Pack 0 of 
Warp 4.0 and Fix Pack 39 of Warp 3.0. 


addr 


The address of the breakpoint. 

The Kernel Debugger converts the address to a linear address before setting up the debug registers. If the address is 
invalid the definition is retained but marked disabled and invalid. 

Note: Real addresses may not be used with debug register breakpoints. 


passcount 

Specifies the number of times the breakpoint may be passed before the Kernel Debugger is entered. Each time the 
breakpoint is passed the count is decremented by 1 until 1 is reached. When the breakpoint is encountered with a 
count of 1 then it will fire and the Kernel Debugger will be entered. Thus if passcount is 5 then the breakpoint will 
fire on the 5th encounter. 

The default passcount is 1 , that is the breakpoint will fire on first encounter. 


cmd 

Specifies a command to be executed when the breakpoint fires. More than one command may be specified by using 
a semi-colon separator and enclosing the entire command list in single or double quotes. 

If no command string is specified then the default command string, as specified by the Z command will be executed. 
Note: The command list must be preceded by a comma, unlike the BP command where the comma is optional. 


Results & Notes: 


If the specified address is valid then the breakpoint definition is accepted and enabled otherwise it is accepted but disabled and one of the 
following messages is generated: 

Invalid selector: selector : of f set 

Past end of segment selector : of f set 


If the break-point is successfully defined then the in-built mnemonic BRn, where n corresponds to the break-point number, takes the value 
of the break-point address. This may be used in any address expression or any command. 


BS - Show Time-stamped Breakpoint Trace 



Show the time-stamped breakpoint trace. 

Syntax: 


BS 


Parameters: 


None. 

Results & Notes: 


The time-stamp trace buffer is formatted in LIFO order. The following is an example of the formatted trace: 

Number of entries = 4284 
BPO 381e6aela (hex) 

BP4 381e682 92 (hex) 

BPO 381e658dl (hex) 

BP4 381e40559 (hex) 

BPO 381e3da7d (hex) 


Notes 


The number of entries is the total accumulated number of time-stamp trace events regardless of wrapping of the (4096 entry) 
time-stamp trace buffer. 

Each entry show the breakpoint number that corresponds to the time-stamped breakpoint that fired, the high resolution time stamp 
in microseconds and a reminder that this value is in hexadecimal. 

For information on defining a time-stamp breakpoint see the BT command. 


BT - Set Time-stamped Breakpoint Trace 



Set a time-stamped breakpoint trace. 

Syntax: 


BT addr 

BTn 


Parameters: 

n 

Explicitly specifies a breakpoint number to be assigned to this breakpoint. A value from 0 to 9 may be specified, if 
specified, there must be no space between the number and the BT command. 

The default is to assign the lowest available number. If all 10 breakpoint numbers have been assigned then the 
following message appears: 

Too many breakpoints 


addr 

The address of the breakpoint. 

The Kernel Debugger saves the byte of storage at the location specified by addr and inserts an INT 3 instruction in 
its place. 

Notes 


Whenever the Kernel Debugger is entered the storage overlayed by any breakpoints is temporarily restored. 
When the Kernel Debugger gives control back to the system, enabled breakpoints are re-instated. 

If addr specifies the address of an existing breakpoint then the existing breakpoint is updated with the new 
parameters. 


Results & Notes: 


If the address is valid then the breakpoint definition is accepted and enabled. When enabled, the time-stamp breakpoint causes the current 
high resolution system time to be saved in a time-stamp circular trace buffer whenever the breakpoint address is executed. 

The trace buffer will record up to 4K entries before wrapping. 

Unlike the BP and BR commands, BT does not return control to user when the breakpoint is encountered. 

The time-stamp trace may be displayed using the BS command. 


C - Compare Memory 



Compare up to 64k bytes of memory at two locations in storage. 

Syntax: 


C addrl n addr2 


Parameters: 


adc/rl 

The address of the beginning of the first location to compare with the second. This address is assumed to be in 
# se/ectonoffset format. If the selector is omitted then the current DS selector is assumed. 


n 


The offset from addrl of the last byte to compare (that is, the length of the range less 1). 


addr2 

The address of the beginning of the second location to compare with the first. An address expression may be 
specified. This address is assumed to be in # selector-offset format. If the selector is omitted then the current DS 
selector is assumed. 


Results & Notes: 


Storage is compared, if no differences are found then the command prompt is displayed. If either of the addresses is invalid then an error 
message is displayed. 

Where differences are found in the address range then they are displayed in the following way: 

OOlf :00000000 57 4f OOlf : 00000003 
OOlf :00000001 50 32 OOlf : 00000004 
OOlf :00000003 57 4f OOlf : 00000006 


The addresses of the two differing locations are displayed outermost and the bytes at those locations are displayed in columns 2 and 3. 


D - Display Memory 



Display a range of memory from a given address. 


Syntax: 


D 

DA 

DB 


addr 


Ln 



DW 

DD 


Parameters: 


fdefau/tj 


A 


B 


W 


D 


ac/c/r 


L/7 


Display memory using the current display format. When the user breaks into the Kernel Debugger the current format 
is set to Byte display. If the user subsequently executes a DW, DA or DD command then the current format is set to 
words, ASCII or double-words, respectively. Byte format default may be restored by using DB. 


Force memory to be displayed in ASCII format and set the current display format to ASCII. The display is terminated 
as soon as the first null byte (0x00) is reached or the length specification is reached. 

Note: The current display address is not updated when in ASCII format. 


Force memory to be displayed in Byte format and set the current display format to Byte. 

Force memory to be displayed in Word format and set the current display format to Word. 

Force memory to be displayed in Double-word format and set the current display format to Double-word. 


The address of the memory location to display. When the user breaks into the Kernel Debugger this defaults the 
current DS selector, offset 0. If a display command other than DA is executed then the current display address is 
updated to the last displayed address +1 . 

An address expression may be specified. 


The number of bytes, words or double-words to display, depending upon the current display format. If not specified 
this defaults to 128 bytes, 64 words and 32 double-words respectively. 


Results & Notes: 


Memory is displayed according to the selected display format providing the address is valid. If it is not, but the address represents pageable 
storage then this may be paged in to memory using the .1 command. 

The following examples show output in the four different formats. 

ASCII format: 


##da If : 0 

OOlf: 00000000 WP_OBJHANDLE=177110 


Byte format: 


##db If : 0 


OOlf :00000000 

57 

50 

5f 

4 f 

42 

4a 

48 

41-4e 

44 

4c 

45 

3d 

31 

37 

37 

WP_OBJHANDLE=177 

OOlf :00000010 

31 

31 

30 

00 

55 

53 

45 

52-5 f 

49 

4e 

49 

3d 

43 

3a 

5c 

110. USER_INI=C : \ 

OOlf :00000020 

4 f 

53 

32 

5c 

4 f 

53 

32 

2e-4 9 

4e 

49 

00 

53 

59 

53 

54 

OS2\OS2 . INI . SYST 

OOlf :00000030 

45 

4d 

5f 

49 

4e 

49 

3d 

43-3a 

5c 

4 f 

53 

32 

5c 

4 f 

53 

EM_INI=C : \OS2\OS 

OOlf :00000040 

32 

53 

59 

53 

2e 

49 

4e 

49-00 

4 f 

53 

32 

5f 

53 

48 

45 

2SYS . INI ,OS2_SHE 

OOlf :00000050 

4c 

4c 

3d 

43 

3a 

5c 

4 f 

53-32 

5c 

43 

4d 

44 

2e 

45 

58 

LL=C : \OS2 \CMD . EX 

OOlf :00000060 

45 

00 

41 

55 

54 

4 f 

53 

54-41 

52 

54 

3d 

54 

41 

53 

4b 

E . AUTOS TART=T ASK 

OOlf :00000070 

4c 

49 

53 

54 

2c 

46 

4 f 

0 

1 

Ji. 

45 

52 

53 

00 

52 

45 

53 

LIST, FOLDERS .RES 


Word format: 


##dw IF : 0 


OOlf :00000000 

5057 

4f 5f 

4a42 

4148 

444e 

454c 

313d 

3737 

OOlf :00000010 

3131 

0030 

3555 

5245 

495f 

494e 

433d 

5c3a 

OOlf :00000020 

534f 

5c32 

534f 

2e32 

4e49 

0049 

5953 

5453 

OOlf :00000030 

4d45 

495f 

4 94e 

433d 

5c3a 

534f 

5c32 

534f 

OOlf :00000040 

5332 

5359 

4 92e 

494e 

4f 00 

3253 

535f 

4548 

OOlf :00000050 

4c4c 

433d 

5c3a 

534f 

5c32 

4d43 

2e44 

5845 

OOlf :00000060 

0045 

5541 

4f 54 

5453 

5241 

3d54 

4154 

4b53 

OOlf :00000070 

494c 

5453 

4 62c 

4c4f 

4544 

5352 

5200 

5345 


Double-word format: 


##dd If : 0 


OOlf :00000000 
OOlf :00000010 
OOlf :00000020 
OOlf :00000030 
OOlf :00000040 
OOlf :00000050 
OOlf :00000060 
OOlf :00000070 


4f5f5057 
00303131 
5c32534 f 
4 95f 4d45 
53595332 
433d4c4c 
55410045 
5453494c 


41484a42 
52455355 
2e32534 f 
433d4 94e 
4 94e4 92e 
534 f 5c3a 
54534f54 
4c4f 462c 


454c444e 
4 94e4 95f 
004 94e4 9 
534 f 5c3a 
32534f 00 
4d435c32 
3d545241 
53524544 


3737313d 
5c3a433d 
54535953 
534 f 5c32 
4548535f 
58452e44 
4b534 154 
53455200 


DA - Display Memory in ASCII Format 



Display a range of memory from a given address in ASCII format. 


Syntax: 


DA 


addr 


Ln 


See the D command for a full description. 


DB - Display Memory in Byte Format 



Display a range of memory from a given address in Byte format. 


Syntax: 


DB 


addr 


Ln 




See the D command for a full description. 


DW - Display Memory in Word Format 



Display a range of memory from a given address in Word format. 


Syntax: 


DW 


addr 


Ln 


See the D command for a full description. 


DD - Display Memory in Double-word Format 



Display a range of memory from a given address in Double-word format. 


Syntax: 


DD 


addr 


Ln 


See the D command for a full description. 


DG - Display Global Descriptor Table 



Display entries from the Global Descriptor Table. 


Syntax: 


DG 

DGA s 

Ln 


Parameters: 

fDefau/tJ 

Display valid GDT entries only. 





A 


Display all GDT entries including invalid descriptors. 


Display descriptor for selector number s . 

Notes 


Since bit 2 of the selector determines whether the descriptor is local or global the correct table entry will be 
displayed regardless of whether the DG or DL command, is used. If an LDT descriptor is specified then the 
following message is displayed: 

LDT 


The requestor priority level (RPL) bits (bits 0 and 1 of the selector) are ignored by DG. Thus: DG 8 displays 
the same information as DG 9, DG a and DG b. 

If the s parameter is omitted then the entire GDT is displayed. 


The number of descriptor entries to display from and including selector s . The default is to display one descriptor 
entry. 


Results & Notes: 


One or more descriptor table entries are displayed. An example display follows: 


##dga 

0000 

Invalid 

Bas=00000000 

Lim=00000000 

DPL=0 

NP 







0008 

Invalid 

Bas=00000000 

Lim=00000000 

DPL=0 

NP 







0010 

TSS32 

Bas=f fe05df c 

Lim=000000 67 

DPL=0 

P 

B 






0018 

Data 

Bas=f fe00150 

Lim=000003f f 

DPL=0 

P 

RW 


A 

UV 



0020 

Data 

Bas=f fe4a000 

Lim=000003f f 

DPL=0 

P 

RW 


A 

UV 



0028 

LDT 

Bas=7ab27000 

Lim=0000f f f f 

DPL=0 

P 







0030 

Data 

Bas=f fde08a4 

Lim=0000575b 

DPL=0 

P 

RW 

ED 

A 

UV 



003b 

Data 

Bas=7c38ba8c 

Lim=00000073 

DPL=3 

P 

RW 






0040 

Data 

Bas=f fe49400 

Lim=000003bf 

DPL=0 

P 

RW 



UV 



004a 

Data 

Bas=00000000 

Lim=lbf f f f f f 

DPL=2 

P 

RW 


A 

G4k 

BIG 

UV 

0053 

Data 

Bas=00000000 

Lim=lbf f f f f f 

DPL=3 

P 

RW 


A 

G4k 

BIG 

UV 

005a 

Code 

Bas=00000000 

Lim=lbf f f f f f 

DPL=2 

P 

RE 

C 

A 

G4k 

C32 

UV 

0063 

Data 

Bas=00000000 

Lim=lf f f f f f f 

DPL=3 

P 

RW 



G4k 

BIG 

UV 

006b 

Data 

Bas=00000000 

Lim=lbf f f f f f 

DPL=3 

P 

RW 


A 

G4k 

BIG 

UV 


For a detailed explanation of the descriptor table entry format see Descriptor Table Entry Format 


Descriptor Formats 


The Kernel Debugger and Dump Formatter format descriptor table entries in either of two forms depending on whether the descriptor 
describes a segment of memory or a gate: 

dddd type Bas=bbbbbbb Lim=llllllll DPL=p flags 
dddd type Sel : Of f=ssss : oooooooo DPL=p flags 

Each of these fields has the following meaning: 
dddd 

Descriptor number 


type 


Descriptor type. The following are defined: 


Type 

Type Numbers 

Description 

Code 

- 

Code segment 

Data 

- 

Data segment 

Invalid 

0 or 8 

Invalid descriptor 

TSS 

1 or 3 

Available or Busy 80286 
TSS 

LDT 

2 

system descriptor for an 
LDT 

CallG 

4 

Call Gate 

TaskG 

5 

Task Gate 

IntG 

6 

80286 Interrupt Gate 

TrapG 

7 

80286 Trap Gate 

Reserve 

10 or 13 

Reserved descriptor types 

TSS32 

9 or 1 1 

Available or Busy 
Intel486 CPU TSS 

CallG32 

12 

Inter486 CPU Call Gate 

IntG32 

14 

Intel486 CPU Interrupt 
Gate 

TrapG32 

15 

Intel486 CPU Trap Gate 


Bas= bbbbbbbb 

Segment base address. 

Lim=//////// 

Segment limit address. 


DPL -p 

Descriptor priority level. Only 0, 2 and 3 are used in OS/2. 

Sel =ssss :Off= oooooooo 

se/ector:offset transfer address for a task, interrupt, trap or call gate descriptor. 


f/ags 


Interpretation of the various descriptor flags. The following abbreviations are used 


Flag Bits 
NP ->15 

P 15 

RW 9 

RO ">9 

ED 10 

C 10 

G4k 23 


Description 

Not present 
Present 

Read/Write data segment 

Read-only data segment 

Expand-down data segment 

Conforming code segment 

4K granularity segment 
limit 


BIG 22 32-bit Stack offsets 
(ESP) used as a stack 
segment . (No meaning when 
used as a data segment) . 


C32 


32-bit operands and data 



sizes used by default 
with this code segment 


RES 

21 

reserved 

UV 

20 

Available bit. Used in 
OS/2 to indicate a UVIRT 
mapping . 

WC=w 

0 

Word count of a 16-bit 
call gate 

DWC=w 

0 

Double-word count of a 
32-bit call gate 

RE 

9 

Read/Execute code segment 

EO 

■’9 

Read-only code segment 

A 

8 

Code or Data segment 
accessed 

NB 

- 

TSS/TSS32 not busy 
(available) 

B 

- 

TSS/TSS32 busy 


Notes 


The bit offsets given above are relative to the second double-word of the descriptor viewed as 2 
double-words. The INTEL programmer's Reference shows the descriptor format as a quad-word, but uses 
the same offsets specified above. 

See the INTEL Pentium User's Reference or the INTEL x86 Programmer's References for further 
information. 


Dl - Display Interrupt Descriptor Table 



Display entries from the Interrupt Descriptor Table. 


Syntax: 


DI 

DIA i 

Ln 


Parameters: 


(Defau/t) 


Display valid IDT entries only. 


A 


Display all IDT entries including invalid descriptors. 


/ 

Display descriptor for interrupt vector /'. 


L/7 


The number of descriptor entries to display from and including selector /'. The default is to display one descriptor 
entry. 



Results & Notes: 


One or more descriptor table entries are displayed. 

An example display follows: 

##dia 

0000 

TrapG32 

Sel : Off =0170 : fff47e64 

DPL=0 

P 

0001 

IntG32 

Sel : Off =0170 :fff47fl0 

DPL=3 

P 

0002 

TaskG 

Sel :Off=le38 : 00000000 

DPL=0 

P 

0003 

IntG32 

Sel : Off =0170 : fff480cc 

DPL=3 

P 

0004 

TrapG32 

Sel : Off =0170 :fff48158 

DPL=3 

P 

0005 

TrapG32 

Sel : Off =0170 :fff48164 

DPL=0 

P 

0006 

TrapG32 

Sel : Off =0170 :fff48170 

DPL=0 

P 

0007 

TrapG32 

Sel :Off=005a: la090911 

DPL=0 

P 

0008 

TaskG 

Sel :0ff=0088 : 00000000 

DPL=0 

P 

0009 

TrapG32 

Sel : Off =0170 :fff48258 

DPL=0 

P 

000a 

TrapG32 

Sel : Off =0170 :fff48268 

DPL=0 

P 

000b 

TrapG32 

Sel : Off =0170 :fff48270 

DPL=0 

P 

000c 

TrapG32 

Sel : Off =0170 :fff48278 

DPL=0 

P 

OOOd 

TrapG32 

Sel : Off =0170 :fff48280 

DPL=0 

P 

OOOe 

TrapG32 

Sel : Off =0170 :fff4853c 

DPL=0 

P 

OOOf 

TrapG32 

Sel : Off =0170 :fff48544 

DPL=0 

P 

0010 

TrapG32 

Sel : Off =0170 :fff4854c 

DPL=0 

P 


For a detailed explanation of the descriptor table entry format see Descriptor Table Entry Format 


DL - Display the Current Local Descriptor Table 



Display entries from the Local Descriptor Table, of the default thread slot. See the .S command for information of changing the default 
thread slot. 

Syntax: 

DL 

DLA s 

DLP Ln 

DLS 

DLH 


Parameters: 


(Default) 


A 

P 


Display valid LDT entries only. 

Display all LDT entries including invalid descriptors. 

Obsolete option. Was used to display only valid private arena LDT descriptors where bits 3 and 4 of the selector 
number are 0. 


Obsolete option. Was used to display only valid shared arena LDT descriptors where bits 3 and 4 of the selector 
number are non-zero. 


H 


Obsolete option. Was used to display only huge segment LDT descriptors. 


s 


Display descriptor for selector number s . 


Notes 



Since bit 2 of the selector determines whether the descriptor is local or global the correct table entry will be 
displayed regardless of whether the DL or DG command, is used. If an GDT descriptor is specified then the 
following message is displayed: 

GDT 


The requestor priority level bits (bits 0 and 1 of the selector) are ignored by DL. Thus DL 7 displays the same 
information as DL 6, DL 5 and DL 4. 

If the s parameter is omitted then the entire LDT is displayed. 


The number of descriptor entries to display from and including selector s . The default is to display one descriptor 
entry. 


Results & Notes: 


One or more descriptor table entries are displayed. An example display follows: 


##dl 


0007 

Data 

Bas=7ab27000 

Lim=0000f f f f 

DPL=3 

P 

RO 


OOOf 

Code 

Bas=00010000 

Lim=000005f f 

DPL=3 

P 

RE 


0017 

Data 

Bas=00020000 

Lim=0000005b 

DPL=3 

P 

RW 


OOlf 

Data 

Bas=00030000 

Lim=0000falf 

DPL=3 

P 

RW 

A 

0027 

Data 

Bas=00040000 

Lim=00000276 

DPL=3 

P 

RW 

A 

002f 

Data 

Bas=00050000 

Lim=00000f f f 

DPL=3 

P 

RW 


0036 

Data 

Bas=000 60000 

Lim=00003f f f 

DPL=2 

P 

RW 

A 

003f 

Data 

Bas=00070000 

Lim=00000f f f 

DPL=3 

P 

RW 

A 

0047 

Data 

Bas=00080000 

Lim=00000f f f 

DPL=3 

P 

RW 


004f 

Data 

Bas=000 90000 

Lim=0000f f f f 

DPL=3 

P 

RW 

A 

0056 

Code 

Bas=000a0000 

Lim=00000af7 

DPL=2 

P 

RE C 


005f 

Data 

Bas=000b0000 

Lim=0000f f f f 

DPL=3 

P 

RW 



For a detailed explanation of the descriptor table entry format see Descriptor Table Entry Format 


DP - Display Page Directory and Table Entries 



Display entries from the page tables of the 


default thread slot. See the .S command for information on changing the default thread slot. 


Syntax: 


DP 

DPD addr 

DPA Ln 


Parameters: 

A 

D 

addr 


Display both page table and page directory entries. This is the default. 

Display only page directory entries. 

The linear or virtual address whose page directory and table entries are to be displayed. If not specified DP displays 
the entire page directory and its page tables. 


An address expression may be specified. 



The number of page table entries to display starting with the entry for addr. The default is to display the all page 
table entries from this entry assigned to addr. 

Note: Due to a bug in some versions of the Kernel Debugger an extra zero is required for this parameter. 

Results & Notes: 

One or more page and directory table entries are displayed. An example display follows: 


DP %90000 L50 


linaddr 

frame 

pteframe 

state 

res 

Dc 

Au 

CD WT Us 

rW 

Pn 

state 

%00090000* 

012f3 

frame=012f3 

2 

0 

D 

A 

U 

W 

P 

resident 

%00090000 


vp id=00a76 

0 

0 

c 

u 

U 

W 

n 

pageable 

%000a0000 

000b8 

vp id=000b8 

1 

0 

D 

u 

U 

W 

n 

uvirt 

%000b0000 

00888 

f rame=00888 

0 

0 

D 

A 

U 

W 

P 

pageable 

%000c0000 


vp id=00b8f 

0 

0 

c 

u 

U 

W 

n 

pageable 

%000d0000 

## 


vp id=00b92 

0 

0 

c 

u 

U 

W 

n 

pageable 


Output from the DP command is presented in tabular form. Each of the columns shown is described as follows: 

linaddr 

Linear address of virtual memory whose page directory and table entries are being formatted. Those lines 
corresponding to directory entries have an * flag suffixed to the linear address. Page table entries for a given 
directory entry are formatted following the directory entry. 

In the example above linear address %90000 has its page table located in physical frame 12f3, that is at physical 
%%12f3000. The page table entry corresponding to virtual memory at %90000 is described in the second line. Each 
of the following lines are consecutive entries from page table 12f3. 

frame 

The real storage frame number that contains either the page table (* suffix to linaddr) or page frame corresponding 
to the linaddr. If this field is blank then the frame has been discarded. If it contains a frame number then the contents 
are still valid even though the page table entry no longer points to a page frame. See pteframe field for further 
discussion. 

pteframe 

For table entries with the present bit set the this field shows the page frame number pointed to by this table entry. 

This is shown as fram e- fffff. Use the frame number with the .MP command to obtain information on allocation and 
ownsership of this this frame of real storage. 

For decommitted pages the table entry contains the Virtual Page ID. This is shown as vp id = vvvvv. Use the .MV 
command with the virtual page Id to obtain information on allocation and ownership of this memory. 

Notes 

The vp id is not valid to use with .MV if the state of the table entry is uvirt. 

If the frame has been decommitted but the frame field still shows a frame number then the frame contents 
are still valid for reclaiming without a page-in operation from the swap file. The corresponding virtual page will 
be queued from the idle list. See .MV and .MP commands for more information on page management. 

state 

State information is stored in the available bits (9 - 1 1) of the page table entry. These are interpreted on the 
right-hand end of the display. The following values may appear: 


State 

Value 

Description 

pageable 

0 

Storage may be paged-out 
to the swap file 

uvirt 

1 

Physical to virtual 
mapping reservation only 

resident 

2 

Non-pageable fixed 
storage 

uvirt 

3 

Physical to virtual 


mapping reservation only. 


Res 

Reserved page table entry bits. Should always be zero 

Dc 

Set to D is the page is dirty, otherwise c (clean). 

Au 

Set to A if the page has been accessed, otherwise u (unaccessed). 

CD 

Set to CD is the TLB cache-disable bit is set, else blank. 

WT 

Set to WT is the TLB cache write-transparent bit is set, else blank. 

Us 

Set to U if the page is for user storage, otherwise s (supervisor). 

rW 

Set to r is the page is read-only, otherwise W (writeable). 

Pn 

Set to P if the page is present, otherwise n (not present). 

Note: 

The Dump Formatter does not format page directory entries correctly. For page directory entries only the frame field is correct. The 
remaining fields are taken from the first PTE of the page table associated with the page diretory. This problem has been fixed from 
fix pack 36 for Warp 3.0 and fix pack 7 for Warp 4.0. 


Refer to the following for more information on page and memory management: 

.M family of Kernel Debugger and Dump Formatter commands. 

Intel Pentium User's Guide and Intel x86 Programmer's Reference. 


DT - Display a Task State Segment 



Format a task state segment. 


Syntax: 


DT 


addr 


Parameters: 

ac/c/r 

The address of the task state segment to be formatted. If not specified then the current TSS pointed to by the TR 
(task register) is used. 

Results & Notes: 

The TSS is formatted as follows: 



##dt 10:0 

eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000 edi=00000000 
eip=00000000 esp=00000000 ebp=00000000 iopl=0 — — — nv up di pi nz na po no 
cs=0000 ss=0000 ds=0000 es=0000 fs=0000 gs=0000 cr3=001dl000 

ss0=0030 esp0=000066f c ssl=0000 espl=00000000 ss2=0866 esp2=00001000 

ldtr=0028 link=0000 tflags=0000 i/o map=dfff 

ports trapped: 0-ffff 

Each of the fields displayed has the following meaning: 

Note: 

Some of the TSS fields are set at task creation and other when a task switch occurs. 


eax= 

Saved EAX register when a task switch occurs. 

ebx= 

Saved EBX register when a task switch occurs. 

ecx= 

Saved ECX register when a task switch occurs. 

edx= 

Saved EDX register when a task switch occurs. 

esi= 

Saved ESI register when a task switch occurs. 

edi= 

Saved EDI register when a task switch occurs. 

eip= 

Saved EIP register when a task switch occurs. 

esp= 

Saved ESP register when a task switch occurs. 

ebp= 

Saved EBP register when a task switch occurs. 

iopl= 

Saved EGLAGS iopl and flag settings when a task switch occurs. See .R command for an explanation of the flag 
abbreviations. 

cs= 

Saved CS register when a task switch occurs. 

ss= 

Saved SS register when a task switch occurs. 

ds= 

Saved DS register when a task switch occurs. 

es= 

Saved ES register when a task switch occurs. 

fs= 

Saved FS register when a task switch occurs. 

gs= 

Saved GS register when a task switch occurs. 

cr3= 



ss0= 


CR3 register at task creation. 

Note: This provides the real address of the Page Directory Table, which never alters under OS/2. 


Ring 0 SS register used for ring 0 privilege transitions. 


espO= 
ss1 = 
esp1 = 

ss2= 

esp2= 

ldtr= 

link= 

tflags= 

i/o maps= 

ports trapped: 
Notes: 


Ring 0 ESP register used for ring 0 privilege transitions. 

Ring 1 SS register used for ring 1 privilege transitions. 

Ring 1 ESP register used for ring 1 privilege transitions. 

Note: Ring 1 is not used under OS/2. 

Ring 2 SS register used for ring 2 privilege transitions. 

Ring 1 ESP register used for ring 2 privilege transitions. 

LDTR register at task creation. 

TR register value of previous nested task's TSS. 

The debug trap bit for this task. 

Offset to the I/O permission map from the beginning of this TSS. 

Note: It is permissible for the i/o map offset to point beyond the TSS segment. This signifies that no I/O permissions 
are granted and all ports will be trapped. 

List the range of I/O port addresses that will generate traps if accessed by this task. 


For performance reasons hardware implemented task switching is used only in a limited way in OS/2. TSSs defined by OS/2 
include: 

Protect mode code (TSS selector 10) 

Virtual DOS Machines 

Non Maskable Interrupt handling (trap 2, TSS selector 1E38) 

Double Fault handling (trap 8, TSS selector 88) 

All protect-mode processes run under a common top-level task using selector 10 as the TSS selector. 

The seltss (PTDA +0x2f0) field of the PTDA records the top-level task's TSS selector used by a given process, thus may be used to find the 
TSS selector for Virtual DOS Machines. 


Refer to Intel Pentium User's Guide and Intel x86 Programmer's Reference for more information on the Task State Segment and 
Hardware architected multi-tasking. 


DX - Display the 286 LoadAII Buffer 

1 


Formats a the 286 LoadAII buffer from physical address %%800 in memory. 

Syntax: 


DX 


Parameters: 

None. 

Results & Notes 

This command applies to the Intel 286 processor and is now obsolete. The results are meaningless. 


E - Enter Data Into Memory 



Enter data into a memory location. 

Syntax: 


E 


addr 


value 

string 


Parameters: 


addr 

The address of the memory location to be changed. If not specified this defaults to DS:00000000 where DS is 
established by the most recent register display. See 

An address expression may be specified. R and .R commands for information on establishing default addresses. 

va/ue 

A numerical byte value to be entered into memory. One or more values may be specified separated commas or 
blanks. These may be mixed with "string" values. 

string 

A character sting enclosed in quotes. Each character is treated as a byte value and entered into memory separately, 
no terminating 0x00 value is stored. No folding of characters to upper or lower case occurs. One or more strings may 
be specified separated by commas or blanks. These may be mixed with numerical va/ues. 


Results & Notes: 


If memory is present values are entered into storage otherwise an Invalid Address message is generated. If this should happen, valid 
storage may be paged into memory by means of the .1 command.. 

If no va/ue or string parameter is specified the Kernel Debugger prompts the user a byte at a time for replacement values by displaying 
the original value followed by a colon. In prompt mode, the user may proceed as follows: 

type a replacement byte value in hexadecimal, or 

accept the original value and move on to the next location by pressing the space-bar, or 

back up to the previous location by entering a - (minus) character, or 

terminate prompt mode by pressing carriage return (with or without a replacement value). 


F - Fill Memory With Repeated Data 



Fill memory with repeated data. 

Syntax: 


F addr Ln 


value 

string 


Parameters: 


ac/c/r 


Ln 


The address of the memory location to be changed. 
An address expression may be specified. 


The number (n) of bytes to fill with data. 


value 

A numerical byte value to be entered into memory. One or more values may be specified separated commas or 
blanks. These may be mixed with "string" values. 


string 

A character sting enclosed in quotes. Each character is treated as a byte value and entered into memory separately, 
no terminating 0x00 value is stored. No folding of characters to upper or lower case occurs. One or more strings may 
be specified separated by commas or blanks. These may be mixed with numerical va/ues. 


Results & Notes: 


The list of va/ues and strings is repeated up to the length Ln and used to fill memory at the specified address. If the fill data is shorter 
than the length then it is repeated, if it is longer it is truncated. 


If memory is present the storage is updated otherwise an Invalid Address message is generated. If this should happen, valid storage may 
be paged into memory by means of the .1 command.. 


G-Go 



Cause execution to continue from a given point and optionally set 1 or more 'go' breakpoints. 

Syntax: 


G 

GS = start-addr break-addr 

GT 


Parameters: 


(Delau/t) 


Continue execution from the current CS:EIP. 


The go-spec/a/ command causes the high-resolution time interval to be recorded from the point GS command is 
issued to the point that the Kernel Debugger is re-entered as the result of a break-point firing. 

Notes 

No account is taken of the Kernel Debugger overhead when calculating the time interval. 

When the Kernel Debugger re-enters, for whatever reason, the interval timer is cancelled until another GS 
command is executed. 

If the reason for entry is for reasons other than the firing of a sticky or go breakpoint then in addition to 
cancelling the interval timer no time message displayed. 


This option causes the Kernel Debugger's trap vector handlers to be removed temporarily from the IDT and the 
system's re-instated until after then next instruction has executed. After execution of the next instruction the the 
Kernel Debugger's V commands are re-instated. 

This is a convenience option that saves manually unhooking a Kernel Debugger trap vector handlers from the IDT. 
using a command sequence similar to: 

VC n 
T 

VS n 
G 


start-addr 

The address from which execution is to continue. This must be a valid address for the current context. If start-addr 
is omitted then execution continues from the current CS:EIP, as shown by the R command. 


Warning: Be very careful to ensure that the start address is valid for the privileged level and addressability of the 
code and data selectors in use. If the Kernel Debugger attempts to load a segment register that is invalid the system 
may trap in the debugger code. 

break-addr 

Up to ten go breakpoints may be specified. These are temporary breakpoints set in addition to any sticky 
breakpoints set by the B commands. When the Kernel Debugger is next entered, for whatever reason, all go 
breakpoints are cleared. 

If break-addr is omitted then the system continues execution until: 

A fatal exception occurs 

An Internal Processing Error (IPE) occurs. 

A sticky breakpoint fires 

A non-maskable interrupt occurs 

An INT 3 instruction is executed 

The user enters Ctrl-C from the debugging console. 

Results & Notes: 

The system continues execution until the Kernel Debugger is re-entered. If the reason for entry is other than a breakpoint firing then the R 
command is automatically executed followed by one of the following command prompts: 

> (signifies a command prompt in real mode) 

# (signifies a command prompt in protect mode with paging disabled) 

(signifies a command prompt in V86 mode with paging disabled) 

## (signifies a command prompt in protect mode with paging enabled) 

(signifies a command prompt in V86 mode with paging enabled) 

If an error situation caused entry to the Kernel Debugger then a diagnostic message may be generated by the failing code writing directly to 
the Kernel Debugger's communications port. 


If entry was caused by a Kernel Debugger trap handler receiving control then a message from the trap handler will be displayed. See the V 
command for details. 

If a breakpoint caused the Kernel Debugger to receive control then commands associated with the breakpoint that fired will execute. See the 
B commands for details. 

If a go-spec/a/ was interrupted by a breakpoint firing then the following message appears before any output associated with the breakpoint: 

Go Time (tics) = 017fb (hex) = 5145 (uSec) 

This shows the time interval in both timer-ticks and equivalent number of micro-seconds. 


H - Hex Arithmetic 



Display the sum, difference, product, quotient and remainder of two absolute expressions. 


Syntax: 


H abs-exprl abs-expr2 


Parameters: 

abs-exprl 

An expression that resolves to a simple numeric value using any of the expression evaluator operators. Symbols of 
absolute values may be specified in the expression, but symbols of relocatable addresses may not. 

abs-expr2 

An expression that resolves to a simple numeric value using any of the expression evaluator operators. Symbols of 
absolute values may be specified in the expression, but symbols of relocatable addresses may not. 


Results & Notes: 


Each of the expressions is evaluated. If either does not resolve to a simple numeric value then the message: 


Expression error 


is displayed. 

Having resolve each of the expressions then the sum, difference, product and quotient of the pair is displayed as in the following examples: 


##h 2 3 
+0005 -ffff 

*0006 

#h lOt 5 
+000f -0005 

*0032 

##h 7fff 5 
+8004 -7f fa 

*7f fb 

## 5*4 2*3 
+001a -OOOe 

*0078 

##h bmp_segsiz 

e 5 

+0017 -OOOd 

*005a 

##h 



0000 

/oooo 

0002 

0000 

/0002 

0000 

0002 

/1999 

0002 

0000 

/0003 

0002 

0000 

/0003 

0003 


Notes 


Calculations are performed using 16-bit signed arithmetic. 



The operation performed is shown prefixing the result. 

The product is shown as a two word value, the low word followed by the high. 

The division is shown as two words, the quotient followed by the remainder. 

In the last example, bmp_segsize is an absolute symbol of value 0x0012 defined in map OS2KRNL. 
Evaluation of complex expressions involving relocatable addresses may be done using the ? command. 


I - Input From an I/O Port 



Input a byte of data from a 1 6-bit I/O Port 

Syntax: 


I port 

Parameters: 

port 

A 16-bit I/O port address. This may be specified as a simple numeric expression. 

Results & Notes: 

The byte of data is read from the requested I/O port and displayed in hexadecimal at the console. For example: 

##I 2f 8 
Od 


See also the O command for related information. 


J - Execute Commands Conditionally 



Conditionally execute one of two lists of commands depending on whether an expression evaluates to TRUE (non-zero) or FALSE (zero). 
Syntax: 


J expression 


cmdl 

cmdl 


cmd2 


Parameters: 


expression 

An expression that resolves to either a simple numeric value or an address using any of the expression evaluation 
operators. Symbols of addresses and symbols of absolute values may be specified. 

cmdi 

Specifies a command to be executed if the expression evaluates to TRUE (non-zero). More than one command 
may be specified if each is separated by a semi-colon and the entire command list is enclosed in single or double 
quotes. 

If cmdi is omitted, control is returned to the debugging console when the expression is TRUE. 

cmd2 

Specifies a command to be executed if the expression evaluates to FALSE (non-zero). More than one command 
may be specified. Each cmd2 must be prefixed by a semi-colon, even if only one is specified. Quotes are not 
required to encompass a list of 

If cmd2 is omitted, control is returned to the debugging console when the expression is FALSE. cmd2 
commands. 

Results & Notes: 

If the expression resolves to one of the following forms, it is considered to be FALSE false: 

0 

0:0 
SO : 0 
%0 
%%0 


Any other resolution is regarded as TRUE. 

The J command is primarily intended to be used with the BP and BR commands to enable conditional breakpoints to be defined. 
Examples of this usage are: 


BP #f:12d5 "J ax ! =10t, g" 

BP #f:12d5 "J ax==10t;g" 

BP SchedNextRet "J wo (Tasknumber) ==8, ' .p*; . r ' ; g" 

BP DOSOPEN "J wo (Tasknumber ) ==32 da # (wo (ss : sp+2 0 ) ) : (wo (ss : sp+le) ) ; g ' ; g" 


The first example shows a breakpoint set at address #f:12d5. When this breakpoint fires the J command tests the condition AX register not 
equal to decimal 10. If this is true, the G command is executed. Since no cmd2 is specified the J command returns control to the debugging 
console when the condition is false (AX equal to decimal 10). 

The second example is has the same effect as the first but is implemented by testing the logically opposite condition. 

The third example shows one method of stopping the system when a thread switch to a particular thread slot has just occurred. In this case 
the debugging console gains control when thread slot 8 is selected, whereupon .p* and .r are automatically executed. The breakpoint 
SchedNextRet is one of two exit points from the scheduler (tkSchedNext). The other, SchedNextRet2 is taken when the same thread slot 
is selected for re-dispatch. The global variable Tasknumber contains the current and therefore out-going slot number on entry to the 
scheduler; and in-coming slot number on exit from the dispatcher. 

Note: 


The kernel calls one of the KMExitKmode routines before giving control to user code. During this kernel exit processing the 
Resched and ( TCB and PTDA) force flags are checked again and if set the scheduler/dispatcher sequence is invoked. It is possible 
therefore, that even though a thread is selected to run, and achieves run state, it is put back on the ready queue before being given 
any user processing time. 


The fourth example illustrates a method of tracing resources that are opened by a specific thread slot (in this case slot 32) without giving 
control to the debugging console. DOSOPEN is the kernel's entry point for open processing. At this point words OxOf and 0x10 contain the 
offset and selector that points to the resource name. 


K - Display Stack Trace from Address 


Display the stack-trace from a given stack frame address. 

Syntax: 


K 

KS stack-frame selector : of f set 

KB 


Parameters: 

K 

KS 

KB 

stack-frame 


sefector/offset 


Display stack frame trace assuming the default operation size from the code descriptor specified by se/ector:offset 
Display frame trace assuming an operation size of 16-bits (small-model). 

Display frame trace assuming an operation size of 32-bits (big-model). 

Address of the starting stack-frame. If not specified then this defaults to the current SS:EBP or SS:BP as set by the 
last register display. 

See the R and .R commands for information on changing the default register values. 

An address expression may be specified. 

The se/ector:offset address of the code that is in effect when the starting Stack-frame address was created. If not 
specified this defaults to the current CS:EIP or CS:IP as displayed by the 

See the R command. 

The code selector associated with this address is used for two purposes: 

1 To determine the default operand size in effect from the code segment descriptor. 

2 To attempt to distinguish between near and far calls at the starting stack-frame address. 


Results & Notes: 

The K command displays the stack trace, threading through the BP or EBP chain until either an invalid chain pointer is encountered or the 
command is interrupted by the user. For each stack-frame, the return address and for parameter words or double-words are displayed. The 
symbol associated with the return address is displayed after the parameter words. An example is given below: 


##.S 8 
##.R 

eax=c7c00000 ebx=00000014 ecx=003acd7 edx=0000aff7 esi=00030bff edi=00030000 


eip=0000272d esp=0003f8b8 ebp=0003f8c0 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02 f ss=001f ds=af f 7 es=be47 fs=150b gs=0000 cr2=1701d000 cr3=001d9000 


doscalll :CONFORM16 : postDOSSEMWAIT : 


d02f : 0000272d 
##K SS:BP CS: 

bdef : 0000711e 
bdef : OOOOeldf 
belf: 00000271 
belf: 00000003 
0020:00000003 
0020:00000000 
## 


c9 



leave 

IP 





ffff 

ffff 

0 6d6 

0a23 

SEEPSMQ + 67 

ffff 

ffff 

Obff 

f 91c 

GETMSGNO INPUT + 4a 

8001 

ffff 

0000 

0000 

THK1 6_CALLUSERTHUNKPROC + 

05ae 

0001 

0001 

0003 

THUNKTOINITMOVECURSOR + 3 

0001 

0001 

0000 

0010 


02af 

la03 

0197 

0000 



Notes 



1 . The K command is insensitive to unconventional use of the stack, such as where subroutine returns are effected explicitly by 
setting the stack pointer and jumping back to the calling code or in optimised code where the EBP or BP registers are not used 
as stack-frame pointers. 

Such possibilities exist within the system when for example the kernel returns to user code and also within some Presentation 
Manager components. 

2. No attempt is made to trace correctly through thunking layers where the default operand size changes. 

3. The stack trace is insensitive to any explicit segment operand overrides that may be active. 

4. No attempt is made to examine the descriptor of the SS register to determine whether EBP or BP should be used. In much 32-bit 
code both the 1 6-bit and 32-bit data descriptors are created by the system for calls to 1 6-bit subroutines. 

In the example above the stack-frame address has been explicitly overridden to use BP since the 16-bit stack selector (If) is in 
effect rather than the 32-bit 53 selector. 

5. Unlike the default stack-frame address the default code se/ector:offset is taken 
from the register values on entry to the Kernel Debugger. 


Warning: 

In consequence of these points it recommended that the stack-frame and code se/ector:offset addresses be explicitly coded when using 
the K command, as in the example above. In addition the stack trace should be verified with a memory dump of the stack. 


L - List Maps, Groups and Symbols 



List maps, groups and symbols from loaded symbol files. 
See the W command for related information. 

Syntax: 


M map-name 

G 


S 

addr 


N 

addr 

symbol 


Parameters: 

A 

M 


List absolute symbol definitions for the specified map-name or for all active maps. 
List all active maps or the status of the specified map. 


G 


List groups defined in all active maps of the specified map. 



When ac/c/r is specified this option list the nearest symbols to the address. If an exact match is found that symbols is 
listed otherwise the nearest symbol before and after ac/c/r is listed. 

When symbo/ is specified then the address, map and group corresponding to the symbol is listed. 

If neither adc/r nor symbo/ is specified then the default disassembly address is assumed. See the .R and U 
commands for related information. 


List all symbols defined in the group that encompasses ac/c/r for all active maps. If ac/c/r is not specified then the 
value of CS:EIP on entry to the debugger is assumed, as displayed by the R command. 


map-name 

ac/c/r 

symbo/ 


Specifies the link edit map name from which information is to be displayed. 
Specifies an explicit address expression.. 

Specifies a publicly defined symbol name from a program source code. 


Results & Notes: 


Symbol maps are obtained from symbol files (*.SYM), which are generated using the linkage editor and the MAPSYM utility. Under the 
Kernel Debugger they are loaded from the same directory as their corresponding load module when that is loaded by the system. When this 
happens the Symbols linked ( map-name ) message appears. When a load module is deleted from the system, its map is removed and the 
message Symbols unlinked ( map-name ) appears. 

Under the Dump Formatter symbol files are loaded for each MTE in the dump, during initialisation, from the current directory (usually the 
directory the Dump Formatter is running from). 

Under the Dump Formatter conforming segments are not checked. Thus a ring 2 selector:offset address may not be recognised, whereas 
the ring 3 selector is. If LN does not find a symbol for a ring 2 selector, try specifying the same selector with the ring 3 RPL specified. For 
example, specify d0fe:1234 as dOff :1 234. 

Under the Dump Formatter LN does not check equivalences of the selector:offset and linear forms of an address. Therefore it may be 
necessary to apply the CRMA to an address if LN fails to find any near symbols. 

Loaded symbol maps be active or inactive, depending on whether the corresponding load module is (potentially) active in the current 
context. In the case of private executable modules erroneous symbolic information may be associated with a private storage location. For 
this reason maps may be manually activated and removed using the W command. 

Maps for WINOS2 and WINDOWS components are supported under the Kernel Debugger only. These are automatically activated and 
deactivated according to whether the Kernel Debugger default thread slot is a WINDOWS or WINOS2 environment. 

Output from each of the L subcommands is more or less self explanatory. Examples follow: 


##la 
cmd : 

9876 acrtmsg 

9876 acrtused 

d6d6 aDBused 

d6d6 aDBdoswp 


List absolute symbols defined in cmd.exe and their associated constants. 


##lm 

cmd is active 
kernel [0040, 003f] 
minxobj is active 
wpprint is active 
nwiapi is active 
rexxinit is active 
pmmle is active 
fka is active 
ibmdevr is active 
ibmvgar is active 
pmpre is active 


os2krnl is active 


List current map status. 


Note: 


The Windows Kernel is not active, but loaded in thread slots 40 and 3f. The additional active slot number information is only 
provided with WINDOWS and WINOS2 environment map files. 


##lg cmd 
cmd: 

OOOf : 00000000 _TEXT1 
0017:00000000 _TEXT3 
OOlf :00000000 DGROUP 


List segment groups defined in cmd.exe and their associated addresses. 


##ln %20000 

%00020000 cmd:_TEXT3 :_eChcp 
##ln _tkschednext 

%fff4521c os2krnl : DOSHIGH32CODE :_tkSchedNext 
##ln 

0170 : f f f44695 os2krnl : DOSHIGH32CODE : Halt Inst + 1 
0170 : f f f44787 postSchedNext - fl 


List near symbols and their associated addresses. 


Note: 

In this example three uses of LN are shown. 

1 . Address %20000 is shown to coincide with _eChcp in the _TEXT3 group of CMD.EXE 

2. Symbol tkschednext is shown to be at address %fff4521c in the DOSHIGH32CODE of OS2KRNL. 

3. The current CS:EIP is at +1 byte from Haltlnst in group DOSHIGH32CODE of module OS2KRNL and -fl bytes before 
postSchedNext in the same group and module. 


##ls %f f f 3f 500 
%fff3f4a4 DevWOHandle 


%f f f 3f 4ac 
%fff3f4bl 
%f f f 3f 5a4 
%f f f 3f 5a9 
%fff3f 614 
%fff3f 62c 
%fff3f 638 
%fff3f 644 
%fff3f 6c0 
%fff3f 6c8 


g_CodeLockProc 

CodeLockProc 

g_CodeUnlockProc 

CodeUnlockProc 

_FSAbortVDM 

FS32IREAD 

FS32IWRITE 

w_Big32 IO 

w_SetFileLocks 

w_ProtectSetFileLocks 


List symbols in the current group encompassing address %fff3f500 


See the W command for related information. 


M - Move a Block of Data in Memory 



Move a block of contiguous data from one memory location to another. This command guarantees to duplicate the source data even when 
source and destination overlap. 

Syntax: 


M source-addr Ln 


target-addr 


Parameters: 

source-ac/c/r 


L/7 

target-ac/dr 


Results & Notes: 


The source address of the memory location to be moved (copied). 
An address expression may be specified. 

The number {n) of bytes to move. 

Target address of the memory move operation. 

An address expression may be specified. 


Memory content is copied from the source to the target address. If the source and target overlap then source will be updated, however the 
move operation is conducted from highest to lowest address or v/ce versa depending on whether the target address is higher or lower than 
the source, thereby guarantee-ing a faithful copy of the original source. 

If memory is present the storage is updated otherwise an Invalid Address message is generated. If this should happen, valid storage may 
be paged into memory by means of the .1 command.. 


O - Output to an I/O Port 



Output a byte of data to a 1 6-bit I/O Port 

Syntax: 


O port data 


Parameters: 

port 

data 


16-bit I/O port address 

A byte of data expressed numerically. This may be specified as a simple numeric expression. 


Results & Notes: 


The byte is sent to the requested I/O port. 

Note: 


This command may be used to set the debugging communication port parameters from the Kernel Debugger initialisation command 
file (KDB.INI) as in the following example: 


Set 

COM2 DTR 

line 

(assume 

standard 

port 

assignment 

for 

COM2 

that is, 

2f 8) : 

##0 

2 f c 1 










Set 

COM1 DTR 

line 

(assume 

standard 

port 

assignment 

for 

COM1 

that is, 

3f 8) : 

##0 

3fc 1 











P - PTrace Instruction Execution 



Trace instruction execution within a single procedure. This command is very similar to the T command, except that CALL, loop and string 
repeat instructions are traced as single instructions (even though allowed to execute correctly). 

Syntax: 


N = start-addr count 

T 


Parameters: 


(Default) 

Trace instruction execution by single-stepping, treating CALL loop and string repeat instructions as single events. 

Note: 

Certain areas of the system are known to cause problems if traced. Attempts to trace these areas are 
intercepted by the Kernel Debugger. See below for further information. 


Trace instructions but suppress the register display after each instruction is executed. 


This option causes the Kernel Debugger's trap vector handlers to be removed temporarily from the IDT and the 
system's re-instated until after then next instruction has executed. After execution of the next instruction the the 
Kernel Debugger's V commands are re-instated. 

This is a convenience option that saves manually unhooking a Kernel Debugger trap vector handlers from the IDT. 
using a command sequence similar to: 

VC n 
P 

VS n 


start-ac/c/r 

The address from which execution is to continue. This must be a valid address for the current context. If start-actc/r 
is omitted then execution continues from the current CS:EIP, as shown by the R command. 


count 


The number of instructions to trace before re-entering the Kernel Debugger unless one of the following conditions is 


encountered: 


A fatal exception occurs 

An Internal Processing Error (IPE) occurs. 

A 'sticky' breakpoint fires 

A non-maskable interrupt occurs 

An INT 3 instruction is executed 

The user enters Ctrl-C from the debugging console. 

If omitted then count defaults to 1 instruction. 


Results & Notes: 


The Ptrace commands trace the execution of machine instructions, and by default, display the current registers and next instruction to 
execute at each step. For the purposes of the displayed trace, the CALL instruction does not have the called routine traced, but tracing 
resumes on return. Loop and string repeat instructions are also treated as atomic entities with the instruction following the loop or repeat 
shown as the next to execute. INT 3 instructions are stepped over to avoid a double breakpoint at the same address even though they 
appear as the next instruction to execute. 

The following system routines are known to causes inconsistency or even system failure if traced. Consequently Ptrace will suspend tracing 
until after execution leaves these routines. 


Debug_CtrlC32 through _EndCtrlC32 
DebugLoadSymMTE through EndDebugLoadSymMTE 
PGSwitchContext through pgSwitchRet 


See the TX command for information on tracing these routines. 

PN suppresses the register display from the automatic R command, but still displays an unassembled next instruction for each traced 
instruction. If the ZS command has been used to specify a different default command then PN behaves exactly as P. 

An example of the output from PN is as follows: 

##PN 5 


0170 : f f f 4521f 

803d9e53e0f f f f 

cmp 

byte ptr 

[ InterruptLevel (ffe053 

9e) ] , ff 

0170 : fff 45226 

75b4 

jnz 

f f f 451dc 



0170 : fff 45228 

803d9643e0ff00 

cmp 

byte ptr 

[_cTKNoBlock (ffe04396) 

] , 00 

0170 : f f f4522f 

75be 

jnz 

f f f 451ef 



0170 : fff 45231 

OfOlel 

smsw 

cx 




## 

Note: The last traced instruction is the next to be executed. 


Warning: 

If any of the PTrace commands is interrupted, the Kernel Debugger may leave a temporary break-point active. This will result in a Trap 1 
when the system is next given control. If this occurs then either of the PT or GT commands will clear this condition. 


Q - Quit the Dump Formatter 


DF 


Quit the Dump Formatter. 


Syntax: 




Q 


Parameters: 

None 

Results & Notes: 

The Dump Formatter is terminated. 

Warning: 

Do not use this command when the Dump Formatter is invoked from PMDF. This will cause PMDF to hang. To terminate the Dump 
Formatter either quit PMDF from the system menu or select another dump for processing. 


R - Set or Display Current CPU Registers 


DF 


Display or set the current CPU registers saved on entry to the Kernel Debugger. Set default addresses for E command, D command, K 
command and U command. 

Under the Dump Formatter this command is implemented as an alias to the .Ft command. Also applicable to the Dump Formatter only, the 
default adressing mode is not set according to the VM flags of the EFLAGS register but is assumed always to be in protect mode. This has 
been corrected from fix pack 29 of Wapr 3.0 and base Warp 4.0. 

The remaining discussion in the section applies to the Kernel Debugger. 

Syntax: 


T 

flag register 
2-bit flag 
16 -bit register 
32 -bit register 

flag register: 


F 

EF flag mnemonics 


CRO 


crO flag mnemonics 


MSW 


msw flag mnemonics 



2 -bit flag: 


IOPL 

Pi 


16 -bit register: 

AX 

BX 

CX 16-bit value 

DX 

SI 

DI 

SP 

BP 

IP 

PC 

ES 

CS 

DS 

SS 

FS 

GS 

TR 

IDTL 

GDTL 

LDTR 


32 -bit register: 

EAX 

EBX 

ECX 32-bit value 

EDX 

ESI 

EDI 

ESP 

EBP 

EIP 

CR2 

CR3 

CR4 

DRO 

DR1 

DR2 

DR3 

DR6 

DR7 

TR6 

TR7 

IDTB 

GDTB 


Parameters: 


(Default) 

Displays the current CPU registers on entry to the Kernel Debugger and sets default addresses for E command, D 
command and U command. 

Register mnemonics are assigned the values displayed for use in address expressions and operands of other Kernel 
Debugger and Dump Formatter commands. 

Note: 


The .SS command may be used to change the displayed values of CS, EIP, SS and ESP. It does not affect 
the values restored then the Kernel Debugger returns control to the system. 


Toggle register display mode between terse and non-terse forms. The terse form suppresses display of the test, 
debug, control, descriptor table and task registers. 


This option affects both the R and .R commands. 


f/ag register 

Specifies one of the flag registers to be modified. The following mnemonics may be used: 


F 

80286 FLAGS register. 

EF 

80486 EFLAGS register. 

MSW 

Machine status word. 

CRO 

Control register 0 


Each of the flag bits is specified by a mnemonic. More than one flag may be specified, order being unimportant. The 
Kernel Debugger processes the flags from left to right, if an invalid flag is encountered processing stops, but those 
flags already processed remain in effect. 

Some flags are toggled by specifying a single mnemonic, others use a one mnemonic for the set condition and a 
another of the reset condition. 

If replacements flags are omitted then the user is prompted for values. 

f/ag mnemonics 

Specifies one or more updated flags values for the FLAGS or EFLAGS registers. 

The following mnemonics are defined. The value of t implies the flag value is toggled when the mnemonic is 
specified: 


Flag 

Bit 

Value 

Description 

VM 

17 

t 

Virtual 8086 Mode (EFLAGS 
only) 

RF 

16 

t 

Resume Flag - Disable Debug 
Exceptions (EFLAGS only) 

NT 

14 

t 

Nested Task 

OV 

11 

1 

Overflow 

NV 

11 

0 

“■Overflow 

DN 

10 

1 

Direction Down 

UP 

10 

0 

Direction Up 

El 

9 

1 

Enable Interrupts 

DI 

9 

0 

Disable Interrupts 

NG 

7 

1 

Negative Sign 

PL 

7 

0 

Plus Sign 

ZR 

6 

1 

Zero Result 

NZ 

6 

0 

Non-zero Result 

AC 

4 

1 

Auxiliary Carry 

NA 

4 

0 

“'Auxiliary Carry 

PE 

2 

1 

Parity Even 

PO 

2 

0 

Parity Odd 

CY 

0 

1 

Carry 

NC 

0 

0 

“■Carry 


crO f/ag mnemonics 

Specifies one or more updated flags values for the CRO register. 


The following mnemonics are defined: 


Bit 

Value 

Flag 

Description 

PG 

31 

1 

Paging Enabled 

ET 

4 

1 

Extension Type Flag - x87 
support 

TS 

3 

1 

Task Switch Flag 

EM 

2 

1 

Emulation exception 

MP 

1 

1 

Math Present 

PM 

0 

1 

Protect Mode Enabled 


msw f/ag mnemonics 

Specifies one or more updated flags values for the MSW register. 
The following mnemonics are defined: 


flag 

bi t 

value description 

TS 

3 

1 Task Switch Flag 

EM 

2 

1 Emulation exception 

MP 

1 

1 Math Present 

PM 

0 

1 Protect Mode Enabled 


2-bit f/ag 

This option is used to specify that the IOPL field of the FLAGS or EFLAGS register should be updated with the 
specified replacement 2-bit value . The mnemonic IOPL is coded to specify this option. 

If the replacement value is not specified then the user is prompted for a value. 

16-bit register 

This option is used to set the value of a register where 1 6-bit register specifies either one of the standard INTEL 
register mnemonics or: 

GDTL The GDT limit. 

IDTL The IDT limit. 

PC The program counter. This is synonymous with IP. 

This option implies a request to update a register value. If the corresponding new 16-bit va/ue is not specified then 
the prompted for a replacement value. 

32-bit register 

This option is used to set the value of a register where 32-bit register specifies one of the standard INTEL register 
mnemonics or GDTB or IDTB. 

This option implies a request to update a register value. If the corresponding new 32-bit va/ue is not specified then 
the prompted for a replacement value. 

2-bit va/ue 

Specifies the 2-bit replacement value for the IOPL. 

16-bit va/ue 

Specifies the 16-bit replacement vaule for a given 16-bit register. 

32-bit va/ue 

Specifies the 32-bit replacement vaule for a given 32-bit register. 


Results & Notes: 


The register information is obtained from a special save area when the Kernel Debugger is entered and restored from this area when control 
returns to the system. 

When no operands are specified the R command operates in display mode in exactly the same manner as the .R command. 

From fix pack 29 for Warp 3.0 and base Warp 4.0 Pentium Processor support was added to the Kernel Debugger. This allows CR4 to be 
specified as a register mnemonic, though CR4 is never displayed without specifying it explicitely as an operand to the R command. On 
non-Pentium systems, CR4 is shown as 00000000. 

When operands are specified the R command, operates in alter mode. If no replacement value is supplied on the command then the user is 
prompted with the current value followed by a colon prompt character. For example: 


##R SS 
0030 


Flag register value prompts have their current flag setting interpreted using the mnemonics described above. For example: 


##R EF 

— (rf) — (vm) — (nt) nv(ov) up (dn) ei(di) pi (ng) nz(zr) na(ac) po(pe) nc(cy) 


This example shows mnemonics for current settings followed by their negating mnemonic in brackets. For example: 
RF is not in effect, but since it is a toggle flag, the value RF specified at the prompt would set RF. 

NV is in effect. To negate it, specify OV at the prompt. 


S - Search Memory for Data 



Search a memory range for occurrences of a 

Syntax: 


list of bytes. 


S addr Ln 


value 

string" 


Parameters: 


addr 

The 

Ln 

The 

va/ue 



address of the memory location to be searched, 
number (n) of bytes to search. 


A numerical byte value to be searched into memory. One or more values may be specified separated commas or 
blanks. These may be mixed with "string" values. 



string 

A character string enclosed in single or double quotes. Each character is treated as a list byte values to search 
memory, no terminating 0x00 value is stored. No folding of characters to upper or lower case occurs. One or more 
strings may be specified separated by commas or blanks. These may be mixed with numerical va/ues. 


Results & Notes: 


The list of va/ues and strings is used as a combined search argument. Only precise matches against the entire search argument are 
reported. The search is repeated for every byte location in the range specified. If no matches are found then nothing is displayed. Where 
matches are found the Search command displays a list of storage addresses. For example: 


##s ptda_start 11000 "TD" 

0030 : OOOOfffe 
In 30 : f f fe 

0030 : OOOOfffe os2krnl : TASKAREA : ptda_signature 


If memory is present the storage is updated otherwise an Invalid Address message is generated. If this should happen, valid storage may 
be paged into memory by means of the .1 command.. 


T - Trace Instruction Execution 



Trace instruction execution singly or for a specific number or instructions or to a specific address. 

Syntax: 

T 

TX = start-addr count 

TN 

TT 


TA break-addr 

TC = start-addr 

TS 


Parameters: 

(Defau/tJ 

A 

C 


N 


Trace one or more instructions, excluding known bad areas (see X subcommand below. 

Trace all instructions to break-addr. 

This option requires break-addr to be specified. 

Counts all instructions executed until break-addr is reached. 

Note: Counting is suspended when the system switches out of the current context in which the TC command was 
executed. It is resumed when that context switches back. 

This option requires break-addr to be specified. 

Trace instructions but suppress the register display after each instruction is executed. 


S 


The trace speciai option is similar to TC except that an intermediate instruction count is displayed before execution 
of each CALL instruction and after each return. 


This option requires break-ac/c/r to be specified. 

Notes 


Counting is suspended when the system switches out of the current context in which the TS command was 
executed. It is resumed when that context switches back. 

TS does not attempt to match CALL with RET instructions. Instead it inserts a temporary breakpoint at the 
instruction address following the CALL. In addition TS maintains a 'stack' of return addresses and always 
checks the most recent two entries, as it single-instruction steps through the traced code, for a matching 
return address. This technique enables code that uses JMP instructions to return from a call to be better 
detected. This is not a foolproof technique, especially where mutually recursive code is traced. 


This option causes the Kernel Debugger's trap vector handlers to be removed temporarily from the IDT and the 
system's re-instated until after then next instruction has executed. After execution of the next instruction the the 
Kernel Debugger's V commands are re-instated. 

This is a convenience option that saves manually unhooking a Kernel Debugger trap vector handlers from the IDT. 
using a command sequence similar to: 

VC n 
T 

VS n 


This option forces the Kernel Debugger to trace areas of system code that are known to be unsuitable for tracing. 
Normally, when Trace encounters one of the following routines: 


Debug_CtrlC32 through 
DebugLoadSymMTE through 
PGSwitchContext through 


_EndCtrlC32 

EndDebugLoadSymMTE 

pgSwitchRet 


a temporary breakpoint is inserted at the routine's return address and the system is allowed to go to that address 
uninterruptedly. When TX is used the Kernel Debugger will attempt to trace instructions within these routines. 

The consequence of forcing tracing in these routines may be at worst, the system is left in an unrecoverable state, 
and at best certain Kernel Debugger commands will give erroneous information. 


start-addr 

The address from which execution is to continue. This must be a valid address for the current context. If start-addr 
is omitted then execution continues from the current CS:EIP, as shown by the R command. 


Warning: Be very careful to ensure that the start address is valid for the privileged level and addressability of the 
code and data selectors in use. If the Kernel Debugger attempts to load a segment register that is invalid the system 
may trap in the debugger code. 


break-addr 

The address at which tracing will stop and the Kernel Debugger will be re-entered unless one of the following 
conditions is encountered: 

A fatal exception occurs 

An Internal Processing Error (IPE) occurs. 

A ’sticky' breakpoint fires 

A non-maskable interrupt occurs 

An INT 3 instruction is executed 

The user enters Ctrl-C from the debugging console. The break-addr only remains in effect until the 
Kernel Debugger is next re-entered. 


count 

The number of instructions to trace before re-entering the Kernel Debugger unless one of the following conditions is 
encountered: 


A fatal exception occurs 


An Internal Processing Error (IPE) occurs. 

A 'sticky' breakpoint fires 

A non-maskable interrupt occurs 

An INT 3 instruction is executed 

The user enters Ctrl-C from the debugging console. 

If omitted then count defaults to 1 instruction. 


Results & Notes: 


Except for TN, TC and TS the default command is executed when control returns to the debugging console. This defaults to the R command 
unless respecified through use of the ZS command. 

TN suppresses the register display from the automatic R command, but still displays an unassembled next instruction for each traced 
instruction. If the ZS command has been used to specify a different default command then TN behaves exactly as T. 

An example of the output from TN is as follows: 

##TN 5 


0170 : f f f 4521f 

803d9e53e0ffff 

cmp 

byte ptr 

[ InterruptLevel (ffe053 

9e) ] , ff 

0170 : fff 45226 

75b4 

jnz 

f f f 451dc 



0170 : fff 45228 

803d9643e0f f 00 

cmp 

byte ptr 

[_cTKNoBlock (ffe04396) 

] , 00 

0170 : f f f4522f 

75be 

jnz 

f f f 451ef 



0170 : fff 45231 

OfOlel 

smsw 

cx 




## 

Note: The last traced instruction is the next to be executed. 


TC displays the total number of instructions trace in the following message: 


Total traced instructions: nnnn (decimal) 
where nnnn is the number of traced instructions. 

Following this message the default command is executed. See the Z command for details. 
TS displays a variety of different messages, examples of which are: 

Instruction Count: 101 

dOdf : 0000f319 9a0000c810 call 10c8:0000 

Accumulated number of instructions executed before the CALL instruction. 

Exit: 108 

Accumulated number of instructions executed when the return address is encountered. 
Note: This does not include the instruction at the return address. 


. . .Special exit follows. . . 
Exit: 360 


Accumulated number of instructions executed when the second most recent return address is encountered. In this case the most recent 
return addres is discarded from the 'stack'. 


Note: This does not include the instruction at the return address. 


Switching context... 

. . .Back in context 


Signifies context switching occurring and the suspension and resumption of instruction counting. 


Total traced instructions: nnnn (decimal) 


The total number of instructions traced when the break-ac/c/r is encountered. 

Notes 


REP and REPNE string instruction prefixes are handled differently to other instructions when single stepping. The Kernel Debugger 
generates a temporary break-point following the repeated string instructions (MOVS, CMPS, SCAS, LODS and STOS) and returns 
control to the system until the temporary break-point fires. 

INT 3 instructions encountered when single-stepping are reported but in actual fact stepped over, thereby avoiding a double 
break-point at the same address. 


Warning: 

If any of the Trace commands is interrupted, the Kernel Debugger may leave a temporary break-point active. This will result in a Trap 1 
when the system is next given control. If this occurs then either of the TT or GT commands will clear this condition. 


U - Unassemble 



Unassemble storage at a given address. 

Syntax: 


u 


addr 


Parameters: 

ac/c/r 

The address of the storage location to be unassembled. 

Results & Notes: 

The U command unassembles storage from the address given. No attempt is made to distinguish between code and data storage. If no 
ac/c/r is given then the default address is determined in order of precedence as follows: 

• The last unassembled address + 1, or 

• The CS:EIP of the last explicitly executed .R command or R command, or 

• The address of the next instruction to be executed. 

The U command takes its default addessing mode as set by by the R or .R commands. Prior to fix pack 29 for Warp 3.0 and base Warp 4.0 
V8086 addessing mode was ignored by the Dump Formatter unless explicitely specified by using the & addressing operator. 

Output from the U command is in two forms depending on whether the storage address was set in the context of the default (Kernel 



Debugger's or Dump Formatter's current) thread slot or another slot. In the former case output appears as in the following example: 


##u 

0170 : f f f 4521f 

803d9e53e0ffff 

cmp 

byte ptr 

[ InterruptLevel (f fe0539e) ] , f f 

0170 : fff 45226 

75b4 

jnz 

f f f 451dc 


0170 : f f f45228 

803d9643e0f f 00 

cmp 

byte ptr 

[_cTKNoBlock (f fe04396) ] , 00 

0170 : fff4522f 

75be 

jnz 

f f f 451ef 


0170 : fff 45231 

OfOlel 

smsw 

cx 


0170 : fff 45234 

66f7cl0200 

test 

cx, 0002 


0170 : fff45239 

Of 8552050000 

jnz 

fff 457 91 


0170 : f f f 4523f 

fa 

cli 




In the latter case the context is shown by prefixing the thread slot to the address as in the following example: 


##.p* 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*0022# 0013 0003 0013 0001 blk 0300 7b6ea000 7b8c7128 7b8ab820 leb8 18 epm 
##.r 34 

eax=00000000 ebx=000007f4 ecx=00000000 edx=0003ace7 esi=d02f4ef0 edi=000011ec 
eip=0000272d esp=0000755e ebp=00007566 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02f ss=001f ds=bccf es=ace7 fs=150b gs=000 cr2=15b20000 cr3=001d9000 


doscalll : CONFORM1 6 : 

: postDOSSEMWAIT : 




0034 d02f : 0000272d 

c9 

leave 




##u 






doscalll :CONFORM16 : 

: postDOSSEMWAIT: 




0034 d02f : 0000272d 

c9 

leave 




0034 d02f : 0000272e 

ca0800 

retf 

0008 



0034 d02f : 00002731 

87db 

xchg 

bx, bx 



0034 d02f : 00002733 

90 

nop 




doscalll :CONFORM16 : 

: DOSSEMSET 





0034 d02f : 00002734 

C8040000 

enter 

0004,00 



0034 d02f : 00002738 

8b4608 

mov 

ax, word 

ptr 

[bp+08] 

0034 d02f :0000273b 

3d0200 

cmp 

ax, 0002 



0034 d02f : 0000273e 

7448 

jz 

2788 



0034 d02f : 00002740 

250300 

and 

a, 0003 



0034 d02f : 00002743 

3d0100 

cmp 

ax, 0001 



0034 d02f : 00002746 

7415 

jz 

275d 



0034 d02f : 00002748 

8b4608 

mov 

ax, word 

ptr 

[bp+08] 

## 







Note: 


The unassembled instruction mnemonics may be toggled between upper and lower case by use of the Y command. 


V - Exception/Trap/Fault Vector Commands 



This group of commands manipulates IDT entries 0 through e to point to Kernel Debugger supplied interrupt handlers. By this means the 
Kernel Debugger may selectively be made to intercept each system exception before the system is allowed to process the exception. When 
a system exception is intercepted the Kernel Debugger gives control to the user. The original IDT entries are retained so that they may be 
re-instated, or given control following an exception which the Kernel Debugger has been intercepted. See the GT and TT commands for 
information in returning control to the system exception handlers. 


Syntax: 


L 

S 

T 

C 


V 


R 

V 

P 


interrupt 


F 

N 

U 


Parameters: 


L 


S 


T 


C 


R 


V 

P 

F 


U 


N 


The List subcommand list active Kernel Debugger trap and interrupt vectors. 

Only a category specification (R, V, P, F or N) may be optionally specified with the List subcommand. 


The Set subcommand activates a Kernel Debugger exception vector according to criteria specified in the remaining 
parameters. Vectors set using this option cause the Kernel Debugger to receive control only when the corresponding 
exceptions are generated in ring 2 and 3 code. 


The Trap subcommand activates a Kernel Debugger exception vector according to criteria specified in the remaining 
parameters. Vectors set using this option cause the Kernel Debugger to receive control whenever the corresponding 
exceptions are generated regardless of the current privileged level. 


The Clear subcommand re-instates one or more system exception handlers according to the criteria specified in the 
remaining parameters. 


This option refines the exception criteria to Real-mode exceptions only. 

If no refining category is specified then the vector subcommand being executed applies to the R, V, P and F options 
simultaneously. 


This option refines the exception criteria to V86-mode exceptions only. 


This option refines the exception criteria to Protect-mode exceptions only. 


This option refines the exception criteria to those exceptions that would be 'fatal' to a process or the system. If a 
Local (system) Exception handler is registered then the exception is not intercepted. User Exception Handlers do not 
affect the operation of the Vector command. Local Exception Handlers protect the system from recoverable errors, in 
particular bad parameters passed in API calls. If a parameter causes the system to trap, the Local Exception Handler 
is given control and the application is terminated. VSF will not intercept such traps. For further information on 
exception handling and how to intercept exceptions in general, see Trap and Exception Processing. 


This option allows exceptions, fatal to a process, to be intercepted before the process is terminated. Interception 
occurs if the exception is not recovered by any user exception handler. VSU will intercept 'user-fatal' exceptions 
whether they originate from the system or the user. In particular if a local (system) exception handler has intercepted 
a kernel trap due to a bad API parameter then this will be intercepted if no user exception handler recovers from the 
error. 

Note: This option was introduced with OS/2 Warp V3.0 fix pack 26 and OS/2 Warp V4.0 fix pack 1 . 


This option causes the Kernel Debugger exception handler to 'beep' continuously instead of giving control to the 
user. The user may then break into the Kernel Debugger by entering Ctrl-C at the debugging console. 

The N option works in conjunction with the four refining categories, that is, it does not by itself cause an interrupt to 
be trapped but instead specifies an action when that event occurs. 

The N option must be explicitly specified for all four subcommands (L S, T and C) when required. 


interrupt 

This allows one or more interrupt vectors, separated by commas, to be specified with the vector command as a 
refining criterion. 

It is not valid with the List subcommand. 

The abbreviation * may be specified as an alternative to the following interrupts, in each of the refining categories: 


Real-mode: 

0,1, 2,3,4 

,5,6 


V86-mode: 

0,1 ,3,4,5 

,6,7,9,a,b,c,d,e,(f, 

10) 

Protect-mode: 

0,1 ,3,4,5 

,6,7,9,a,b,c,d,e,(f, 

10) 

Fatal option: 

0,1 ,3,4,5 

,6,7,9,a,b,c,d,e,(f, 

10) 

User-fatal option: 

0,1 ,3,4,5 

,6,7,9,a,b,c,d,e,(f, 

10) 

Noise option: 

0,1 ,3,4,5 

,6,7,9,a,b,c,d,e,(f, 

10) 

Note: 





Vectors f and 10 are only allowed with OS/2 Warp SMP 

Results & Notes: 

Only the List subcommand gives immediate output, which is of the form in the following example: 

##VL 

R0123456 

V 

P d 
U e 
Fed 


As can bee seen from this example each category is shown with its one-letter abbreviation followed by a list of interrupt vectors currently 
being intercepted by the Kernel Debugger 

Notes: 


The N option must be specified explicitly to be listed. 

The U option is only from OS/2 Warp V3.0 fix pack 26 and OS/2 Warp V4.0 fix pack 1 . 


All other subcommands only cause output to appear when an interrupt is intercepted. When this happens the following events occur: 

1 . The N option is checked, if enabled the Kernel Debugger emits a continuous beep until the user breaks in through the debugging 
console. 

2. A trap message is issued if the default command is set to the R command. 

3. The default command is executed. 

The following figure shows the format of the trap messages issued by the Kernel Debugger exception handlers: 


Trap 0 - Divide Error Exception 
Trap 1 - Unexpected trace interrupt 
Trap 2 - NMI Interrupt 

Trap 4 - INTO Detected Overflow Exception 
Trap 5 - BOUND Range Exceeded Exception 
Trap 6 - Invalid Opcode Exception 

Trap 7 - Processor Extension Not Available Exception 

Trap 8 - Double Exception Detected nnnn 

Trap 9 - Processor Extension Segment Overrun 

Trap 10 (OAH) - Invalid TSS nnnn, mimmmmmmn 

Trap 11 ( OBH) - Segment Not Present nnnn, mimmmmmmn 

Trap 12 (OCH) - Stack Segment Overrun or Not Present nnnn. 

Trap 13 ( ODH) - General Protection Fault nnnn, mimmmmmmn 

Trap 14 ( OEH) - Page Fault nnnn, mmmmmmm 


In the messages above nnnn is substituted with the Intel exception code and mmmmmmmm is substituted with an interpretation of the 
Intel error code flags. For T rap 1 0, T rap 1 1 , T rap 1 2 and T rap 1 3 the error code flags are interpreted as: 

External External event 


IDT Gate 


IDT gate selector error 
GDT selector error 


GDT 

LDT LDT Selector error 

For Trap 14 the error code flags are interpreted as a combination of: 

Not Present Page not present 

Read Access Read Access failure 

Write Access Write Access Failure 

User mode Fault occurred when executing in User mode 

Supervisor Fault occurred when executing in Supervisor mode 

If a trap occurs in the debugger component of the Kernel Debugger the trap message will be appended with: 

- In Debugger 


If this happens then the only hope of recovering the system is to set the registers, using the R command, to a known consistent set of 
values. 

See the INTEL x86 Programmer's Reference or the INTEL Pentium User's Guide for further information on exceptions and error codes. 

Notes 


Trap 1 normally occurs as part of the operation of the Kernel Debugger. Only unexpected Trap 1 exception are therefore reported. 

When a Trap 1 is generated through use of the Debug Registers then the Kernel Debugger signals this with the message Debug 
register hit. 

Trap 3 occurs through use of the INT 3 instruction. This is used both by the Kernel Debugger and user programs in implementing 
break-points. User programs may use the INT 3 instruction as a program controlled technique for breaking into the debugger. In 
these cases a trap message is not displayed. 


W - Withmap Add/Remove 



Add or remove a symbol map. Under the Kernel Debugger this merely activates or deactivates a symbol map. Under the Dump Formatter a 
symbol file may be re-loaded using the Withmap command. 

Syntax: 


WA 

WR map-name 

symbol-file 

★ 


Parameters: 


Activate 1 or all symbol maps. 

Note: If the corresponding load module is not active then the map will remain deactivated. See the L command for 
more information on displaying map status. 



R 

L (not shown) 

map-name 

symbo/-fi/e 


Remove 1 or all symbol maps. 

This subcommand applied only to the Dump Formatter and has been superseded by the .LM command. 
The symbol map name to be activated or deactivated 

The symbol file name, with optional path and extension, to be loaded or removed. 

Note: 

This operand applied only to the Dump Formatter 


Specifies all maps or symbol files should be loaded or removed. 

Results & Notes: 

An error message is displayed only if the specified map-name is not loaded. 

See the L command for related information. 


Y - Set or Display Dump Formatter and Kernel Debugger 
Options 



Set or display Dump Formatter and Kernel Debugger disassembley and register options. 


Syntax: 


Y? 


386ENV 

REGTERSE 

DISLWR 


Parameters: 

fDefau/tJ 

Display current option settings. 


Display help for the Y command. 

386ENV 

Force the Kernel Debugger and Dump Formatter to toggle the environment setting between 286 and 386 modes. 

This affects the way in which commands interpret the register set. For example, in 286 mode, general registers are 
assumed, by default to be 16-bit registers. Under rare circumstances it necessary to force a particular mode to obtain 
a correct disassembly listing from the U command. Mostly this occurs in system code that is multi-modal and has 
juxtaposed sections of 32-bit and 1 6-bit code. 

The initial setting is 386 mode under OS/2 V2.0 and above. 


REGTERSE 


This has the same effect as the RT command. 



The initial setting is for terse register display. 


DISLWR 

This option toggles upper and lower case display of assembler mnemonics from the U command. 
The initial setting is for lower case mnemonics. 

Results & Notes: 

No information is displayed when setting options. 

When querying options those in effect are displayed, for example: 

##y 

386env dislwr regterse 


This shows that 386 environment is assumed, lower case disassembly is in effect and terse register display is active. If any one of these 
setting is toggled then the corresponding flag is not displayed. 


Z - Set, Execute or Display the Default Command 



Set, execute or display the default command. 


Syntax: 


z 


L 


S 


cmd 


Parameters: 


(Defau/t) 


Execute the default command string. 


L 


Display the default command string 


S 


Set the default command string. 


cmd 

Specifies a Dump Formatter or Kernel Debugger commands to be use in the default command string. If the command 
string comprises more than one command the each must be separated by commas and the entire string enclosed in 
quotes. 


Results & Notes: 


The default command string is executed automatically at breakpoints (where no other command string is associated with the breakpoint), 
after instruction tracing or when exception vectors are trapped. See the following commands for more information: 

B commands 


G command 



P command 


T commands 
V commands 

When the Kernel Debugger and Dump Formatter are initialised the default command string is set to "FT. 

Note: 

When the user breaks into the Kernel Debugger with Ctrl-C the R command is executed regardless of the default command setting. 


External Commands 


The following comprise the set of external commands: 


? 

Display external command help 

.A 

Display the SAS structure 

.B 

Set COM Parameters 

.C 

Display the Common ABIOS Data Area 

.D 

Display an OS/2 System Structure 

.H 

Display Dump Data Set Inforamtion 

.1 (KDB) 

Swap in Storage 

■1 (DF) 

Display Dump State 

.K 

Display Ring 3 stack 

.LM 

Format Loader structures (MTE, OTE, STE) 

.M 

Formate Memory Structures 

.MA 

Format Memory Arena records (VMAR) 

.MC 

Format Memory Context Records (VMCO) 

.MK 

Format Memory Lock Information Records (VMLI) 

.ML 

Format Memory Alias Records (VMAL) 

.MO 

Format Memory Object Records (VMOB) 

.MP 

Format Memory Physical Page Frame Tables 

.MV 

Format Memory Virtual Frame Tables 

.N 

Display Dump Fleader Information 

.0 

Override default behaviour 

.P 

Display Process and Thread Status Information 

.PB 

Display Blocked Process Information 

.PQ 

Display Scheduler Thread Queuing Information 

.PU 

Display Process and Thread User Space Information 

.R 

Display ring 2/3 registers 


.REBOOT 

Reboot the system under test 

.S 

Switch default thread slot 

.SYSDUMP 

Force a System Dump and Restart the System 

.T 

Format the System Trace Buffer 


.? - Show External Command Help 



Display help for internal Kernel Debugger and Dump Formatter commands. 

Syntax: 


Parameters: None. 

Results & Notes: 

Displays a help summary for most of the Dump Formatter and Kernel Debugger external commands. 

Note: 

Prior to fix pack 29 for Warp V3, some of the help information displayed is out-of-date. This information has been updated from fix 
pack 29 of Warp V3 and base Warp V4. 

Two pages of information are displayed with an intervening --More-- prompt. 


.A - Format the System Anchor Segment (SAS) 



Format the System Anchor Segment (SAS). 

Syntax: 


■ A 

Parameters: 

none 

Results & Notes: 

The SAS is located from either GTD selector 70 or 78. 


.A displays the following information: 





SAS Base Section 


SAS signature: 
offset to tables section: 
FLAT selector for kernel data: 
offset to configuration section: 
offset to device driver section: 
offset to Virtual Memory section: 
offset to Tasking section: 
offset to RAS section: 
offset to File System section: 
offset to infoseg section: 

SAS Protected Modes Tables Secti 

selector for GDT : 
selector for LDT : 
selector for IDT: 
selector for GDTPOOL: 

SAS Device Driver Section 

offset for the first bimodal dd: 
offset for the first real mode dd: 
sel for Drive Parameter Block: 
sel for ABIOS prot . mode CDA: 
seg for ABIOS real mode CDA: 
selector for FSC: 

SAS Task Section 

selector for current PTDA: 
FLAT offset for process tree head: 
FLAT address for TCB address array: 
offset for current TCB number: 
offset for ThreadCount : 

SAS File System Section 

handle to MFT PTree: 
selector for System File Table: 
sel. for Volume Parameter Bloc: 
sel. for Current Directory Struc: 
selector for buffer segment: 

SAS Information Segment Section 

selector for global info seg: 
address of curtask local infoseg: 
address of DOS task's infoseg: 
selector for Codepage Data: 

SAS RAS Section 

selector for System Trace Data Area: 
segment for System Trace Data Area: 
offset for trace event mask: 

SAS Configuration Section 

offset for Device Config. Table: 

SAS Virtual Memory Mgt . Section 

Flat offset of arena records: 
Flat offset of object records: 
Flat offset of context records: 
Flat offset of kernel mte records: 
Flat offset of linked mte list: 
Flat offset of page frame table: 
Flat offset of page range table: 
Flat offset of swap frame array: 
Flat offset of Idle Head: 
Flat offset of Free Head: 
Flat offset of Heap Array: 
Flat offset of all mte records: 


SAS 

0016 

0168 

001E 

0020 

002C 

005C 

006E 

0074 

0080 

on 

0008 

0000 

0018 

0100 

0CB9 

0000 

04C8 

0000 

0000 

00C8 

0030 

FFF10910 

FFF06BB6 

FFDFFB5E 

FFDFFB62 

FE72CFBC 

00C0 

0788 

07B8 

00A8 

0428 

03C80000 

FFFFFFFF 

07CB 

04B0 
04B0 
0B2 8 

0D50 

FFF13304 

FFF1331C 

FFF1330C 

FFF0A891 

FFF07934 

FFF11A70 

FFF111EC 

FFF03BAC 

FFF10090 

FFF10080 

FFF11B78 

FFF12E04 


Each of the items displayed has the following significance: 

— SAS Base Section — 

Marks the beginning of the SAS header section. 


SAS signature 

SAS signature from SAS_signature (SAS+OxO). Always set to character value "SAS ". 

offset to tables section 

Offset from SAS selector to the protected mode tables section. 

Taken from SAS_tables_data (SAS+0x4). 



FLAT selector for kernel data 

Selector for 4G Read/Write addressability. 

Taken from SAS_flat_sel (SAS+0x6). 

offset to configuration section 

Offset from SAS selector to the configuration tables section. 

Taken from SAS_config_data (SAS+0x8). 

offset to device driver section 

Offset from SAS selector to the device driver section. 

Taken from SAS_dd_data (SAS+Oxa). 

offset to Virtual Memory section 

Offset from SAS selector to the Virtual Memory section. 

Taken from SAS_vm_data (SAS+Oxc). 

offset to Tasking section 

Offset from SAS selector to the Tasking section. 

Taken from SAS_task_data (SAS+Oxe). 

offset to RAS section 

Offset from SAS selector to the RAS data section. 

Taken from SAS_RAS_data (SAS+OxlO). 

offset to File System section 

Offset from SAS selector to the File System section. 

Taken from SAS_file_data (SAS+0x12). 

offset to infoseg section 

Offset from SAS selector to the Infoseg section. 

Taken from SAS_info_data (SAS+Oxle). 

— SAS Protected Modes Tables Section -- 

Marks the beginning of the protected mode tables section 

selector for GDT 

GDT selector that maps the GDT. 

Taken from SAS_tbl_GDT (SAS_tables_section+OxO). 

selector for LDT 

No longer used. 

Taken from SAS_tbl_LDT (SAS_tables_section+0x2). 

selector for IDT 

GDT selector that maps the IDT 

Taken from SAS_tbl_IDT (SAS_tables_section+0x4). 

selector for GDTPOOL 

First GTD selector in selector pool. I.e first non-predefined GDT selector. 

Taken from SAS_tbl_GDTPOOL (SAS_tables_section+0x6). 

— SAS Device Driver Section - 

Marks the beginning of the Device Driver Section 

offset for the first bimodal dd 

Offset from SAS selector to the first device driver header in the device driver chain. 
See .D command for formatting device driver headers. 

Taken from SAS_dd_bimodal_chain (SAS_dd_section+OxO). 


offset for the first real mode dd 

No longer used. 

Taken from SAS_dd_real_chain (SAS_dd_section+0x2). 

sel for Drive Parameter Block 

Selector that points to the head of the DPB chain. 

See .D command for formatting DPBs. 

Taken from SAS_dd_DPB_segment (SAS_dd_section+0x4). 

sel for ABIOS prot. mode CDA 

Selector for ABIOS protect mode CDA. 

See .C command for displaying CDA information. 

Taken from SAS_dd_CDA_anchor_p (SAS_dd_section+0x6). 

seg for ABIOS real mode CDA 

Segment for ABIOS real mode CDA. See .C command for displaying CDA information. 
Taken from SAS_dd_CDA_anchor_r (SAS_dd_section+0x8). 


selector for FSC 

Selector for the FSC segment. 

Taken from SAS_dd_FSC (SAS_dd_section+0x2). 

— SAS Task Section -- 

Marks the beginning of the tasking section 

selector for current PTDA 

Selector for the current PTDA and ring 0 stack. 

Taken from SAS_task_PTDA (SAS_task_section+OxO). 

FLAT offset for process tree head 

Linear address of _pPTDAFirst, which contains the linear address of the PTDA that heads the PTDA tree. 
Taken from SAS_task_ptdaptrs (SAS_task_section+0x2). 

FLAT address for TCB address array 

Linear address of _papTCBSIots, which contains the linear address of the TCB array. 

Taken from SAS_task_threadptrs (SAS_task_section+0x6). 

offset for current TCB number 

Linear address of _TaskNumber, which contains the current thread slot number. 

Taken from SAS_task_tasknumber (SAS_task_section+Oxa). 

offset for ThreadCount 

Linear address of _ThreadCount, which contains the highest thread slot number in use - 1 . 

Taken from SAS_task_threadcount (SAS_task_section+Oxe). 

— SAS File System Section -- 

Marks the beginning of the File System Section 


handle to MFT PTree 

Linear address of the head of the Ptree for the . 

See .D command for formatting MPTs. 

Taken from SAS_file_MFT (SAS_file_section+OxO). 

selector for System File Table 

Selector for the segment containing a table of selectors that point to tables of SFTs. Each SFT table contains an 8 
byte header followed by contiguous SFT entries. 

See .D command for formatting SFTs. 


Taken from SAS_file_SFT (SAS_file_section+0x4). 

sel. for Volume Parameter Bloc 

This is the selector for the work buffer used by volume mount processing. 
Taken from SAS_file_VPB (SAS_file_section+0x6). 

Note: 


The selector for the VPB segment is not given by this field. It may be located from the selector named by 
global variable GDT_VPB See .D command for formatting VPBs. 

sel. for Current Directory Struc 

Selector for the RMP segment containing CDS structures. 

See .D command for formatting CDSs. 

Taken from SAS_file_CDS (SAS_file_section+0x8). 

selector for buffer segment 

Selector for the file system buffer segment. 

Taken from SAS_file_buffers (SAS_file_section+Oxa). 

— SAS Information Segment Section -- 

Marks the beginning of the Information Section. 

selector for global info seg 

Selector for the Global Information Segment (GISEG). 

Taken from SAS_info_global (SAS_info_section+OxO). 

address of curtask local infoseg 

16:16 far pointer for the current Local Information Segment (LISEG). 

Taken from SAS_info_global (SAS_info_section+0x2). 

address of DOS task's infoseg 

Real mode local information segment pointer (unused). 

Taken from SAS_info_localRM (SAS_info_section+0x6). 

selector for Codepage Data 

Selector for the segment containing the Code Page Data Information Block (CDIB). 

Taken from SAS_info_CDIB (SAS_info_section+Oxa). 

— SAS RAS Section -- 

Marks the beginning of the RAS section 

selector for System Trace Data Area 

Selector for the STDA trace buffer. 

Taken from SAS_RAS_STDA_p 

See .T command for formatting the system trace buffer. (SAS_RAS_section+OxO). 

segment for System Trace Data Area 

Selector for the STDA trace buffer. 

Taken from SAS_RAS_STDA_r (SAS_RAS_section+0x2). 

The same value is stored in both SAS_RAS_STDA_p and SAS_RAS_STDA_r. 
offset for trace event mask 

Offset from the SAS to the trace major event codes table (ras_mec_table). 

Taken from SAS_RAS_event_mask (SAS_RAS_section+0x4). 

--- SAS Configuration Section -- 

Marks the beginning of the Configuration section 


offset for Device Config. Table 


Offset from the SAS to the device configuration table. 

Taken from SAS_config_table (SAS_config_section+OxO). 

— SAS Virtual Memory Mgt. Section -- 

Marks the beginning of the Virtual Memory Management section 

Flat offset of arena records 

The linear address of _parvmOne, the linear address of the first VM arena record (VMAR). 

See .MA command for related information. 

Taken from SAS_vm_arena (SAS_vm_section+OxO). 

Flat offset of object records 

The linear address of _pobvmOne, the linear address of the first VM object record (VMOB). 

See .MO command for related information. 

Taken from SAS_vm_object (SAS_vm_section+0x4). 

Flat offset of context records 

The linear address of _pcovmOne, the linear address of the first VM context record (VMCO). 

See .MC command for related information. 

Taken from SAS_vm_context (SAS_vm_section+0x8). 

Flat offset of kernel mte records 

The linear address of DosModMTE, the kernel (DOSCALLS.DLL) MTE. 

See .LM command for related information. 

Taken from SAS_vm_krnl_mte (SAS_vm_section+Oxc). 

Flat offset of linked mte list 

The linear address of _global_h, the linear address of the head of the MTE chain of link library modules. 

See .LM command for related information. 

Taken from SAS_vm_glbl_mte (SAS_vm_section+0x10). 

Flat offset of page frame table 

The linear address of _pft, the linear address of the first (frame 0) page frame structure (PF). 

See .MP command for related information. 

Taken from SAS_vm_pft (SAS_vm_section+0x14). 

Flat offset of page range table 

The linear address of _pgPageablePAI, the pageable PAI. The first double word of the PAI points to the page range 
table. 

Taken from SAS_vm_prt (SAS_vm_section+0x18). 

Flat offset of swap frame array 

The linear address of _smbmDF, the linear address of swap frame allocation bit map followed by _smFileSize, the 
swap file size word length value in pages. 

Taken from SAS_vm_swap (SAS_vm_section+0x1c). 

Flat offset of Idle Head 

The linear address of _pgldleList, which points to the pseudo-PF at the head of the idle PF list. 

See Idle Page Frame Structures for more information locating Idle Page Frame Structures. 

See .MP command for related information. 

Taken from SAS_vm_idle_head (SAS_vm_section+0x20). 

Flat offset of Free Head 

The linear address of _pgFreeList, which points to the pseudo-PF at the head of the free PF list. 


See Free Page Frame Structures for more information locating Free Page Frame Structures. 

See .MP command for related information. 

Taken from SAS_vm_free_head (SAS_vm_section+0x24). 

Flat offset of Heap Array 

The linear address of _apkh, the array of VMKPI kernel heap header structures. Note: the first entry is unused. 
Taken from SAS_vm_heap_info (SAS_vm_section+0x28). 

Flat offset of all mte records 

The linear address of _mte_h, which is the linear address of the head of the MTE chain. 

See .LM command for related information. 

Taken from SAS_vm_all_mte (SAS_vm_section+0x2c). 


.B - Select the Communications Port and Speed 



Select the communications port and speed. 

Syntax: 


.B 


speed 


port 


Parameters: 

speed 

The COMx port speed. Any of the following values are valid: 

150t 

300t 

600t 

1200t 

2400t 

4800t 

9600t 

19200t 


Note: Since baud rates are usually expressed in decimal and the default number base for the Kernel Debugger is 
hexadecimal then a t subscript must be supplied when using decimal values. 


port 

Specifies which COM port is to be used. If 1 or 2 are specified then COM1 or COM2 are implied. Any other numeric 
value is assumed to be an I/O port address. 


Results & Notes: 


When the Kernel Debugger initialises a default baud rate of 9600t is set. 

The COM port defaults to COM2 if there are two serial ports otherwise COM1 unless no comports are defined in the ROM BIOS data area, 


in which case the first port address in the ROM BIOS data area is assumed. 

The parity, data and stop bit settings default to none, 8 and 1 . These may be altered either: 

from the Kernel Debugger by writing directly to the COM port control register using the O command 
or from the system under test by using the MODE command. 

If synchronisation is lost with the debugging console, for example because the debugging communications port has been temporarily used 
by another application then it may be reset using the MODE command, from the command line of the system under test. For example, to 
re-specify the default parameters use: 

MODE COM2 9600, n, 8,1 


.C - Display the Common ABIOS Data Area 


DF 


Display ABOIS Command Data Area information. 

Syntax: 

.c 

Parameters: None 
Results & Notes: 

.C displays data for each logical device ID anchored from the Common ABIOS Data Area (CDA). If the ABIOS is not present or initialised 
then the following message is displayed: 

ABIOS Not Present or Not Initialised 


The presence of ABIOS is indicated by a non-zero byte value located at symbol: 

ABIOS_Present. 

If the ABIOS is present and initialised then data based on the Logical Device ID (LID) table is displayed. The LID Table is located from a 
selector located at: 

ABIOS_CDS_ANCHOR_p - in protect mode, or 

ABIOS_CDS_ANCHOR_r - in real mode 
Tabular data of the following form is displayed: 


LID (0000) 
LID (0001) 
LID (0002) 
LID (0003) 
LID (0004) 
LID (0005) 
LID (0006) 
LID (0007) 
LID (0008) 
LID (0009) 
LID (000a) 
LID (000b) 
LID (000c) 
LID (OOOd) 
LID (OOOe) 
LID (OOOf ) 


Type=Reserved 

Type=Null 

Type=Internal 

Type=Diskette 

Type=Video 

Type=Keyboard 

Type=Printer 

Type=Asynch 

Type=SysTimer 

Type=RTCTimer 

Type=Sys Service 

Type=NMInterrupt 

Type=Point Device 

Type=DMA 

Type=Security 

Type=POS 


DB=001e : 0114 
DB=0000 : 0000 
DB=0438 : 06f0 
DB=0438 : 0728 
DB=0438 : 07a4 
DB=0438 : 07e4 
DB=0438 : 080c 
DB=0438 : 082c 
DB=0438 : 084c 
DB=0438 : 0860 
DB=0438 : 087c 
DB=0438 : 08a0 
DB=0438 : 08d8 
DB=0438 : 08f0 
DB=0438 : 0920 
DB=0438 : 0938 


FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=04 4 8 : 011c 
FTT=04 4 8 : 012c 
FTT=04 4 8 : 017c 
FTT=04 4 8 : 01e4 
FTT=04 4 8 : 0238 
FTT=04 4 8 : 0280 
FTT=04 4 8 : 02e8 
FTT=04 4 8 : 0328 
FTT=04 4 8 : 0380 
FTT=04 4 8 : 03cc 
FTT=04 4 8 : 0404 
FTT=04 4 8 : 044c 
FTT=04 4 8 : 04a4 
FTT=04 4 8 : 04f 0 



LID (0010) 
LID (0011) 
LID (0012) 
LID (0013) 
LID (0014) 
LID (0015) 
LID (0016) 
LID (0017) 
LID (0018) 
LID (0019) 
LID (001a) 
LID (001b) 
LID (001c) 
LID (OOld) 


Type=CMOSRam DB=0438:0960 

Type=ErrorLog DB=0438:0978 

Type== DB=0438 : 0990 FTT=0448 : 05ac 

Type=Disk 


Type=anonymous ) 

Type=Null 

Type=Null 

Type=Null 

Type=Null 

Type=Null 

Type=Null 

Type=Null 

Type=Null 

Type=Null 


DB=0438 : 0 9d8 
DB=0438 : 0a50 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 
DB=0000 : 0000 


FTT=0448 : 0538 
FTT=0448 : 0574 
5ac 

FTT=0448 : 060c 
FTT=0448 : 0684 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 
FTT=0000 : 0000 


Note: There is a formatting error that is illustrated in LID 12 and LID 14 lines. See description below of type= parameter for an explanation 
of this! 


The fields displayed have the following meaning: 
LID 

Logical Device ID. 


This is a sequential numbering of entries that appear in the table of LID entries. The entry, LID(OOOO), is however a dummy entry mapped by 
CDAType where the selector:offset of DB= are number of LID entries and offset to table of data pointers. Data pointer entries have one of 
the following forms: 


Field Name 
DataPtr 
DLimit 
DOf f set 
DSegment 


Off Len Type 

+ 0 6 

+ 0 2 W 

+ 2 2 W 

+ 4 2 W 


Description 

Data Pointer in CDA 
Limit Field 
Offset Field 
Segment Field 


Field Name Off Len Type Description 


PhysPtr 

+ 0 

6 


Physical Data 
Pointer (INTEL 
Format) 


+ 0 

2 

w 

Limit Field 

PhysLSW 

+2 

2 

w 

Lo Order 16 bits 

PhysMSW 

+ 4 

2 

w 

Hi Order 16 bits 


Type= 

This an interpretation of the device type (DevID) field taken from the corresponding Device Block. The following Type 
values may appear: 

Reserved 
Null 
Internal 
Diskette 
Disk 
Video 
Keyboard 
Printer 
Asynch 
SysTimer 
RTCTimer 
SysService 


Used only for the LID(0000) dummy entry, 
signifies an unused entry (DB=0000:0000). 
Devid=0000 used for internal ABIOS calls. 
Devid=0001 Diskette device. 

Devid=0002 Disk device. 

Devid=0003 Video device. 

Devid=0004 Keyboard. 

Devid=0005 Printer. 

Devid=0006 Asynchronous device. 
Devid=0007 System Timer. 

Devid=0008 RTC Timer. 

Devid=0009 SysService. 



NMInterrupt 

Devid=000a NMI Interrupt. 

PointDevice 

Devid=000b Pointer Device. 

LightPen 

Devid=000c Light Pen. 

Joystick 

Devid=000d Joystick. 

CMOSRam 

Devid=000e CMOS RAM. 

DMA 

Devid=000f DMA controller. 

POS 

Devid=0010 Programmable Option Select. 

ErrorLog 

Devid=001 1 Error Log. 

S/A Dump 

Devid=0012 Stand Alone Dump. 

lOPortAlloc. 

Devid=0013 I/O Port Allocation. 

Audiotone 

Devid=001 4 Audio device. 

lnt/8259 

Devid=0015 Interrupt Controller. 

Security 

Devid=0016 Keyboard Security. 


Other Device Types are in use but are not translated to a predictable name. 
For example: 


Devid=0017 SCSI Subsystem Interface 

Devid=0018 SCSI Peripheral 

Where this occurs the Devid may be found at offset +8 of the device block. 


DB=sel:off 

sekoff address of the Device Block for the corresponding LID. The device block has the following standard header 
structure: 


Field Name 

Off 

Len 

Type 

Description 


DeviceBlock 

+ 0 

8 


Device Block 

Header 

DevBlength 

+ 0 

2 

W 

Device Block 

Length 

Revision 

+ 2 

1 

B 

Revision 



+ 3 

1 

B 

Reserved 



+ 4 

2 

W 

Logical ID 


Devid 

+ 6 

2 

W 

Device ID 



FTT=sel:off 

seboff address to the Function Transfer Table for this LID. The FTT has the following standard header structure: 


Field Name 

Off 

Len 

Type 

Description 

FTTable 

+ 0 

16 


Function Transfer Table Header 

FStart 

+ 0 

4 

D 

Start Routine Entry Point 

FInt 

+ 4 

4 

D 

Interrupt Routine Entry Point 

FTimeO 

+ 8 

4 

D 

Start Routine Entry Point 

FuncCount 

+c 

2 

W 

Count of Functions 


+e 

2 

W 

Reserved 


D - Display an OS/2 System Structure 



Display an OS/2 System Structure. 

Syntax: 


. D SFT addr 

VPB 
DPB 
CDS 
KSEM 
DT 
DEV 
REQ 
MFT 
BUF 
BPB 
SEM32 
MUXQ 
OPENQ 


Parameters: 

structure 


actc/r 


The structure type may take one of the following values: 


SFT 

VPB 

DPB 

CDS 

KSEM 

DT 

DEV 

REQ 

MFT 

BUF 

BPB 

SEM32 

MUXQ 

OPENQ 


Format a file system System File Table entry. 
Format a file system Volume Parameter Block. 
Format a file system Drive Parameter Block. 
Format a file system Current Directory Structure. 
Format a Kernel Semaphore. 

Disk Trace in now obsolete. 

Format a device driver header. 

Format a device driver request packet. 

Format a Master File Table entry. 

Format a file system I/O buffer. 

Format a BIOS Parameter Block. 

Format a 32-bit semaphore. 

Format a mutex semaphore wait queue. 

Format a 32-bit semaphore open queue. 


Specifies the address of the structure to be formatted. If omitted then the current DS selector value, offset 0 is 
assumed. 

An address expression may be specified. 


Results & Notes: 


Warning: 

.D will format OS/2 structures without any validation. It is entirely incumbent on the user to ensure that the address used does in fact point to 
the named structure. Failure to observe this caution will result in meaningless information being displayed. 


The following are examples of each of the 13 formatted structures. Refer to the System Reference for a description of each formatted 


structure. 


SFT 

System File Table Entry 

VPB 

Volume Parameter Block 

DPB 

Drive Parameter Block 

CDS 

Current Directory Structure 


KSEM 

Kernel Semaphore 

DEV 

Device Driver Pleader 

REQ 

Device Driver (Strategy 1) Request Packet 

MFT 

Master File Table Entry 

BUF 

File System Buffer 

BPB 

BIOS Parameter Block 

SEM32 

32-Bit Semaphore 

MUXQ 

Semaphore MUX Queue 

OPENQ 

Semaphore Open Queue 

Note: 



The Dump Formatter prior to fix pack 29 for Warp V3 did not format structures contained in segments less than 512 bytes, typically 
.D DEV and .D DPB. This is fixed from fix pack 29 of Warp V3 and base Warp V4. 


System File Table Entry (SFT) 


. d sft dO : 8 


sf_ref_count : 

0001 

sf i_mode : 

00a0 

sf_usercnt : 

0000 

sf i_hVPB : 

0012 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0100:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#0000:0000 

s f i_mt ime : 

0000 

sf_MFT : 

fe7fb788 

sf i_mdate : 

0000 

sfdFAT_f irFILEclus : 

5ad6 

sf i_size : 

000bbl35 

sfdFAT_cluspos : 

0 9c8 

sf i_position : 

00085d90 

sfdFAT_lstclus : 

0000 

sf i_UID : 

0000 

sfdFAT_dirsec : 

00000000 

sf i_PID : 

0000 

sfdFAT_dirpos : 

00 

sf i_PDB : 

0000 

sfdFAT_name : 


sfi_selfsfn: 0000 

sfdFAT_EAHandle : 

0000 

sf i_tstamp : 

00 

sf_plock : 

0000 

sf i_DOSattr : 

20 

sf_NmPipeSfn : 

0000 



sf_codepage : 

0000 




## 


System File Table Entry 

Notes: 


The sfdFAT_name is only meaningful for SFTs that represent open FAT file system files. 


For a description of the SFT fields see the System File Table Entery (SFT) in the System Reference. 


Volume Parameter Block (VPB) 


##ln gdt_vpb 

0138 : 00000098 os2krnl : DOSGDTDATA : GDT_VPB 
## . d vpb 98:12 

vpb_flink: 0000 vpdFAT_cluster_mask : 41 

vpb_blink: 008d vpdFAT_cluster_shift : 00 

vpb_ref_count : 007b vpdFAT_f irst_FAT : 00b2 


vpb_search_count : 

0000 


vpdFAT_FAT_count : 

a8 

vpb_f irst_access : 

00 


vpdFAT_root_entries : 

0004 

vpb_signature : 

444a 


vpdFAT_f irst_sector : 

885c0400 

vpb_f lags (2 ) : 

02:00 


vpdFAT_max_c luster : 

410e 

vpb_FSC : 

#00c8 : 0008 


vpdFAT_FAT_size : 

b200 

vpi_ID : 

26715015 


vpdFAT_dir_sector : 

aa04a800 

vpi_pDPB : 

#04b8 : 00c4 


vpdFAT_media : 

Od 

vpi_cbSector : 

0200 


vpdFAT_next_f ree : 

00b2 

vpi_totsec : 

0007cfe0 


vpdFAT_f ree_cnt : 

04a8 

vpi_trksec : 

0020 


vpdFAT_FATentrysize : 

b2 

vpi_nhead : 

0040 


vpdFAT_IDsector : 

00000000 

vpi_pDCS : 

#0000:0000 


vpdFAT_access : 

0000 

vpi_pVCS : 

#0000:0000 


vpdFAT_accwait : 

0000 

vpi_drive : 

07 


vpdFAT_pEASFT : 

#0000:0000 

vpi_unit : 

07 




vpi_text : 

UNLABELED 




vpi flags 

: 0003 




####.m 98:0 





*har par 

cpg va 

fig 

next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 

001 

0002 0023 0000 0000 0003 0000 

hob har hobnxt 

figs own hmte 

sown, 

ent It st xf 


0003 0003 fec5 

0000 f fee 0000 

0000 

00 01 00 00 vmkrhrw 


pvmli cs 

eip phlock 

cpg 

va fig hptda 

hob sig cs. 


=0000 


%fe82e4c4 002d 0a6800a5 %ac22403c 0001 %fe83c000 0005 024b 0003 ea9f ea9f 
##dd % (98:0) -10 18 

00000001 f f5905b8 5e02bd64 000009bd 
05d6007b 000009ae 0000099c dac40000 


%fe6fd4dc 
%fe6fd4ec 
##dd % (98 : 0) -10-4+9bc 18 

6d6b6d62 00180000 ffa20098 00e800e8 
f f c2001c 00000008 00000000 00000000 


%fe6fde94 
%fe6fdea4 
##.mo ffa2 
ffa2 vpb 
## 


Volume Parameter Block 

Notes: 


The selector for the VPB segment may be found by listing the symbol GDTVPB and using its offset. 

The handle of a VPB (hVPB) is the offset within the VPB segment. 

The VPB segment has a unique owner ID, which may be determined using the .M command.. In the case of the VPB segment it 
is allocated from the kernel resident heap, so the true owner id is found in the heap header (or its extension - the trailer). 


For a description of the VPB fields see the Volume Parameter Block (VPB) in the System Reference. 


Drive Parameter Block (DPB) 


1 dpb 4b8:c4 


dpb_drive : 

07 

dpb_unit : 

07 

dpb_driver_addr : 

#0798:0000 

dpb_next_dpb : 

#04b8 : OOeO 

dpb_cbSector : 

0200 

dpb_f irst_FAT : 

0001 

dpb_toggle_time : 

00000000 

dpb_hVPB : 

0012 

dpb_media : 

f 8 

dpb_f lags : 

20 

dpb_drive_lock : 

0000 

dpb_strategy2 : 

#07a0 : 139c 


##.m 04b8:0c4 


=0000 


*har par cpg va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 
hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 fec5 0000 ffec 0000 0000 00 01 00 00 vmkrhrw 


pvmli 
%fe82e4c4 
##dd % (4b8 : 
%fe6f 1638 
%fe6f 1648 
##dd % (4b8 : 
%fe6f 17f 8 
%fe6f 1808 
# # . mo f f 9 6 
f f 9 6 dpb 


cs eip phlock cpg va 

002d 0a6800a5 %ac22403c 0001 %fe83c000 
0) - 10 18 

00000000 ff 360498 2000fe6f 000001c5 
00000000 001c0798 020004b8 00000001 
0) - 10-4+lc4 18 

00000000 00000000 f f 9604b8 0000000a 
f f46000c 000014f 8 00d020c8 ff46000c 


fig 

0005 


hptda hob sig 
024b 0003 ea9f 


csig 

ea9f 


Drive Parameter Block 

Notes: 

The DPB may be located from the VPB. 

The DPB segment has a unique owner ID, which may be determined using the .M command.. In the case of the VPB segment it 
is allocated from the kernel resident heap, so the true owner Id is found in the heap header (or its extension - the trailer). 

For a description of the DPB fields see the Driver Parameter Block (DPB) in the System Reference. 


Current Directory Structure (CDS) 


» locate the SAS file system section 
##dw 70:12 11 
0070:00000012 0074 

##dw 70:74 


0070 : 00000074 

0fa4 

f e7 0 

OOcO 

07f 8 

0828 

00a8 

0428 

0000 

0070:00000084 

03c8 

ffff 

ffff 

0843 

0000 

0000 

0000 

0000 

0070:00000094 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0070 : 000000a4 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0070 : 000000b4 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0070 : 000000c4 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0070 : 000000d4 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0070 : 000000e4 

0000 

0000 

0000 

0000 

0000 

0000 

0000 

0000 


>> +8 into the file system section is the CDS RMP selector. 
>> Can verify this by checking out the memory object owner. 

##.m 828:0 


*har par cpg va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 fec5 0000 ffec 0000 0000 00 01 00 00 vmkrhrw 

pvmli cs eip phlock cpg va fig hptda hob sig csig 

%fe82e4c4 002d 0a6800a5 %ac22403c 0001 %fe83c000 0005 024b 0003 ea9f ea9f 


>> Owned by the Kernel Resident Heap. Look at the header 
##dd % (828 : 0) -10 18 

%fe7015b4 000007d0 ff5c07b0 0000bd64 0000060d 
%fe7015c4 049d0600 01ae0014 00000001 00000400 


>> This is an attributed block so look at the trailer 
##dd % (828 : 0) -10-4+60C 18 

%fe701bbc 00000000 00000000 ff610828 0000fe70 
%fe701bcc f f 9e0054 4d45534b 00000201 00000000 


# # . mo f f 6 1 
ff61 cdsrmp 


>> 828 does indeed point to the CDS RMP 


>> Now dump the CDS handle table for the process of interest 
##.p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0048# 0029 0004 0029 0001 blk 0200 ab805000 ab99b820 ab97fc20 led4 11 cmd 


##dw %ab99b820 +cds_handle-ptda_start 11a 
%ab99bac8 0000 0000 0000 0000 0000 0000 0000 0090 

%ab99bad8 0000 0000 0000 0000 0000 0000 0000 0000 

%ab99bae8 0000 0000 0000 0000 0000 0000 0000 0000 

%ab99baf 8 0000 0000 


>> Except for driver 07 ( H : ) the current directory handle is null. 

>> This implies that the current directory for drive H: is not the 
>> root. To see which it is, we need to locate the the CDS entry with 
>> handle 0x0090. 


>> The RMP has a 0x14 byte header. Each entry is prefixed with a word 
>> length followed by the handle for that entry. 


>> Starting with the first entry scan through until handle 0x0090 is 
» located. 


##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 

##dw 

0828: 


828:14 14 

00000014 

8028 

0000 00b2 0000 

828:14 12 

00000014 

8028 

0000 

828 : 14+28 
0000003c 

12 

0028 

001c 


828:14+28+28 12 
00000064 0028 OOld 

828:14+28+28+28 12 
0000008c 0026 OOle 

828:14+28+28+28+26 12 
000000b2 8023 0014 

828:14+28+28+28+26+23 12 
000000d5 0028 0022 

828:14+28+28+28+26+23+28 12 
OOOOOOfd 002e 008f 

828 : 14+28+28+28+26+23+28+2e 12 
0000012b 0025 0090 


>> The CDS starts after the length prefix. 


##.d cds 828: 

12b+2 

cd_handle : 

0090 

cd_ref cnt : 

0002 

cd_f lags : 

40 

cd_devptr : 

04b8 : 00c4 

cd_OwnerFSC : 

0008 

cdi_hVPB : 

0012 

cdi_end: 

0002 

cdi_f lags : 

80 

cdi_text : 

H : \spool 


## 


Current Directory Structure 

Notes: 


cddFAT_id: 0000 


The selector for the CDS segment may be located from the SAS, as illustrated above, or form the storage at label CDSAddr. 

The CDS RMP has a unique owner ID, which may be determined using the .M command.. In the case of the CDS RMP, it is 
allocated from the kernel resident heap, so the true owner id is found in the heap header (or its extension - the trailer). 


For a description of the CDS fields see the Current Directory Structure (CDS) in the System Reference. 


Kernel Semaphore (KSEM) 


>> Intra-Process serialisation mutex KSEM imbedded in the PTDA. 

>> This KSEM is sometimes referred to as "fscrit" (file system critical 
>> section) since it is used to serialise file system activity within 
» a process. 

•p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*000c# 0002 0000 0002 0004 blk 0804 ab78d000 ab997020 ab978420 lc9c 00 cntrl 
##.d ksem %ab997020 +ptda_ptdasem-ptda_start 


Signature 

Type 

Flags 

Owner 

## 


KSEM 

MUTEX 

00 

0000 


Nest: 0000 


PendingWriters : 0000 


>> MFT Shared KSEM imbedded at the beginning of the MFT 
## . .d sft dO : 8 



sf_ref_count : 

0001 

sf i_mode : 

00a0 


sf_usercnt : 

0000 

sf i_hVPB : 

0012 


reserved : 

00 

sf i_ctime : 

0000 


sf_f lags (2 ) : 

0100:0000 

sf i_cdate : 

0000 


sf_devptr : 

#0000:0000 

sf i_atime : 

0000 


sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 


sf_chain : 

#0000:0000 

sf i_mtime : 

0000 


sf_MFT : 

fe7fb788 

sf i_mdate : 

0000 

sfdFAT 

_f irFILEclus : 

5ad6 

sf i_size : 

000bbl35 

sfdFAT_cluspos : 

0 9c8 

sf i_position : 

00085d90 

##.d ksem %fe7fb788 




Signature : KSEM 

Nest: 0000 


Type 

: SHARE 

Readers: 0000 


Flags 

: 01 


PendingReaders : 0000 


Owner 

: 0000 

PendingWriters: 0000 



## 

>> Slot 49 is blocked. So we proceed by finding out what the Blockld 
>> represents by finding its owner. 


##.pb 49 

Slot Sta BlockID Name 
0049 blk fe83bdf4 warp_d 


Type 


Addr 


Symbol 


##.m %0fe83bdf4 


*har 


par 


cpg 


fig next prev link hash hob hal 


072c %feaf 8dd2 00000400 %00540000 149 072d 072b 0003 0000 0003 0025 hptda=0878 


hal=0025 pal=%ffe5dl40 
har par cpg 


har=072c hptda=0878 pgoff=00000 f=021 

va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 072c fec5 1000 ffec 0000 0000 00 01 00 00 vmkrhrw 

pvmli cs eip phlock cpg va fig hptda hob sig csig 

%fe82e4c4 002d 0a6800a5 %ac22403c 0001 %fe83c000 0005 024b 0003 ea9f ea9f 


0000 


>> Block Id is in the kernel resident heap - assume that it is at the 
>> beginning of a data portion of a heap block. 

>> Dump the header . 


##dd %0fe83bdf 4-10 18 

%fe83bde4 00000000 bdlOOOOO fe83fe83 ff7e0018 


%fe83bdf 4 4d45534b 000a0004 46380001 bd28a801 


>> Object Owner Id is ff7e 
##.mo ff7e 
ff7e ksem 


##.d ksem 

%0fe83bdf 4 


Signature 

: KSEM 


Type 

: EVENT 


Flags 

: 04 


Owner 

: 000a 

PendingWriters : 0001 

## 




Kernel Semaphore 

Notes: 

KSEMs are usually found imbedded in system control blocks for serialisation and sharing purposes. 

Dynamically allocated KSEMs are allocated out of one of the kernel heaps. 

Virtual Device Driver semaphore helper services result in KSEMs. 

Under the ALLSTRICT kernel only, the KSEM has a signature field. This is manufactured by the .D command for 
non-ALLSTRICT kernels. Under the ALLSTRICT kernel the presence of a KSEM may be verified by dumping the KSEM in bytes. 
Offset +0x0 is where the signature is located. 

The owner field refers to the slot number of the semaphore owner. 

When a thread blocks on a KSEM the following addresses are used as the Blockld 

MUTEX KSEM Address of the beginning of the KSEM structure. 

SHARED KSEM Address of the Pending Readers count field within the KSEM structure. 

EXCLUSIVE KSEM Address of the Pending Writers count field within the KSEM structure. 

To format KSEM from a Blockld, locate the beginning of the KSEM, either by dumping a few bytes before the Blockld addess. 
The signature will be visible under the ALLSTICT kernel, which is at the beginning of the KSEM. If the KSEM is allocated from 
one of the Kernel's heaps then the KSEM object id, 0xff7e will occur in the heap header which prefixes the beginning of the 
KSEM. 

For a description of the KSEM structure see the Kernel Semaphore Structure in the System Reference. 


Physical Device Driver Header (DEV) 


>> Driver header address taken from the VBP with handle 12 : 


.d vpb 98:12 


vpb_f link : 

0000 

vpdFAT_cluster_mask : 

41 

vpb_blink : 

008d 

vpdFAT_cluster_shift : 

00 

vpb_ref_count : 

007a 

vpdFAT_f irst_FAT : 

00b2 

vpb_search_count : 

0000 

vpdFAT_FAT_count : 

a8 

vpb_f irst_access : 

00 

vpdFAT_root_entries : 

0004 

vpb_signature : 

444a 

vpdFAT_f irst_sector : 

885c0400 

vpb_f lags (2 ) : 

02:00 

vpdFAT_max_cluster : 

410e 

vpb_FSC : 

#00c8 : 0008 

vpdFAT_FAT_size : 

b200 

vpi_ID : 

26715015 

vpdFAT_dir_sector : 

aa04a800 

vpi_pDPB : 

#04b8 : 00c4 

vpdFAT_media : 

Od 

vpi_cbSector : 

0200 

vpdFAT_next_f ree : 

00b2 

vpi_totsec : 

0007cfe0 

vpdFAT_f ree_cnt : 

04a8 

vpi_trksec : 

0020 

vpdFAT_FATentrysize : 

b2 

vpi_nhead : 

0040 

vpdFAT_IDsector : 

00000000 

vpi_pDCS : 

#0000:0000 

vpdFAT_access : 

0000 

vpi_pVCS : 

#0000:0000 

vpdFAT_accwait : 

0000 


vpi_drive : 07 vpdFAT_pEASFT : #0000:0000 

vpi_unit : 07 
vpi_text : UNLABELED 
vpi_flags: 0003 
## . d dpb 4b8:c4 


dpb_drive : 

07 

dpb_unit : 

07 

dpb_driver_addr : 

#0798:0000 

dpb_next_dpb : 

#04b8 : OOeO 

dpb_cbSector : 

0200 

dpb_f irst_FAT : 

0001 

dpb_toggle_time : 

00000000 

dpb_hVPB : 

0012 

dpb_media : 

f 8 

dpb_f lags : 

20 

dpb_drive_lock : 

0000 

dpb_strategy2 : 

#07a0 : 139c 

.d dev 798:0 

DevNext : 

0778 : 0000 

DevAttr : 

2880 

DevStrat : 

Odbc 

Devlnt : 

0000 

NumUnits : 

0c 

DevProtCS : 

07a0 

DevProtDS : 

0798 

DevRealCS : 

0000 

DevRealDS : 

0000 


>> Formatting the device driver directly 


from the 1st data segment. 


##.lmo ' ibmkbd 


hmte=009b pmte=%fe6f lfb8 mf lags=8008elc9 h:\ibmkbd.sys 
seg sect psiz vsiz hob sel flags 

0001 0001 0194 Olfa 0000 0540 8d49 data iter prel rel 

0002 0002 llc2 llc4 0000 0548 8d60 code shr prel rel 

##.d dev 540:0 


DevNext : 
DevAttr : 
DevStrat : 
Devlnt : 
DevName : 
DevProtCS : 
DevProtDS : 
DevRealCS : 
DevRealDS : 


0510 : 0000 

8980 

0680 

0586 

IBMKBD$ 

0548 

0540 

0000 

0000 


## 


Physical Device Driver Header 

Notes: 

The Device Header appears in one of two formats, depending on whether the device supports multiple units on not. 

Devlnt is not the interrupt routine offset, as it was for DOS device drivers. Under OS/2 this is the offset to the Inter-Device Driver 
Communications (IDC) Entry Point. 

For a description of the DEV fields see the Physical Device Driver Header (DEV) in the System Reference. 


Device Driver (Strategy 1) Request Packet (REQ) 

>> The two request packet pools for general device driver use: 


##.moc 93 


*har 

par 

cpg 


va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0091 

%feaef c80 00000010 %ab546000 

129 

0090 

0092 

0000 

0000 

0093 

0000 

sel=04a8 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It St 

xf 





0093 

0091 0000 

0124 

f f 40 

0000 

0000 

00 

00 00 

00 reqpktl 




## .moc 

94 












*har 

par 

cpg 


va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0092 

%feaef c96 00000010 %ab536000 

129 

0091 

0093 

0000 

0000 

0094 

0000 

sel=04b0 

hob 

har hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It St 

xf 





0094 

0092 0000 

0124 

f f 33 

0000 

0000 

00 

00 00 

00 r< 

eqpkt2 





>> Formatting the request packet assigned to slot 43: 

##.p# 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*0043# OOOd 0004 OOOd 0005 blk 081f ab7fb000 ab99ac20 ab97f220 ld24 17 faxworks 

##dd %ab97f 220 +lac 11 
%ab97 f 3cc 04a80832 


req 4a8:832 

PktLen : 

2c 

PktUnit : 

00 

PktCmd : 

04 

PktStatus : 

0000 

PktDOSLink : 

00000000 

PktDevLink : 

00000000 

IOmedia : 

00 

IOpData : 

008f7883 

IOcount : 

0000 

IOstart : 

00000000 


>> Formatting the request packet assigned to slot 2 : 

##.p2 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0002 0001 0000 0000 0002 blk 0200 ab779000 ffe3ca00 ab977020 lf3c 00 *tsd 
##dd %ab977020 +lac 11 
%ab9771cc 04a80012 


req 4a8:12 

PktLen : 

32 

PktUnit : 

00 

PktCmd: 

00 

PktStatus : 

0000 

PktDOSLink: 

00000000 

PktDevLink : 

00000000 

InitcUnit : 

00 

InitDevHlp : 

0000:0000 

InitParms : 

0000:0000 

InitDrv : 

00 

InitSysiData : 

0000 


Device Driver Request Packets 

Notes: 


Request Packets are allocated from one of three pools: 

Strategy 1 request pool 
Strategy 2 request pool 
Swapper request pool 

Each thread is pre-assigned a strategy 1 request packet. If this is in use when a device driver tries to allocate another then a 
packet is allocated from the strategy 2 pool for strategy 1 use. 

Asynchronous Read and Write requests are implemented in DOSCALL1 .DLL by creating multiple threads on which to run the 
parallel I/O requests. 

.D REQ does not format Strategy 2 format Request Packets. 



For a description of the Request Packet fields see the Device Driver Request Packer in the System Reference. 


Master File Table Entry (MFT) 


>> Display the SFT for SFN 20 
## .d sft dO : (83*20+8) 


sf_ref_count : 

0001 

sf i_mode : 

00c2 

sf_usercnt : 

0000 

sf i_hVPB : 

0000 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

OOcO : 0000 

sf i_cdate : 

0000 

sf_devptr : 

#0af 0 : 0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : f f 40 

sf i_adate : 

0000 

sf_chain : 

#00d0 : 170f 

s f i_mt ime : 

bl9d 

sf_MFT : 

fe82f f7c 

sf i_mdate : 

If 5f 

sfdFAT_f irFILEclus : 

0000 

sf i_size : 

00000000 

sfdFAT_cluspos : 

0000 

sf i_position : 

00000000 


sfdFAT_l 


>> From the SFT display the MFT 


.d mft %fe82ff7c 
mf t_ksem : 
Signature 
Type 
Flags 
Owner 

mf t_lptr 
mft_pCMap 
mf t_CMapKSem 
mf t_hvpb 
mf t_name 


KSEM 

SHARE 

01 

0000 

0000 

00000000 


0000 

\DEV\MOUSE$ 


Nest 
Readers 
PendingReaders 
PendingWr iters 
mft_sptr : 
mft_serl : 


; 0000 
; 0000 
; 0000 
; 0000 
OOdO : 08bb 
013e 


mft_opflags: 0000 


mf t_signature : 
mft_f lags : 


>> Display the SFT for SFN 40 
## .d sft dO : (83*40+8) 


sf_ref_count : 

0001 

sf i_mode : 

1302 

sf_usercnt : 

0000 

sf i_hVPB : 

008d 

reserved : 

00 

sf i_ctime : 

0000 

sf_f lags (2 ) : 

0000:0000 

sf i_cdate : 

0000 

sf_devptr : 

#0000:0000 

sf i_atime : 

0000 

sf_FSC : 

#00c8 : 0008 

sf i_adate : 

0000 

sf_chain : 

#00d0 : 214b 

s f i_mt ime : 

0000 

sf_MFT : 

fe6f 190c 

sf i_mdate : 

0000 

sfdFAT_f irFILEclus : 

470c 

sf i_size : 

00000000 

sfdFAT_cluspos : 

0 9c8 

sf i_position : 

00000000 


sfdFAT_l 


>> From the SFT display the MFT 


.d mft %fe6fl90c 
mf t_ksem : 
Signature 
Type 
Flags 
Owner 

mf t_lptr 
mft_pCMap 
mf t_CMapKSem 
mf t_hvpb 
mf t_name 

## 


KSEM 

SHARE 

01 

0000 

0000 

00000000 

008d 

D:\SWAPPER.DAT 


Nest 
Readers 
PendingReaders 
PendingWr iters 
mf t_sptr : 
mft_serl : 


; 0000 
: 0000 
; 0000 
; 0000 
OOdO : 2045 
00a3 


mft_opflags: 0000 


mf t_signature : 
mf t_f lags : 


466d 

0000 


466d 

0001 


Master File Table Entries 


Notes: 

The MFT is entry may be located from each SFT that represents an open instance of a file. 

The MFT points to the most recent SFT open instance of the file. 

The Dump Formatter prior to fix pack 29 for Warp V3 did not format the MFT correctly under the ALLSTRICT kernel. This is fixed 
from fix pack 29 of Warp V3 and base Warp V4. 

For a description of the MFT field, see the Master File Table Entry (SFT) in the System Reference. 


File System Buffer (BUF) 


>> Locate the file system buffer segment 
##ln gdt_buffers 

0138 : 000000a8 os2krnl : DOSGDTDATA : GDT_Buf f ers 


##dw a8 : 0 
00a8 : 00000000 

ade4 

94c4 

0000 

f f 93 

005a 

0218 

bc8b 

0000 

00a8 : 00000010 

0664 

0200 

bc8c 

OOOf 

9000 

00e5 

0234 

ade4 

00a8 : 00000020 

0000 

0279 

e05e 

0000 

0001 

0400 

0000 

0000 

00a8 : 00000030 

0000 

0000 

4 6e5 

4e49 

3030 

3630 

4d54 

2050 

00a8 : 00000040 

0000 

0000 

0000 

0000 

0000 

b5cd 

1 f 5e 

3251 

00a8 : 00000050 

0400 

0000 

4 6e5 

4e49 

3030 

3730 

4d54 

2050 

00a8 : 00000060 

0000 

0000 

0000 

0000 

0000 

b5c8 

If 5e 

0000 

00a8 : 00000070 

0000 

0000 

4de5 

3046 

3030 

2038 

4d54 

2050 


## . d buf a8 

ade4 





buf_next 

001c 

buf_prev : 

ffff 

buf_ 

_freeLink: 0000 

buf_f lags 

02 

buf_hVPB : 

0279 

buf_ 

.sector: 00000001 

buf_tid 

00 

buf_wrtcnt 

: 02 

buf_ 

.wrtcntinc: 0096 

buf_f ill 

0000 





## . d buf a8 

234 





buf_next 

044c 

buf_prev : 

001c 

buf_ 

.freeLink: 0000 

buf_f lags 

04 

buf_hVPB : 

0279 

buf_ 

.sector: 0000e05d 

buf_tid 

00 

buf_wrtcnt 

: 01 

buf_ 

.wrtcntinc : 0000 

buf_f ill 

0000 





## . d buf a8 

44c 





buf_next 

0 664 

buf_prev : 

0234 

buf_ 

.freeLink: 0000 

buf_f lags 

02 

buf_hVPB : 

0279 

buf_ 

.sector: 0000001c 

buf_tid 

00 

buf_wrtcnt 

: 02 

buf_ 

.wrtcntinc: 0096 

buf_f ill 

0000 





## . d buf a8 

664 





buf_next 

087c 

buf_prev : 

044c 

buf_ 

.freeLink: 0000 

buf_f lags 

04 

buf_hVPB : 

0279 

buf_ 

.sector: 0000bcd4 

buf_tid 

00 

buf_wrtcnt 

: 01 

buf_ 

.wrtcntinc: 0000 

buf_f ill 

0000 






>> Find the volume these buffers are assigned to. 
##ln gdt_vpb 

0138 : 00000098 os2krnl : DOSGDTDATA : GDT_VPB 
## . d vpb 98:279 


vpb_f link : 

Olfe 

vpdF AT_c 1 u s t e r_ma s k : 

07 

vpb_b link : 

02 f 4 

vpdFAT_cluster_shift : 

03 

vpb.ref .count : 

004e 

vpdFAT_f irst_FAT : 

0001 

vpb.search.count : 

0000 

vpdFAT_FAT_count : 

02 

vpb.f irst.access : 

09 

vpdFAT_root_entries : 

0200 

vpb.signature : 

444a 

vpdFAT_f irst_sector : 

0000014d 

vpb.f lags (2 ) : 

02:40 

vpdFAT_max_cluster : 

95f 5 

vpb.FSC : 

#0000:ff40 

vpdFAT_FAT_size : 

0096 

vpi.ID : 

e2ea4414 

vpdFAT_dir_sector : 

0000012d 

vpi_pDPB : 

#04b8 : 0038 

vpdFAT_media : 

f 8 

vpi.cbSector : 

0200 

vpdFAT_next_f ree : 

0000 


63a8 
10 

00000000 
0000 
0000 

#00d0:23da 

vpi_unit : 02 
vpi_text : DOS FAT 
vpi_flags: 0003 


vpi_totsec: 0004b0f0 
vpi_trksec: 003f 
vpi_nhead: 0010 
vpi_pDCS : #0000:0000 
vpi_pVCS : #0000:0000 
vpi_drive: 02 


vpdFAT_f ree_cnt : 
vpdFAT_FATentrysize : 
vpdFAT_IDsector : 
vpdFAT_access : 
vpdFAT_accwait : 
vpdFAT_pEASFT : 


>> The file system buffer segment is assigned a unique object owner 
» id. 


## .m 0a8 : 0 

*har par cpg va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 =0000 

hob har hobnxt figs own hmte sown,cnt It st xf 

0003 0003 fec5 0000 ffec 0000 0000 00 01 00 00 vmkrhrw 


pvmli cs eip phlock cpg va fig hptda hob sig csig 

%fe82e4c4 002d 0a6800a5 %ac22403c 0001 %fe83c000 0005 024b 0003 ea9f ea9f 
##dd % (a8 : 0) -10 18 

ObOcOOOl 4d5000a2 fe705854 0000cc99 

94c4ade4 ff930000 0218005a 0000bc8b 

##dd % (a8 : 0) -10-4+cc98 18 

%fe70fc84 00000000 00000000 ff9300a8 003ec010 

%fe70fc94 f fa4000c fe80caac 00020100 ff9e0014 


%fe702f f 0 
%fe703000 


##.mo ff93 
f f 93 fsbuf 


## 


File System Buffer (BUF) 

Notes: 


File system buffers are allocated out of a buffer segment whose selector may be located either from the SAS File System 
section, offset +0xa or from symbol GDT_BUFFERS. 

The buffer segment contains a header of length +0x1 c. 

Fleader Offset +0x0 gives the offset to the head of the list of most recently used buffers. 

Fleader Offset +0x4 gives the offset to the tail of the list of most recently used buffers. 

Each buffer contains a 0x18 byte header followed by 0x200 bytes of data. The buffer header is what is formatted by .D BUF. 


For a description of the Buffer Fleader fields, see the File System Buffers in the System Reference. 


BIOS Parameter Block (BPB) 


##.d bpb bootbp 


BytesPerSector : 

0200 

iCtorsPerCluster : 

08 

ReservedSectors : 

0001 

NumberOfFATs : 

00 

RootEntries : 

0200 

TotalSectors : 

0000 

MediaDescriptor : 

f 8 

SectorsPerFAT : 

OOfa 

SectorsPerTrack : 

0020 

Heads : 

0040 

HiddenSectors : 

00000820 

BigTotalSectors : 

0007cfe0 


##.d bpb minimumbpb 

BytesPerSector : 0200 


iCtorsPerCluster : 

01 

ReservedSectors : 

0001 

NumberOfFATs : 

00 

RootEntries : 

0010 

TotalSectors : 

0000 

MediaDescriptor : 

fO 

SectorsPerFAT : 

0001 

SectorsPerTrack : 

0009 

Heads : 

0001 

HiddenSectors : 

00000000 

BigTotalSectors : 

003f f f f f 


BIOS Parameter Block (BPB) 

Notes: 

Two system BPBs are locatable at symbols BootBPB and minimumBPB. 

Others are pointed to from the Device Driver Request Packet for DosDevlOCtl command code 2 (build BPB). 
See .D REQ Command for information on formatting Device Driver Request Packets. 

For a description of the BPB fields, see the BIOS Parameter Block in the System Reference. 


32-Bit Semaphore Structures (SEM32, OPENQ and MUXQ) 


##.pb 25 

Slot Sta BlockID Name Type 

0025 blk fe81d2d0 pmshell Sem32 


##.d sem32 %fe81d2d0 


Type: 
Flags : 
pMuxQ : 
Post Count : 
pOpenQ : 
pName : 
Create Addr : 


Shared Event 
Reset 
00000000 
0000 

fe56ebl0 
fd074e98 
13f 60088 


##.pb 2f 

Slot Sta BlockID Name Type 

002f blk fe86ffdc pmshell 


##.d sem32 %fe86ffdc 


Type: 
Flags : 
pMuxQ : 
Post Count : 
pOpenQ : 
pName : 
Create Addr: 


Shared Event 
Reset 
00000000 
0000 

f e5 6eb02 

NULL (anonymous) 
12dl 6b4 8 


##.pb 30 

Slot Sta BlockID Name Type 

0030 blk fe86fe58 pmshell Sem32 


##.d sem32 %fe86fe58 


Type: 
Flags : 
pMuxQ : 
Post Count : 
Open Count : 
Create Addr: 


Private Event 
Reset 
00000000 
0000 
0001 

13f 62f28 


Addr Symbol 
8001 004b hevLazyWrite 


Addr Symbol 


Addr Symbol 
0001 OOce hevSleeper 


Three types of Event Semaphore 

Notes: 


32-bit semaphores may be Event or Mutex in type, private or shared in scope and if shared, named or anonymous. 

The Blockld of a thread waiting on a 32-bit semaphore is the address of the semaphore structure. The Type field in the .PB 
command usually indicates a 32-bit semaphore when in use, however this is not always the case. The next example shows how 
to determine precisely whether the blockid points to a 32-bit semaphore. 


## .pb 
Slot 

33 

Sta BlockID 

Name Type 

Addr 

Symbol 

0033 
## .m % 

blk fe86falc 
0fe8 6f ale 

pmshell 




*har par cpg va fig next prev link hash hob hal 

0003 %feaef 04c 00000400 %fe6ef000 001 0002 0023 0000 0000 0003 0000 =0000 


hob har hobnxt figs own hmte sown, cnt It st xf 

0003 0003 fec5 0000 ffec 0000 0000 00 01 00 00 vmkrhrw 

pvmli cs eip phlock cpg va fig hptda hob 

%fe82e380 002d 0a6800a5 %ac22403c 0001 %fe83c000 0005 024b 0003 
##dd %0fe86falc-10 18 

%fe86fa0c 12dl5b4c 54564553 ab97d220 ffc20018 
%fe86falc 00000010 00000000 C4280001 455000a7 
fl.mo ffc2 


ffc2 semstruc 

##.d sem32 %0fe86falc 

Type: Private Event 


Flags : 
pMuxQ : 
Post Count : 
Open Count : 
Create Addr : 


Reset 

00000000 

0000 

0001 

00a7c428 


sig csig 
ea9f ea9f 


## 


How to determine whether a Blockld points to a 32-bit semaphore. 

Notes: 


Except for RAMSEM, MUXWAIT, ChildWait and private conventions the BlockID is an address of a structure or routine that 
relates to the resource or event being waited for. 

The .M command is used to identifty the owner of the Blockld. In this case it is the kernel resident heap. 

Each resident heap block is prefixed with a 4 byte header. If the low order bit is 0 then the high word of the header contains the 
owner of the heap block. 

32-bit Semaphore structures are allocated from regular resident heap blocks. Thus the owner id may be seen by displaying 
storage before the Blockld address. 


# # . pb 56 

0056 blk fe88ad8c mutxwait Sem32 


##.d sem32 %fe88ad8c 


Type: 
Flags : 
pMuxQ : 
Request Ct : 
Owner : 
Requester Ct : 
pOpenQ : 
pName : 
Create Addr: 


Shared Mutex 

fe88ab94 

0001 

0055 

0001 

fe5724c2 

fd084368 

00022e98 


8001 0090 _WINOS2_Set tings + 77 


##.d openq %fe5724c2 


PID Open Count 


00d8 0001 
00d7 0001 
00d6 0001 

##da %fd084368 
%fd084368 RJM\MUTEX0 


##.d muxq %fe88ab94 
pMux 


fe88aba4 


##.d sem32 %fe88aba4 

Type: Shared MuxWait 
Flags: Mutex_Mux 
SR Count: 0003 
SR Pointer: fe88a8f4 
Wait Count: 0001 

pOpenQ: fe571e94 
pName : fd0843c8 
Create Addr : 00022ec4 


##da %fd0843c8 
%fd0843c8 R JM\MUXWAI T 
##.d openq %fe571e94 


PID Open Count 




00d7 

0001 




00d6 

0001 




##dd %fe88a8f 4 




%fe88a8f 4 

00000003 

00000004 

80000090 

00000000 

%fe88a904 

80000091 

00000001 

80000094 

00000001 

%fe88a914 

f fbe0014 

fe88aba4 

00000000 

5158554d 

%fe88a924 

fe88a916 

f fc70010 

fe88a958 

dd2f 4580 

%fe88a934 

000001a2 

f fc70010 

fe88aa88 

dd2f 464d 

%fe88a944 

00000010 

f fa4000c 

fe88a968 

000102d5 

%fe88a954 

f fc70010 

fe88a9d8 

Ibd49ce0 

000101a5 

%fe88a964 

f fa4000c 

fe88aa7c 

0001038d 

f fc70010 


## 


Mux Wait Semaphores 


Notes: 


pOpenQ points to an Open Queue Structure, that list all processes that have access to the 32-bit semaphore. This is formatted 
using .D OPENQ. 

pName points to the semaphore name, when not anonymous. 

pMuxQ points to a MUXQ structure, that lists any 32-bit MUX wait semaphore address lists that have included this semaphore. 
In this example we see one MUX list. 

The MUX list may be formatted using .D SEM32. 

Instead of a pMuxQ, the MUX semaphore contains a pointer to the semaphore record (SR Pointer) and a count of the number 
of semaphores in the list (SR Count). 

There is no special formatting command for the SR Structure - it has to be view by displaying storage directly. In this case we 
see then length, flags and three semaphore handles each followed by the user correlator. 


For a description of the 32-bit Semaphore Structures, see the 32-bit Semaphore Structures in the System Reference. 


.1 - Swap in Storage 



Page in a TSD or a Page of Virtual Storage from the Swapper file. 

Syntax: 


. I 

addr 


B 

D 

T 

B slot 

D 


Parameters: 


T 

When specified it requests the Kernel Debugger page in the TSD for a specified thread slot. 

One TSD is assigned to each thread slot. If the registers for an out-of-context thread need to be examined then it 
may be necessary to swap in the TSD for that slot, since the ring 3 stack frame is stored in the TSD when a thread 
enters the Kernel. The presence or absence of the TSD for a given slot may be deduced by the presence or absence 
of a value for the Disp field of the .P command. 

If the T option is omitted it requests the Kernel Debugger page in the page of virtual storage that encompasses the 
specified addr. 

B 

When specified requests that all breakpoints be re-instated, including those which the current CS:EIP may be 
addressing. 

This parameter is effectively obsolete since breakpoints at the current CS:EIP are correctly handled by the 
Breakpoint Commands. 

D 

Specifies that a page-in request be scheduled for the Kernel Debugger Daemon thread to execute. In most cases a 
page-in operation may be performed synchronously, but under the following conditions it is prohibited: 

When an interrupt is being handled (that is, not at task time) 

When a swapping operation is pending (TCBfswapping (TCB + 0x1 al) not 0) 

When a the current thread is blocked (TK WF SLEEPING (0x40) is set in 

TCBWakeFlags (TCB + 0x162)) 

When in ringO and InDos is 0 


When one of these conditions occurs the page-in request may be scheduled for execution asynchronously by the Debugger Daemon thread 
by use of the D parameter. If the request is successfully scheduled the user is invited to enter the G command. The system will dispatch the 
Daemon thread, in time, which will attempt the page-in request. The Daemon returns control to the debug console using an INT 3 interrupt. 


addr 

This specifies the virtual address of the page to be paged in. The address is effectively rounded down to the nearest 
4K page boundary. 

Note: A selector:offset address specification can only be used if the selector does not reference the packed area of 
the LDT. If it does then a linear address must be supplied by the user. 

s/ot 

Specifies the thread slot number of the TSD to be paged in. The default slot is the current slot of the debugger's 
default slot if overridden with the .S command. 

Results & Notes: 



When an asynchronous page-in is requested the Kernel Debugger will prompt the user with one of the following 

task | addr %nnnn|%nnnnnnnn, LDT entry address %nnnnnnnn queued, G to continue 


task | addr %nnnn | %nnnnnnnn queued, G to continue 


TSD for slot s queued, G to continue 

depending upon combination of parameters specified. 

On successful completion of a synchronous page-in the user will be prompted with the command prompt. 

If .1 is unable to complete the request the OS/2 system error code will be displayed (in decimal) in the following message: 

OS/2 error code nt 

refer to the Control Programming reference or to bseerr.h C header file for an interpretation of the error code. 


.H - Display Dump File Header Information 


DF 


Display dump file header information saved by the stand alone dump program in the first sector (51 2 bytes) of the dump file. 

Syntax: 


■ H 


Parameters: 


None. 

Results & Notes: 


This command displays the following information: 


Dump File Header Info: 

Start Addrl : 0 

End Addrl : 2623213 
Total Disks: 9 
Flag: 11 

Ending addresses by disk: 

2623213 6634079 9846551 12950323 

14965147 17345751 19711393 

22092095 25165823 

# 


Each of the fields displayed has the following meaning: 

Start Addrl : 

The lowest physical address dumped. 

End Addrl : 

The highest physical address dumped. 

Total Disks: 

The number of disk volumes the dump data set spans. When the dump is taken to hard disk then the number of 
volumes is one. 


Flag: 


Indicates whether the dump file required decompressing. 0 indicates a compressed dump and 11a decompressed 



dump. 


Ending Addresses by disk 

Shows the range of physical memory dumped to each disk volume. 


.1 (DF) - Show Dump State 



Display the dump state. 

Syntax: 


. i 


Parameters: 


None. 

Results & Notes: 

This command displays the following summary information: 


#.i 

PROCESS 

PTDA 

MTE 

SMTE 

LDT 

CODE : 

STACKS : 


slot:lc Pid:0003 Ord:0013 
handle=0088 address=%7bcd5844 
handle=018a address=%fdfadf78 (PMSHL32) 
address=%f c9a4c48 
handle=0187 address=%7a597000 
user (cs : eip) #005b : 17d679f 2 cbargs= 
user (ss:esp)#0053: 01382cbc (active) 
ring2 (ss : esp) #09be : 00004000 (bottom) 
ringO tcbf rame=%7bbd4 f 54 bottom=%7bbd4f 9c 


Each of the fields display has the following meaning: 


slot: 

Pid: 

Ord: 

handle= 


address= 
user (cs:eip) 


The current thread slot at the time the dump was taken. This value is taken from the TaskNumber global variable. 

The current pid when the dump was taken. This value is taken from the Pid global variable. 

The Tid of the current thread at the time the dump was taken. This value is taken from the TCBOrdinal (TCB+ 0x0) 
of the current TCB. 

The VMOB handle that represents the control block named to the left. 

.1 displays this information for the PTDA, MTE, SMTE and LDT associated with the current thread when the dump 
was taken. 

See the .MO command form more information. 


The address of the object whose name and handle are given on the same line of display. 

The current user CS:EIP when the dump was taken. See the .R command for related information. 


cbargs= 




The call gate argument count if the current task has made a privilege level transition. See the .PU command for 
further information. 


user (ss:esp) 
ring2(ss:esp) 

ringO tcbframe= 

bottom= 


The current user SS:ESP when the dump was taken. See the .R command 


The current ring 2 SS:ESP as saved in TCBCpl2_SS (TCB + 0x1 be) and TCBCpl2_ESP (TCB + 0x1 b8) fields of the 
current TCB. 


The current (or last) kernel entry stack frame pointed to be TCB_pFrameBase (TCB + 0x3c) when the current thread 
made a call or transition to the kernel. 


The base of the ring 0 stack (in its all contexts addressable form) for the current thread. 


.K - Display User Stack Trace 



Display the user stack-trace for a given 


thread slot. 


Syntax: 


■ K 

.KS # 

.KB * 

Slot 


Parameters: 

.K 

Display stack frame trace assuming the default operation size from the descriptor associated with the code selector 
of the user registers for the specified slot. 

.KS 

Display frame trace assuming an operation size of 16-bits (small-model). 

.KB 

Display frame trace assuming an operation size of 32-bits (big-model). 

s/of 

Display stack trace for thread slot s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 

_TaskNumber 


# The debugger default thread slot. This defaults to the current slot unless 

overridden by the ,S command. 

If no slot number is given then all thread slots are displayed, grouped by process. 

Results & Notes: 

The .K command operates as a K command but with the starting stack frame and code segment address implicitly determined from the 
user's register as displayed by the .R command. 



The output from the .K command displayes exactly as the K command but with the slot-number prefixed to the return address when an 
out-of-context stack trace is displayed. See example output below. 

Warning: 

The .K command is subject to the same limitations as noted for the K command. See the K command description for details. 

Example output from an out-of-context stack trace: 


##.S 8 
##.K 37 

0037 | a6e7 : 0000006f 03d4 0000 00c5 006f 
0037 | a6e7: 00000000 0000 0000 0000 0000 
## 


.LM - Format Loader Structures (MTE, SMTE, OTE and STE) 


DF 


Display selected information from the MTE and SMTE of one or more loaded modules. Optionally format the associated STE or OTE. 


Syntax: 


.LM 


O 


I 

L 

P 

V 

X 


hmte 

addr 

name 


Parameters: 


O 


Format information about each object of each load module. 

For 32-bit modules selected fields from the Object Table Entry (OTE) are displayed. 
For 16-bit modules selected fields from the Segment Table Entry (STE) are displayed. 


I 


L 

P 

V 

X 

hmte 

ac/c/r 


Select Installable File System Driver modules only. 

Select Dynamic Link Library modules only. (This includes DLLs and any other modules which are not specifically 
selectable by the other options.) 

Select Physical Device Drivers modules only. 

Select Virtual Device Drivers modules only. 

Select Executable modules (.EXE) only. 

Specifies the handle of the memory object assigned to the MTE structure to be formatted. 

Specifies the address of the MTE to be formatted. 


name 


Specifies the name (excluding the file extension and path). The MTE matching this name will be formatted. The name 



must be specified as a quoted string. 

This option requires the SMTE to be present in storage. See below for information on how to make the SMTE 
present. 

The default specification is to scan the entire MTE chain without formatting corresponding STEs or OTEs. 

Results & Notes: 

From fix pack 29 for Warp V3 and base Warp V4 the following changes have been made: 

.LM has been fixed for the dump formatter so that it displays the short name of modules when the SMTE is swapped out. 
the I parameter has been introduced. 

with some previous version of the Dump Formatter the .LMP and .LMV commands did not always display output. 

From OS/2 Warp V3.0 fix pack 40, OS/2 Warp V4.0 fix pack 10 and OS/2 Warp E-Server the swappable stuctures referenced by .LM can be 
forced to be allocated from resident memory by using the OTE option of the RASKDATA CONFIG.SYS statement. This will avoid the 
possibilty that .LM might not be able to display information some modules. 

The MTE chain is scanned from global symbol: 

_mte_h 


When OTE/STE formatting is not requested output appears as follows: 


. lm 

hmte=02 93 
hmte=027f 
hmte=0272 
hmte=00a0 
hmte=017a 
hmte=010e 
hmte=0101 
hmte=00f 9 
hmte=00f 5 
hmte=0072 
hmte=000 6 
hmte=01c8 
hmte=01c6 
hmte=00d5 
hmte=00d6 
hmte=00cd 
hmte=00cc 
hmte=00a2 
hmte=00al 
hmte=00 9f 
hmte=0096 
hmte=0093 
# 


pmte=%fdfdla38 
pmte=%fdfdlc80 
pmte=%fdfdldb4 
pmte=%fe0177a8 
pmte=%fe015abc 
pmte=%fef 282dc 
pmte=%fe016b6c 
pmte=%fe01 6cd4 
pmte=%fe016de0 
pmte=%f f f 2c91 9 
pmte=%f f f 2bde0 
pmte=%fdf 45e78 
pmte=%fe017718 
pmte=%fdf 32e60 
pmte=%fdf 32 f 04 
pmte=%fdf 4 9f 64 
pmte=%fdf 4fb40 
pmte=%fdf 45fb8 
pmte=%fdf 32 f 8c 
pmte=%fdf 2f f 18 
pmte=%fdf 41f 60 
pmte=%fdf 2efb8 


mf lags=06903140 
mf lags=06903142 
mf lags=0 6 903152 
mf lags=0698bl94 
mflags=0698bl98 
mf lags=0691bl80 
mf lags=0691bl80 
mf lags=0691bl80 
mf lags=0691bl80 
mf lags=0002bl80 
mf lags=0000b980 
mf lags=0698blc8 
mf lags=0698blc8 
mf lags=0608f lea 
mf lags=0608f lc9 
mf lags=0608f lc9 
mf lags=0 62 8 ale 9 
mf lags=0408elc9 
mf lags=0408elc9 
mf lags=0408elc9 
mf lags=04 08elc9 
mf lags=0408elc9 


e : \os2tools\mrf ile32 . exe 
! pulse 

c : \os2\cmd.exe 
c:\os2\dll\display.dll 
c : \os2\dll\bvhwndw . dll 
? ? ? 

? ? ? 

c : \os2\mdos\vdma . sys 
c : \os2\mdos\vbios . sys 
mvdm.dll 
doscalls . dll 
c : \os2\dll\times . fon 
c : \os2\dll\helv . fon 
c : \os2\pmdd. sys 
c : \os2\dos . sys 
c:\os2\testcfg. sys 
c : \os2\hpf s . if s 
c : \os2dasd. dmd 
c : \ibm2scsi . add 
c : \ ibm2 f lpy . add 
c : \print02 . sys 
c : \clock02 . sys 


The fields formatted have the following meaning: 

hmte 


pmte 

mflags 


Handle of the memory object occupied by this MTE. Taken from mte_hanc//e 
Linear address of this MTE 

Flag field 1 taken from mte_f/ags1 . These flags have the following interpretation: 


name 

NOAUTODS 

SOLO 


bit mask description 

0x00000000 No Auto DS exists 
0x00000001 Auto DS is shared 


INSTANCEDS 


0x00000002 Auto DS is not shared 


INSTLIBINIT 

0x00000004 

GINISETUP 

0x00000008 

NOINTERNFIXUPS 

0x00000010 

NOEXTERNFIXUPS 

0x00000020 

CLASS_PROGRAM 

0x00000040 

CLAS S_GLOBAL 

0x00000080 

CLASS_SPECIFIC 

0x00000000 

CLASS_ALL 

0x00000000 

CLASS_MASK 

0x00000000 

MTEPROCESSED 

0x00000100 

USED 

0x00000200 

DOSLIB 

0x00000400 

DOSMOD 

0x00000800 

MTE_MEDIAFIXED 

0x00001000 

LDRINVALID 

0x00002000 

PROGRAMMOD 

0x00000000 

DEVDRVMOD 

0x00004000 

LIBRARYMOD 

0x00008000 

VDDMOD 

0x00010000 

MVDMMOD 

0x00020000 

INGRAPH 

0x00040000 

GINIDONE 

0x00080000 

MTEADDRALLOCED 

0x00100000 

FSDMOD 

0x00200000 

FSHMOD 

0x00400000 

MTELONGNAMES 

0x00800000 

MTE_MEDIACONTIG 

0x01000000 

MTE_MEDIA16M 

0x02000000 

MTEIOPLALLOWED 

0x04000000 

MTEPORTHOLE 

0x08000000 

MTEMODPROT 

0x10000000 

MTENEWMOD 

0x20000000 

MTEDLLTERM 

0x40000000 

MTESYMLOADED 

0x80000000 


Per-instance Libinit 

Global Init has been setup 

internal fixups in .EXE-. DLL applied 

external fixups in .EXE-. DLL applied 

Program class 

Global class 

Specific class, as against global 
nonspecific class - all modules 

MTE being loaded 

MTE is referenced 

set if D0SCALL1 

set if DOSCALLS 

File Media permits discarding 

module not loadable 

program module 

device driver module 

DLL module 

VDD module 

Set if VDD Helper MTE (MVDM.DLL) 

In Module Graph 
Global Init has finished 
Allocate specific or not 
FSD MTE 
FS helper MTE 

Module supports long-names 
File Media contiguous memory req 
File Media requires mem below 16M 
Module has IOPL privilege 
porthole module 

Module has shared memory protected 

Newly added module 

Gets instance termination 

Set if debugger symbols loaded 


name 

The full path name for the module is displayed to the right of the mflags field. The name is taken from the smte_path 
of the SMTE. If the SMTE is swapped out then the the name is taken from mte_modname (the .DEF file link edit 
name) and prefixed with an ! symbol. 

Where no path information is given then the module is predefined by the system and does not exist separately as a 
load module file. 



The STE and OTE are displayed when the O option is specified. These tables are accessed from the address at SMTE+Oxlc. This requires 
that the SMTE be present in storage. If it is not then the following is returned: 



swappable MTE - swapped 

To page in the SMTE use .LM without parameters to obtain the MTE address from the pmte field. The SMTE address is at MTE + 0x4. Use 
the .1 command to page in the SMTE storage. 

Under the Dump Formatter nothing can be done, however use of the OTE option of the RASKDATA CONFIG.SYS statement will guarabtee 
that structures used by .LWI are retained in resident memory. 

For a 16-bit module the STE is formatted as follows: 



# . lmo ' hpfs' 

hmte=00cc pmte=%fdf 4fb40 mflags=0628alc9 c:\os2\hpfs.ifs 


seg 

sect 

psiz 

vsiz 

hob 

sel 

flags 




0001 

0003 

eb24 

eb24 

0000 

0668 

8d60 

code 

shr 

prel 

rel 

0002 

0079 

d22 f 

d230 

0000 

0670 

8d60 

code 

shr 

prel 

rel 

0003 

00e3 

07b5 

07b8 

0000 

0678 

8d60 

code 

shr 

prel 

rel 

0004 

00e8 

0d8a 

0d8c 

0000 

0680 

8d60 

code 

shr 

prel 

rel 

0005 

OOfO 

0d6e 

1 9c2 

0000 

0688 

8d41 

data 

prel 

rel 


0006 

OOf 7 

03 fb 

03f c 

0000 

0690 

8c41 

data 

prel 



0007 

OOf 9 

0084 

0084 

0000 

0698 

8d41 

data 

prel 

rel 


0008 

OOfa 

0010 

0014 

0000 

06a0 

8d41 

data 

prel 

rel 


0009 

OOfb 

0238 

0238 

0000 

06a8 

8d41 

data 

prel 

rel 



# 


The STE fields formatted have the following meaning: 

seg 

Segment number. This is a sequential index of module segments. Index entries appearing in the link-edit map will 
correspond with these values. 


sect 


(ste_offset) Offset in file to segment data. 


psiz 


(ste_size) File data size 


vsiz 

hob 

sel 

flags 


(ste_minsiz) Minimum allocation size 
(ste_seghdl) Memory object handle of segment data. 

(ste_selector) Selector assigned to this segment. 

(ste_flags) Segment type and attribute flags. These interpretations of these are displayed to the right of the flag word. 


They are assigned 

as follows: 




name 

bi t 

. lmo 

description 




mask 

msg 



STE_ 

_CODE 

0x0000 

code 

code segment 

type 

STE_ 

_DATA 

0x0001 

data 

data segment 

type 

STE_ 

.PACKED 

0x0002 


segment is packed 

STE_ 

.SEMAPHORE 

0x0004 


segment semaphore 

STE_ 

.ITERATED 

0x0008 

iter 

segment data 

is iterated 




STE_WAITING 0x0010 move 

STE_S HARED 0x0020 shr 

STE_P RELOAD 0x0040 prel 

STE_ERONLY 0x0080 EO 

STE_ERONLY 0x0080 RO 

STE_RELOCINFO 0x0100 rel 

STE_CONFORM 0x0200 conf 

STE_RING_2 0x0800 iopl 

STE_RING_3 OxOCOO 

STE_HUGE 0x1000 disc 

STE_P AGE ABLE 0x2000 

STE_PRESENT 0x2000 

STE_S EL ALLOC 0x4000 

STE_GDTSEG 0x8000 


segment is waiting on semephore 

segment can be shared 

segment is preload 

execute only if code segment 

read only if data segment 

if segment has reloc records 

segment is conforming 

ring 2 selector 

ring 3 selector 

huge segment 

just a page can be faulted in 
packed segment already loaded 
used to indicate sel allocated 
used to indicate GTD sel alloc 


For a 32-bit module the OTE is formatted as follows: 


# . lmo 'doscalll' 

hmte=00a7 pmte=%fdf59f58 mf lags=0698b594 c:\os2\dll\doscalll.dll 
obj vsize vbase flags ipagemap cpagemap hob sel 

0001 00001354 laOlOOOO 80009025 00000001 00000002 OOad dOOe r-x shr alias iopl 

0002 0000cde8 la020000 80002025 00000003 OOOOOOOd OOac d017 r-x shr big 

0003 00001844 la030000 80001025 00000010 00000002 OOab dOlf r-x shr alias 

0004 000002ce la040000 80001025 00000012 00000001 OOaa d027 r-x shr alias 

0005 000054d0 la050000 8000d025 00000013 00000006 00a9 d02e r-x shr alias conf iopl 

0006 00000270 la060000 80001023 00000019 00000001 00a8 d037 rw- shr alias 

0007 00001b40 la070000 80001003 0000001a 00000002 0000 d03f rw- alias 


The OTE fields formatted have the following meaning: 

obj 

Object number. This is a sequential index of module object. Index entries appearing in the link-edit map will 
correspond with these values. 


vsize 


(ote_size) Object virtual size 


vbase 


(ote_base) Object base virtual address 


flags 

(ote_flags) Attribute flags. The interpretations of these are displayed to the right of the each line. They are assigned 
as follows: 


name bit mask .lmo description 

msg 

OBJREAD 0x00000001 r Readable Object 

OBJWRITE 0x00000002 w Writeable Object 

OBJEXEC 0x00000004 x Executable Object 

OBJRSRC 0x00000008 rsrc Resource Object 


OB JD IS CARD 


0x00000010 disc Object is Discardable 



OB JS HARED 

0x00000020 

shr 

Object 

is 

Shared 


OB JP RE LOAD 

0x00000040 

prel 

Object 

has 

preload pages 


OBJINVALID 

0x00000080 

inv 

Object 

has 

invalid pages 


OB JZEROFIL 

0x00000100 

zf ill 

Object 

has 

zero-filled pages 

OB JRESIDENT 

0x00000200 


Object 

is 

resident 


OB JALIAS1 6 

0x00001000 

alias 

16:16 ; 

alias required 


OB JBIGDEF 

0x00002000 

big 

Big/Default bit setting 


OB JCONFORM 

0x00004000 

conf 

Object 

is 

conforming for 

code 

OBJIOPL 

0x00008000 

iopl 

Object 

I/O 

privilege level 

OB JMADEPRIV 

0x40000000 


Object 

is 

made private for 




debug 




OBJALLOC 

0x80000000 


Object 

is 

allocates used 

by 


the loader 


ipagemap 

cpagemap 

hob 

sel 


(ote_pagemap) Object page map index. 
(ote_mapsize) Number of entries in object page map. 
(ote_seghdl) Memory object handle of object data. 


(ote_selector) Selector assigned to this object. 

If either the segment table or object is not in storage then the following message is issued: 

%nnnnnnnnx - swapped 


.M - Format Memory Structures 



Format memory management structures (VMOB, VMAR, VMAL, VMCO, VP and PF). 

Syntax: 


■ M 


A options 

0 
C 
L 
V 
P 


Parameters: 

A 

Format Memory Arena Records (VMARs). See .MA command for more information. 


O 


Format Memory Object Records (VMOBs). See .MO command for more information. 



c 


Format Memory Context Records (VMCOs). See .MC command for more information. 


L 

V 

P 

options 


Format Memory Alias Records (VMALs). See .ML command for more information. 
Format Virtual Page structures (VPs). See .MV command for more information. 
Format Page Frame structures (PFs). See .MP command for more information. 


See the corresponding Mx command for details of applicable options. 
Prior to fix pack 29 for Warp V3, the .M command defaults to: 



.MAMC 



.MAAMC 


From fix pack 29 of Warp V3 and base Warp V4 the .M command is consistant for both Kernel Debugger and Dump 
Formatter, and defaults to .MAMC 

For further details see the M option of the .MA command. 


.MA - Format Memory Arena Records (VMAR) 


DF 


Display memory arena records (VMARs). Optionally format related object records (VMOBs), alias records (VMALs) and context records 
(VMCOs). 


Syntax: 


.MA 


M 


A 


A 


C 


maddr 


B 


F 


L C 

R 

H 


har 

laddr L n 


Parameters: 


This is option is used with (and implies) the M option. It causes the a match for private area addresses to be made 
across all contexts. See the M option for further details. 

Note: 


Under Kernel Debugger the default is to match addresses in the current context only. 


Under Dump Formatter address matches are made across all contexts, that is the A option is in permanent 





effect. 


B 

C 


F 

H 


Display in-use (busy) arena records in sequential order. 

Display chained memory structures. 

Chaining causes related memory structures to be displayed in groups, the head of which is indicated by an * suffix. 
The related structures are: 

aliases to the associated arena record (VMALs). 

arena records of all associated alias records (VMARs). 

shared instance data objects for all related arena records 

context records for shared objects of all associated arena records (VMCOs). See 
.MC command. 

object records of all associated arena records (VMOBs). See .MO command. 

Display free arena records. 


Follow the arena hash chain pointer. The hash chain is used by virtual memory management to look up a memory 
object for a given context from a linear address. The algorithm proceeds as follows: 

The linear address is bitwise ANDed with the hash table mask obtained from atJHashNumbMask (VMAT+0x14). 
The result is shifted right by the allocation granularity for the arena. This is obtained from atJHashNumbShift 
(VMAT+0x18). The result provides an index into the hash table, which is a table of arena handles that head each 
hash chain. The hash table address is obtained from ah_paharHash (VMAH+0x14) and the VMAT address is 
obtained from ah pat (VMAH+0x18). 

For OS/2 Warp V3.0, the hashing algorithm amounts to the following: 


System Arena: 


index=(linear address » 0x0c) & 0x1 ff 


Tiled Shared and Private arenas: 

index=(linear address » 0x10) & 0x1 ff 


VDM Private arenas: 


index=(linear address » 0x0c) & 0x1 ff 


Follow the arena forward (left) chain pointer. Arena records for each arena are chained using a double-linked circular 
chain. The Dump Formatter or Kernel Debugger will not detect wrap-around. This option must therefore be limited by 
specifying a fixed number of arena records, using the Ln operand, or interrupted using Ctrl+C. 


Searches for all arena records (of all contexts) that represent virtual memory that encloses the address specified in 
maddr If maddr is not specified then the current CS:EIP is taken as the matching address. If the storage is in the 
private arena Kernel Debugger will search the current context only unless the 

An address expression may be specified. A option is specified. The Dump Formatter always searches for matches in 
all contexts. 


Follow the arena backward (right) chain pointer. Arena records for each arena are chained using a double-linked 
circular chain. The Dump Formatter or Kernel Debugger will not detect wrap-around. This option must therefore be 
limited by specifying a fixed number of arena records, using the Ln operand, or interrupted using Ctrl+C. 


mac/c/r 


Specifies the matching address to be used with the M option. 


/ac/c/r 


Specifies the linear address of a specific arena record to be formatted. 


L n 


Specifies the number of arena records to display. 


har 


Specifies the handle of a specific arena record to be formatted. 


Results & Notes: 


Arena records are in contiguous storage, which is anchored from the address given by global variable: 

_parvmOne 


Output from the .MA command is formatted using a common template with minor variations. 

Note: Because a common display template is used for all forms of arena record certain fields will be irrelevant to the records being viewed 
and may contain garbage information. Specific cases are noted in the examples where this applies. 


The following are example of the nine formats of area record: 

Free Arena Record 

Sentinel Arena Record 

Boundary Sentinel Arena Record 

System Arena Records mapped by GDT selectors 

System Arena Records not mapped by GDT selectors 

Shared Arena Records for Shared Data 

Shared Arena Records for Instance Data 

Private Arena Records for non-shared Data 

Private Arena Records for shared Data 

For a description of the fields formatted by .MA select .MA Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 


Free Arena Record 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0263 

%fef 2948c 

000294a2 

%00320000 

168 

0233 

0262 

0000 

0000 

02df 

0000 

=02 9e 

0264 

%fef 294a2 

000294b8 

%00000000 

000 

0000 

0000 

0000 

0000 

0000 

0000 

=0000 

0265 

%fef 294b8 

000294ce 

%00000000 

000 

0000 

0000 

0000 

0000 

0000 

0000 

=0000 


Free Arena Record Display 

Notes: 

Flag bit 0x001 reset signifies a free record. 

The only fields of relevance are har, par, and cpg. 

Bit positions Oxffe of fig and remaining fields may contain garbage from a previous use of the record. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Sentinel Arena Record 


har par cpg va fig next prev 

0004 %fef26062 00000000 %60000000 003 0239 0015 

0005 %fef26078 OOOOdfbO %04000000 007 0259 006e 


link hash hob 
0000 0000 ffcO 
0000 0000 fffO 


hal 

0000 max=%f f f cOOOO 
0000 max=%lf f f 0000 


Sentinel Arena Records 

Notes: 

Flag bit 0x002 set signifies a sentinel record. 

hob is not relevant to sentinel records. (The value displayed originates from the max= field). 
For OS/2 2.1 , arena record 4 is sentinel for the system arena. 

For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Boundary Sentinel Arena Record 


har par cpg va fig next prev link hash hob hal 

0005 %fef 2 6078 OOOOdfbO %04000000 007 0259 006e 0000 0000 fffO 0000 max=%lf f f 0000 

Boundary Sentinel Arena Record 

Notes: 

Flag bits 0x006 set signify a boundary sentinel record. 

The boundary sentinel indicates the boundary between the shared and private arena address spaces. Consequently there is only 
one boundary sentinel to be found in a system. 

hob is not relevant to sentinel records. (The value displayed originates from the max= field). 

For OS/2 2.1 , arena record 5 is boundary sentinel for the shared arena. 

For a description of the fields formatted by .MA select .MA Output Field Descriptions 


System Arena Record Mapped by GDT 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0006 

%fef2608e 

00000003 

%fff20000 

009 

OOOf 

OObO 

0000 

0000 

0007 

0000 

sel=0100 

0007 

%fef260a4 

0000000b 

%ffe27000 

009 

0008 

001a 

0000 

0000 

0008 

0000 

sel=0400 

0008 

%fef260ba 

0000000b 

%ffe32000 

009 

0009 

0007 

0000 

0000 

0009 

0000 

sel=0f 00 

0009 

%fef260d0 

00000010 

%ffe3d000 

009 

000b 

0008 

0000 

0000 

000a 

0000 

sel=0120 


System arena records - address space mapped by a GDT selector 


Notes: 


Flag bit 0x008 set signifies a selector mapping. 

va value >= that specified in the System Arena Sentinel signifies system area area record. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


System Arena Record Not Mapped by GDT 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


OOOe 

%fef 2613e 

00000001 

%fff 16000 

001 

01d9 

0083 

0000 

0000 

OOOf 

0000 

=0000 

OOOf 

%fef 26154 

00000001 

%fff 23000 

001 

0010 

0006 

0000 

0000 

0010 

0000 

=0000 

0010 

%fef2616a 

00000002 

%fff 24000 

001 

0011 

OOOf 

0000 

0000 

0011 

0000 

=0000 


System arena records - address space not mapped by a GDTselector 

Notes: 


Flag bit 0x008 set to 0 signifies a no selector mapping. 

va value >= that specified in the System Arena Sentinel signifies system area area record. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Shared Arena Record for Shared Data 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


00b2 

%fef 2 6f 56 

00000010 

%la0a0000 

379 

00b6 

00b3 

0000 

0000 

OObe 

0000 

hco=001ed 

00b3 

%fef 2 6f 6c 

00000010 

%la0 90000 

3d9 

00b2 

00a9 

0000 

0000 

OOcO 

0000 

hco=001ee 

00b4 

%fef 2 6f 82 

00000010 

%la0e0000 

379 

OObb 

00b5 

0000 

0000 

00c! 

0000 

hco=0022e 


Shared arena, shared data. 

Notes: 

Flag bit 0x200 set to 1 signifies shared arena, shared data. 

Context records chained from hco value will list the processes that currently share the memory object represented by this arena 
record. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Shared Arena Record for Instance Data 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


00e9 

%fef27410 

00000020 

%labb0000 

179 

0105 

OOea 

0000 

0000 

02b5 

0000 

=0000 

OOea 

%fef27426 

00000010 

%laba0000 

179 

00e9 

OOeb 

0000 

0000 

02b6 

0000 

=0000 


Shared arena, instance data. 

Notes: 

Flag bit 0x200 set to 0 with a va value not in the system arena and 0 hptda indicates shared arena instance data. 

Object records chained from hob value will list the objects and processes that map to the common virtual address range 
represented by this arena record. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Private Arena Record Non-Shared Data 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


00e7 

%f ef 273e4 

00000010 

%00020000 

179 

00e8 

OOdb 

0000 

0000 

Olle 

0000 

hptda=0097 

00e8 

%fef 273fa 

00000010 

%00030000 

179 

012f 

00e7 

0000 

0000 

Ollf 

0000 

hptda=0097 


Private non-shared data, process owned arena records 

Notes: 


Arena records not satisfying the criteria for any of the System, Sentinel or Shared Arena records are assumed to be private 
arena records. 

If the private memory object is shared (for example, .EXE code segments running in more than one process) then the associated 
private arena records for the sharing processes are chained from the link field as long as hal is zero. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


Private Arena Record Shared Data 


hal 

0000 hptda=0237 


Private shared data, process owned arena records 


har par cpg va fig next prev link hash hob 

01e2 %fef28976 00000010 %00010000 lc9 01e3 OleO OOdb 0000 011c 


Notes: 


Arena records not satisfying the above criteria are assumed to be private arena records. 

If the private memory object is shared (for example, .EXE code segments running in more than one process) then the associated 
private arena records for the sharing processes are chained from the link field as long as hal is zero. 


For a description of the fields formatted by .MA select .MA Output Field Descriptions 


.MA Output Field Descriptions 


Output from .MA is in a tabular format of the following form: 


har 

par 

cpg 

va 

fig 

next 

prev 

link 

hash 

hob 

hal 


0005 

%fef26078 

OOOOdfbO 

%04000000 

007 

0259 

006e 

0000 

0000 

fffO 

0000 

max=%lf f f 0000 

0009 

%fef 260d0 

00000010 

%ffe3d000 

009 

000b 

0008 

0000 

0000 

000a 

0000 

sel=0120 

00b4 

%fef 26f 82 

00000010 

%la0e0000 

379 

OObb 

00b5 

0000 

0000 

OOcl 

0000 

hco=0022e 

OOea 

%fef 27426 

00000010 

%laba0000 

179 

00e9 

OOeb 

0000 

0000 

02b6 

0000 

=0000 

00e7 

%fef 273e4 

00000010 

%00020000 

179 

00e8 

OOdb 

0000 

0000 

Olle 

0000 

hptda=0097 


The field headings have the following meaning: 

har 

The handle of the arena record being formatted. This is the unique identifier by which the arena record is known. 


par 


The linear address of the arena record being displayed. 


cpg 

The size of the contiguous linear address range reserved by this arena record expressed as a hexadecimal number 
of pages. This value will be greater then or equal to the size of the memory object that occupies this linear address 
range. 

For small allocations (<64K) in non-system arenas this will usually be rounded to 0x10 pages so that the CRMA may 
be applied. 

For free records this field is used as a chain pointer to the next free record but only the low order 20 bits are 
displayed by .MA. 


va 


The linear address of the beginning of the memory object represented by the arena record. 


fig 


Arena record flags. These may take a combination of the following settings: 


Name 

Bi t Mask 

AR_INUSE 

0x001 

AR_TAG 

0x006 

AR_TAGREG 

0x000 

AR_TAGSEN 

0x002 

AR_TAGBSEN 

0x006 

AR_SELMAP 

0x008 

AR_SELBASEALL 

0x00c 

AR_SELMASK 

0x00c 

AR_RELOAD 

0x010 


Description 

Record not on free list 
Record type mask 
Regular record 
Sentinel 

Boundary sentinel 

Memory mapped by selector 

Base selector map all 

Selector map mask 

Pre-reserved for huge item or 
or reserved for reload of MTE 
object 


AR_WRITE 

0x020 

AR_USER 

0x040 

AR_EXEC 

0x080 

AR_READ 

0x100 

AR_HCO 

0x200 

AR_GUARD 

0x400 

AR_SGS 

0x800 


write permission 

user permission 

executable permission 

Read permission 

Record linked to Context List 

guard page 

Registered under Screen Group 
Switch control. 


next 


Handle of next arena record within the same arena (private, shared or system). 


prev 

link 


hash 


Handle of the previous record within the same arena (private, shared or system). 

Handle of an associated arena record. 

For private arena sentinel records this points to the boundary sentinel. 

For shared arena shared data this points to other private arenas sharing the same 
object. 

For alias objects this points to the arena record of the associated (aliased) object. 
Handle of the next arena record whose va hashes to the same hash chain. 


hob 

hal 


The handle of the associated memory object record. See .MO command. 

The handle of the associated memory alias record. See .ML command. If this field is set to a value of Oxffff then this 
is not the handle of an alias record, but signifies that this arena has been privatized by the creation of an alias to it. 


hptda=/'/'/r/' 

The handle of the pseudo-object that is the PTDA of the process that has this arena record assigned to its private 
address space. Use .MO hhhh to display the PTDA pseudo-object and hence obtain the address of its virtual 
address. 

max= 

Maximum linear address of the area headed by this sentinel record. 


se\=ssss 


GTD selector that is assigned to a system arena memory object. 


hco -ccccc 

Handle of the first context record that represents processes sharing this shared arena, shared data memory object. 
See .MC command. 


.MC - Format Memory Context Records (VMCO) 



Display memory context records (VMCOs). 

Syntax: 



.MC 


B 


F 

C 


hco 

laddr 


Ln 


Parameters: 

B 



Display in-use (busy) alias records in sequential order. 

c 

Display chained context records. 

Chaining causes related context records that are chained from hconext of the current context to be formatted. The 
head of each group indicated by an * suffix. Context records are chained to represent each instance of an object 
being shared among several processes. The head of the chain is pointed to by the hco field of the corresponding 
arena record See .MA command for information on formatting arena records. 

Notes: 

There is no pointer to the arena record from the context record. Associated arena records have to be found 
by scanning arena or object records. 

The C option will not format context records from the head of the chain. Do achieve this, locate the 
corresponding arena record and use 

.MAC har 

F 

Display free alias records. 

/addr 

Specifies the linear address of a specific context record to be formatted. 

Ln 

Specifies the number of context records to display. 

hco 

Specifies the handle of a specific context record to be formatted. 

Results & Notes: 



Context records are in contiguous storage, which is anchored from the address given by global variable: 

_pcovmOne 

Output from the MC. command appears in one of two formats: 

Free Context Records 
Busy Context Records 

For a description of the fields formatted by .MC select .MC Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 

In some versions prior to fix pack 29 for Warp V3 the Dump Formatter did not interpret and format the VMCO correctly. In addition VCMO 
chains were not followed correctly when the C options was used. These problems are fixed from fix pack 29 of Warp V3 and base Warp V4. 

Free Alias Records 


hco=00313 pco=ffe4bf7a pconext=f fe4bf 7f 


hco=00314 pco=ffe4bf7f 
hco=00315 pco=ffe4bf84 
hco=00316 pco=ffe4bf89 


pconext=f f e4bf 84 
pconext=f f e4bf 8 9 
pconext=f f e4bf 8e 


Free Context Record Display 

Notes: 


pconext is used as a chain pointer to the next free context record. 

For a description of the fields formatted by .MC select .MC Output Field Descriptions 


Busy Context Records 


hco=00001 

hco=00002 

hco=00003 

hco=00004 

pco=f fe4b020 
pco=f fe4b025 
pco=f fe4b02a 
pco=f fe4b02f 

hconext=00000 

hconext=00000 

hconext=00000 

hconext=00000 

hptda=00ae 

hptda=00ae 

hptda=00ae 

hptda=00ae 

f=ld 
f=ld 
f =13 
f=ld 

pid=0002 

pid=0002 

pid=0002 

pid=0002 

c : pmshell . exe 
c : pmshell . exe 
c : pmshell . exe 
c : pmshell . exe 

Selector Busy Context Records 







Notes: 


Flag bit 0x20 set signifies a context handle > 64k. In effect this is a 1 bit extension of the 1 6 bit hco field of the VMCO. The .ML 
command takes this into account when formatting VMCO records. 

Flag bit 0x80 set signifies that the context has been privatized. This implies that the object was originally shared but a private 
instance of it has subsequently been created. Typically this occurs when DosDebug is used to access a debugee's shared data. 


For a description of the fields formatted by .MC select .MC Output Field Descriptions 


.MC Output Field Descriptions 


Output from .MC appears in one of is of the following forms: 


hco=00317 pco=ffe4bf8e 
hco=00001 pco=ffe4b020 


pconext =f fe4bf 93 

hconext=00000 hptda=00ae f=ld pid=0002 c : pmshell . exe 


Each of the fields has the following meaning: 

hco= 

The handle of the context record being formatted. This is the unique identifier by which the context record is known. 


pco= 


The linear address of the context record being formatted. 


hconext= 


For busy records this is the handle of the next context record that represents another user of the related (shared) 
object. For free records this is the handle of the next free record. 


hptda= 


The handle of the PTDA pseudo-object that represents the process sharing the corresponding memory object. 


f 


Context record flags. 

The following flags are defined: 


name 


bit mask description 


CO_CREATOR 0x01 
CO_PRIV 0x80 
CO_HCOH 0x20 
CO_WRITE 0x02 
CO_USER 0x04 
CO_EXEC 0x08 
CO_READ 0x10 
CO_GUARD 0x4 0 


originating context 

Privatized context 

Next context record handle > 64k 

Write access 

User attribute 

Execute access 

Read access 

Guard page 


pid= 


This names the process Id and process executable that corresponds to the hptda field. 
* EBOOKIE (IPFTAGS.DEF) 


.MK - Display Memory Lock Information Records (VMLKI) 



(not supported in 2.1 versions or early 3.0 versions of the Dump Formatter) 


Display memory lock information records. 


Note: 


This command was implemented by feature 8281 8 for the ALLSTRICT and HSTRICT kernels only. It is not available is either of the 
GA versions for OS/2 Warp V3.0 or OS/2 V2.1 1 . 

After OS/2 Warp V3.0 fix pack 40 and OS/2 Warp V4.0 fix pack 1 0 .MK may be enabled under the RETAIL kernel by means of the 
LOCKS option of the RASKDATA CONFIG.SYS statement.. 

Under the ALLSTRICT and HSTRICT kernels .MK may be disabled by specifying the NLOCKS option of the RASKDATA 
statement. 


Syntax: 


.MK 


hob 


Ln 


Parameters: 


none 


Lists all lock information records for all memory objects with locked records. 


L/7 


Specifies the number of lock information records to display for a a given hob. 



hob 


Specifies the handle of a specific object record whose lock information records are to be formatted. 


Results & Notes: 


Lock information records are maintained for outstanding memory locks in memory lock information records (VMLIs) which are located at the 
address given by global variable: 

_pVMLIHead 


When a memory lock request is successfully executed a lock handle is returned to the caller for later use when unlocking memory. The lock 
handle normally resides in the caller's storage. It comprises a concatenation of: 

the requestor's hptda 

the hob whose pages are being locked 

the page number 

the number of pages 

request flags 

In addition a check-sum or signature is calculated from these values and stored with the lock handle. 

The VMLI is a copy of the constituents of the lock handle that resides in system memory. In addition it includes: 
the requestor's return address 
a pointer to the next VMLI 
a pointer to the requestor's lock handle 

The .MK command formats the contents of the VMLI then re-calculates the signature. The calculated and saved signatures should be 
identical. 

Next the lock handle is accessed. If it differs from the corresponding VMLI then it too is formatted and the signature is re-calculated and 
displayed. If either the formatted lock handle and corresponding VMLI or the calculated and extracted signatures disagree then a problem 
may be indicated. For example, an overlayed or freed lock handle. Flowever, there is no requirement for lock requestors to retain their lock 
handles in their original locations. 

Warning: 

Prior to fix pack 29 for Warp V3, the Kernel Debugger can trap when attempting to format lock handles from freed memory. This is fixed in 
the Kernel Debugger and incorporated into the Dump Formatter in defect 155843 from fix pack 29 for Warp V3 and base Warp V4. 


Note: 


When feature 82818 is present VMLI records are automatically formatted when displaying memory object records with locked pages, 
using the .MO command. 


Output from the .MK command appears as follows: 


## .mk 


pvmli 

cs 

eip 

phlock 

cpg 

va 

fig 

hptda hob 

sig 

csig 

fe679f lc 

0170 

f f fa015d 

%fdl7d480 

0001 

%013f 1000 

0003 

0091 

0424 

18aa 

18aa 

fe68aldc 

0170 

f f fa015d 

%fdl7d468 

0001 

%013f 1000 

0003 

0091 

0424 

18aa 

18aa 

fe74539c 

0170 

f f f 3e551 

%ffe006ff 

0002 

%fff 33000 

0001 

02 f 7 

0016 

0252 

0252 

fe712c54 

0170 

f f f 3e551 

%ffe00577 

0003 

%fff 38000 

0001 

02 f 7 

0016 

0258 

0258 

fe761e0c 

0908 

00000878 

%7b6b7d0c 

0001 

%ffee9000 

0005 

0091 

0190 

Ollf 

Ollf 





0000 

%4c800000 

OffO 

0001 

0000 

0000 

d7f 5 

fe777el8 

0908 

00000841 

%7b6b7d0c 

0006 

%f feeaOOO 

0005 

0091 

0227 

Olbc 

Olbc 





0000 

%4c800000 

OffO 

0001 

0000 

0000 

d7f 5 

fe777e3c 

0908 

00000809 

%7b6b7d0c 

0001 

%f fef 0000 

0005 

0091 

022c 

01c2 

01c2 





0000 

%4c800000 

OffO 

0001 

0000 

0000 

d7f 5 

fe777e60 

0908 

0000072b 

%7c224066 

0002 

%17c40000 

0005 

0091 

0199 

7e72 

7e72 

fe777e84 

0908 

0000072b 

%7c224058 

0001 

%7a022000 

0001 

0091 

0168 

a224 

a224 

fe777ef 8 

0908 

000006ee 

%7c22403c 

0001 

%7a022000 

0001 

0091 

0168 

a224 

a224 

f e777f 2 8 

0908 

000006ee 

%7c22404a 

0002 

%17c80000 

0005 

0091 

0196 

7eaf 

7eaf 


%fe777f 4c 0908 000000a5 %7c22402e 0001 %fe763000 0005 0091 0003 e80c e80c 


The field headings have the following meaning: 

pvmli 

Address of the VMLI record. 


cs 


eip 


phlock 


Code selector of the requestor of the memory locking function. For calls made through a DevHIp request this is taken 
from TCBpDHRetAddr (TCB + 0x74). For internal requests the immediate caller of VmLockMem is displayed. 

A blank value indicates information from the lock handle is being formatted, because it does not agree with the 
corresponding VMLI. See note above. 

If the lock request was made by a 16-bit caller then the 16-bit far return address is contained with in the eip only and 
the cs value is the next word from the stack following the return address. 


The instruction pointer of the requestor of the memory locking function. For calls made through a DevFllp request this 
is taken from TCBpDFIRetAddr (TCB + 0x74). For internal requests the immediate caller of VmLockMem is 
displayed. 

A blank value indicates information from the lock handle is being formatted, because it does not agree with the 
corresponding VMLI. See note above. 


The address of the lock handle buffer supplied by with the lock request. 


cpg 


The number of contiguous pages locked. 


v a 


fig 


The linear address of the first page locked. 


The flags saved from the lock request. 
The following bit settings are defined: 


Bit value Description 

0x01 Lock is a long-term 

0x02 Verify lock call 

0x04 Lock originated from a DevHIp 


hptda 

hob 

sig 

csig 


The hptda of the lock requestor. 

The handle of the associated memory object record, some of whose pages are. See the .MO command. 
The signature value extracted from the VMLI or lock handle. 


The recalculated signature based on information saved in the VMLI or lock handle. 
For related information see also the Virtual Memory Lock Trace. 


ML - Format Memory Alias Records (VMAL) 


(not supported in early 2.1 versions of the Dump Formatter) 



Display memory alias records (VMALs). Optionally format related arena records (VMARs), object records (VMOBs) and context records 
(VMCOs). 


Syntax: 


.ML 


B 


F 

C 


hal 

laddr 


Ln 


Parameters: 


B 

C 


F 

maddr 

/addr 

Ln 

ha/ 


Display in-use (busy) alias records in sequential order. 

Display chained memory structures. 

Chaining causes related memory structures to be displayed in groups, the head of which is indicated by an * suffix. 
The related structures are: 

the associated arena record (VMAR). See .MA command 

aliases to the associated arena record (VMALs). 

arena records of all associated alias records 

shared instance data objects for all related arena records 

context records for shared objects of all associated arena records (VMCOs). See 
.MC command. 

object records of all associated arena records (VMOBs). See .MO command. 

Display free alias records. 

Specifies the matching address to be used with the M option. 

Specifies the linear address of a specific alias record to be formatted. 

Specifies the number of arena records to display. 

Specifies the handle of a specific alias record to be formatted. 


Results & Notes: 

Alias records are in contiguous storage, which is anchored from the address given by global variable: 

_palVMAliases 


From fix pack 29 for Warp V3 and base Warp V4 the Dump Formatter .ML command has been enhanced to work independently of kernel 
symbols. Prior to these releases, kernel symbols were required to enable the Dump Formatter to locate _palVMAIiases. 

Output from the .ML. command appears in one of three formats. 

Free Alias Record 
Selector Alias Record 
Linear Address Alias Record 

For a description of the fields formatted by .ML select .ML Output Field Descriptions 



For more examples using of the .M family of commands see: Exploring Memory Management. 


Free Alias Records 


hal=000e pal=%f fe61088 
hal=000f pal=%ffe61090 
hal=0010 pal=%ffe61098 


palnext=f fe610a0 
palnext=f fe61088 
palnext=f fe61090 


pgof f=00000 f=000 
pgof f=00000 f=000 
pgof f=d4460 f=000 


Free Alias Record Display 

Notes 

Flag bit 0x001 reset signifies a free record. 

The only fields of relevance are hal, pal, and palnext. 


For a description of the fields formatted by .ML select .ML Output Field Descriptions 


Selector Alias Records 


hal=000a pal=%f fe610 68 har=0208 cs=0056 ds=d446 cref=001 f=13 
hal=000b pal=%f fe61070 har=020b cs=0056 ds=d446 cref=001 f=13 

Selector Alias Record Display 

Notes 


Flag bit 0x02 set signifies a CS alias record. 

Flag bit 0x10 set signifies that DS is valid, i.e CS is an alias for the same storage mapped by DS. For example after use of 
DosCreateCSAIias. This flags distinguishes this form of the alias record 

This alias applies to selectors within a specific (process) context. 


For a description of the fields formatted by .ML select .ML Output Field Descriptions 


Linear Address Alias Records 


hal=0001 pal=%ffe61020 
hal=0002 pal=%ffe61028 


har=00b8 

har=00b9 


hptda=009f pgoff=00000 
hptda=009f pgoff=00000 


f=001 

f=001 


hal=0003 pal=%ffe61030 har=001b hptda=009f pgoff=00000 f=001 


Linear Address Alias Record Display 

Notes 

Flag bit 0x1 0 reset distinguishes this form of the alias record, 
hptda and har refer to the context and arena which has been aliases. 
The context and arena of the creator of the alias may be shown using 

. MLC hal . 


For a description of the fields formatted by .ML select .ML Output Field Descriptions 


.ML Output Field Descriptions 


Output from .ML appears in one of is of the following forms: 


hal=0006 

pal=%ffe61048 

har=01b8 hptda=009f 

pgof f=00000 

f =02 1 

hal=000a 

pal=%f fe61068 

har=0208 cs=0056 ds= 

=d446 cref=001 

CO 

i — 1 

II 

<4-1 

hal=0011 

pal=%f fe610a0 

palnext =ffe610a8 

pgof f=00000 

f=000 


Each of the fields has the following meaning: 

hal 

The handle of the alias record being formatted. This is the unique identifier by which the alias record is known. 


The handle of the arena record which represents the aliasing linear address range. The arena record for the aliased 
linear address is pointed to by the link field of the aliasing har. 


hptda 

The handle of the PTDA object of the context which has been aliased. This may also take the value of a system 
owner when memory is in the process of being freed. 


pgoff 

The page offset into the arena which is aliased. Note: aliases may map partial objects. The number of pages aliased 
may be determined from the arena record which represents the aliased memory. Use .MLC ha/ to display this 
information. 


cs 

ds 

cref 

palnext 


The Code Selector created to alias R/W memory. 

The Data Selector which has been aliased by a Code selector. 

The reference count for the number of time a Code Selector alias has been requested for a given Data Selector. 
The pointer to the next free alias record. 


f 


Alias record flags. For Selector Aliases this is a 6-bit field, for other aliases this is a 12-bit field. 


The following flags are defined: 


name 

bi t mask 

description 

AL_ 

_ISBUSY 

Oxl 

Set 

if 

record is busy 

AL_ 

_CSALIAS 

0x2 

Set 

is 

CS alias record 

AL_ 

_MEMMAP 

0x4 

Set 

if 

MemMapAlias Record 

AL_ 

_DBGALIAS 

0x8 

Set 

if 

Debug alias 

AL_ 

_CSDSVALID 

0x10 

Set 

if 

DS selector valid 

AL_ 

_DEVHLP 

0x20 

Set 

if 

Devhlp Alias 

AL_ 

_PRIV 

0x40 

Set 

if 

privatized alias 

AL_ 

_VDM 

0x80 

Set 

if 

VMD alias 

AL_ 

_NO ALIAS 

0x100 

Set 

if 

UVIRT mapping in VDMs 


.MO - Format Memory Object Records (VMOB) 


DF 


Display memory object records (VMOBs). Optionally format related alias records (VMALs), arena records (VMARs) and context records 
(VMCOs). 


If feature 8281 8 is installed, then under the Kernel Debugger only, lock information records will be formatted whenever a memory object with 
locked pages is displayed. See the ,MK command for more information. 

Syntax: 


■ MO 

V M maddr 


B C hob 

F laddr L n 

N 
P 
S 


Parameters: 

B 

C 


Display in-use (busy) object records in sequential order. 

Display chained memory structures. 

Chaining causes related memory structures to be displayed in groups, the head of which is indicated by an * suffix. 
The related structures are: 

the associated arena record (VMAR). See .MA command 
aliases to the associated arena record (VMALs). 
arena records of all associated alias records 


shared instance data objects for all related arena records 



context records for shared objects of all associated arena records (VMCOs). See 
.MC command. 


object records of all associated arena records (VMOBs). 

Note: Pseudo-objects have no related memory objects. 

F 



Display free object records. 

M 

Searches for a pseudo-object whose address matches the address specified for maddr. If no match is found then 
nothing is displayed. 

Notes: 

The pseudo-object address specified must be an exact match for hit. 

The pseudo-object address is that of the object itself and not the VMOB that represents it. 

A se/ector:offset form of address may not be specified. Flowever a physical address may be specified in 
order to bypass virtual address validation done by Kernel Debugger and Dump Formatter. 

N 

Specifies that only normal object records be displayed. These are objects whose linear address allocation is 
represented by an arena record. Contrast this with Pseudo-Object and System Object. See also .MA command for 
details of arena record display. 

P 

Specifies that pseudo-object records be displayed. 

S 

Specifies that objects to be displayed are those whose memory management semaphore is busy or wanted. The 
memory management semaphore is used internally for serialising access to memory management structures. It 
should not be confused with the memory locking as provided by the DevFllp_Lock, DevPllp_Unlock, DevFllp_VMLocl 
and DevFilp_VMUnlock calls. 

V 

Specifies verbose mode of display. The address of the VMOB structure is displayed but object description and owner 
interpretation is suppressed. 

maddr 

Specifies the matching address to be used with the M option. 
An address expression may be specified. 

/addr 

Specifies the linear address of a specific object record to be formatted. 
An address expression may be specified. 

L n 

Specifies the number of object records to display. 

hob 

Specifies the handle of a specific object record to be formatted according to the criteria specified by the other options. 

Results & Notes: 



Object records are located in contiguous storage, which is anchored from the address given by global variable: 

_pobvmOne 

Output from the .MO. command appears in one of four formats: 

Normal Object 
Pseudo-Object 
Free Object Record 
System Object 


From fix pack 29 for Warp V3 and base Warp V4 the output of this command has been enhanced by adding hmte interpretation for system 


objects. The apears on the right hand end of the command output following the textual interpretation of the own field. 

From fix pack 35 for Warp V3 and base Warp V4 Device Driver and File System Driver allocated objects will record the driver's true hmte as 
its hmte owner Id instead of the one of the system objects dd1-dd16 and fsd1-fsd8. 

Prior to fix pack 29 for Warp V3 the .MO command could trap D while formatting MTE objects. This is fixed from fix pack 29 for Warp V3 and 
base Warp V4. 

For a description of the fields formatted by .MO select .MO Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 


Normal Object Records 


hob 

har hobnxt 

figs 

own 

hmte 

sown, 

■ cnt 

It 

St 

xf 


OOOd 

000c 

0000 

0325 

f fba 

0000 

0000 

00 

00 

00 

00 

lock 

OOOe 

OOOd 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

OOOf 

OOOe 

0000 

0000 

f faa 

0006 

0000 

00 

00 

00 

00 

os2krnl 

0010 

008f 

0000 

402c 

OOae 

0115 

0000 

00 

00 

00 

00 

priv 0002 c rpmshell . exe 

0011 

0010 

0000 

0000 

f f 37 

0000 

0000 

00 

00 

00 

00 

romdata 


Normal Object Record Display 


hob 

pob 

har 

hobnxt 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 

0001 

%fec80020 

0001 

fec8 

0000 

fffl 

0000 

0000 

00 

00 

00 

00 

0002 

%fec80030 

0002 

fec8 

0000 

f fe3 

0000 

0000 

00 

00 

00 

00 

0003 

%fec80040 

0003 

fec8 

0000 

f fee 

0000 

0000 

00 

01 

00 

00 


Normal Object Record Display - verbose form 

Notes 


The verbose form is specified using the Voption. This causes the suppression of owner and hmte interpretation. 


For a description of the fields formatted by .MO select .MO Output Field Descriptions 


Pseudo-Object Records 


hob 

va 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 



0004 

%fff 13238 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 


0005 

%fff 13190 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 


0006 

%fff0a891 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 

doscalls . dll 

0072 

%ffe3c7d4 

8000 

ffeb 

0000 

0000 

00 

00 

00 

00 

ptda 

0001 *sysinit 

007a 

%fff0b3fa 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 

mvdm.dll 

007b 

%fff0b26b 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 

f shelper . dll 

0091 

%fe7 34 9ac 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 

c : pmshapim . dll 

0098 

%7b9e4060 

8000 

ffel 

0000 

0000 

00 

00 

00 

00 

vmah 


009d 

%fe722fb8 

8000 

f f a6 

0000 

0000 

00 

00 

00 

00 

mte 

c : clock02 . sys 


Pseudo-Object Record Display 

Notes 


The 0x8000 flag bit signifies as pseudo-object. 


For a description of the fields formatted by .MO select .MO Output Field Descriptions 


Free Object Records 


hob 

va 

figs 

own 

hmte 

sown, 

. cnt 

It 

St 

xf 


02b5 

%f ec82b7 0 

0000 

0000 

0000 

0000 

00 

00 

00 

00 

free 

02b6 

%fec82b80 

0000 

0000 

0000 

0000 

00 

00 

00 

00 

free 

02b7 

%fec82b90 

0000 

0000 

0000 

0000 

00 

00 

00 

00 

free 

02b8 

%fec82ba0 

0000 

0000 

0000 

0000 

00 

00 

00 

00 

free 

02b9 

%fec82bb0 

0000 

0000 

0000 

0000 

00 

00 

00 

00 

free 


Free Object Record Display 

Notes 

Flag bit 0x001 reset signifies a free record. 

The only fields of relevance are va and pob when the V option is specified. 
The va field is used a link field to other free VMOBs. 


For a description of the fields formatted by .MO select .MO Output Field Descriptions 


System Object IDs 


fffO vmllock 
f f f 1 vmob 
fff2 vmsgs 
f f f 3 vmbmp 1 6 


Example System Object Display 

Notes 


System object IDs are not represented by VMOB structures. They are pre-defined IDs for system components. 
The Dump Formatter and Kernel Debugger display only object names when displaying system objects. 


MO Output Field Descriptions 


Output from .MO appears tabular for with one of the following headings: 


hob va figs own hmte sown,cnt It st xf 

0004 %fff 13238 8000 ffel 0000 0000 00 00 00 00 vmah 

0006 %fff0a891 8000 ffa6 0000 0000 00 00 00 00 mte doscalls.dll 


hob 

pob 

har hobnxt 

figs 

own hmte 

sown, 

. ent 

It st 

xf 

0003 

%fec80040 

0003 

fec8 

0000 

f fee 0000 

0000 

00 

01 00 

00 

0004 

%fec80050 

%fff 13238 

8000 

ffel 0000 

0000 

00 

00 00 

00 

hob 

har hobnxt 

figs 

own 

hmte 

sown, ent 

It st 

xf 



0001 

0001 fec8 

0000 

fffl 

0000 

0000 00 

00 00 

00 

vmob 


0002 

0002 fec8 

0000 

ffe3 

0000 

0000 00 

00 00 

00 

vmar 



Each of the heading fields has the following meaning: 

hob 


hobnext 


The handle of the object record being formatted. This is the unique identifier by which the object record is known. 


The handle of next shared instance data object that maps to the same linear address range (shares the same arena 
record but maps to a different physical address). 


har 


pob 

va 


The handle of the arena record that describes the linear address range allocated to this object. 
The linear address of the object record. 


figs 


The virtual address of the pseudo-object named in the object description. 

Object record flags. 

The following flags are defined: 


Name 

Bit 

Mask 

Description 

OB_PSEUDO 

0x8000 

Pseudo-object 

OB_AP I 

0x4000 

API located object 

OB_LOCKWAIT 

0x2000 

Waiting for a lock conflict to resolve 

OB_LALIAS 

0x1000 

Object has aliases 

OB_S HARED 

0x0800 

Object's contents are shared 

OB_UVIRT 

0x0400 

UVirt object 

OB_Z ERO I N I T 

0x0200 

Object is zero-initialised 

OB_RESIDENT 

0x0100 

Initial allocation was resident 

OB_LOWMEM 

0x0040 

Object is in low memory 

OB_GUARD 

0x0080 

Guard page attribute 

OB_EXEC 

0x0020 

Executable attribute 

OB_READ 

0x0010 

Readable attribute 

OB_USER 

0x0008 

User attribute 


OB_WRITE 

0x0004 

Writeable attribute 


OB_HUGE 

0x0002 

Object is huge 


OB_SHRINKABLE 

0x0001 

Object is Shrinkable 
OB_S HARED) 

(only if also 

OB_D H S E TMEM 

0x0001 

DevHlp_VMSetMems are 

allowed the object 


Notes: 


See Pseudo-Objects when OB_PSEUDO is set. 

OB_API is set as a result of allocation made by some APIs (for example, DosExecPgm). It forces page 
alignment and signals a likelihood of long-term locking. 

OB_HUGE is set when the object is created by DosAllocHuge API. 

When OB_LOCKWAIT is set then the thread has detected a lock request conflict and wishes to wait for the 
conflict to resolve. The conflict occurs because a contiguous storage lock has been requested but cannot be 
satisfied because one or more of the pages are already short-term locked. If the current request is for a 
short-term lock then the thread will wait up to 1 0 seconds for the conflict to clear. If the time-out expires then 
the current short-term lock request ends in error and the following message appears on the debugger 
screen: 

VMLOCK: Short term lock for > 10 secs: hob=i 20 jb 


If the current request is for a long-term lock then the thread will wait indefinitely. In both cases the block Id 
the thread waits on is the address of the VMOB flag word (VMOB+Ox4). See .PB command for information 
on thread slots waiting on Block Ids. 


own 


This is the hob of the owner of this object. The owning hob may be in one of three categories: 

1 . System Owner 

Used to indicate system owned objects. The owner description usually indicates 
the type of object that is being displayed. For example, the LDT for process 9 
running pulse.exe is owned by system object 0xffb9 and has a description 

Idt 0009 c:pulse.exe. 

2. Module Owner (hmte) 

This is used for shared (code and data) objects that are part of a load module file. 
The .hmte of the associated load module is used as the Owner /d for the object. 
The object description names the owning module from the MTE/SMTE structures. 
See .LM command for related information. 

3. Process owner (hptda) 

Process owned objects are those allocated in the private arena of a running 
process and are either dynamic allocations or non-shared module segments, for 
example stack segments. The hptda of the process is used as the owner. The 
owner description names the process id and executable module of the owning 
process. 


hmte 

This names the hmte or System Object Id of the executable code that allocated the memory object or in the case of 
data segments of modules, whith which they are associated. 


sown 

Semaphore owner id. This is the thread slot number that owns the memory management semaphore associated with 
this object. Memory management uses the address of the VMOB as the block Id to sleep on when the semaphore is 
held. This semaphore is used to serialise access to a VMOB structure. See .PB command for information on thread 
slots waiting on Block Ids. 


cnt 


Count of owners of the VMOB semaphore and wait flag. 

The low order bit of cnt is used as a wait indicator. The high order 7 bits are a count of the number of times the 
owning thread has requested the VMOB semaphore without releasing it. See sown filed above for related 


information. 


xf 


Extra flags. 

The following flags are defined: 


name 

bi t 
mask 

VMO B_S L 0 C K_W A I T 

0x01 

VMO B_L L 0 C K_W A I T 

0x02 

VMO B_D I S C_S E G 

0x04 

VMOB_H I GHMEM 

0x08 


description 

Waiting on short term locks to clear 

Waiting on long term locks to clear 

Object is part of a discardable seg 

Object was allocated via dh_vmalloc 
using the VMD HA_U SEHIGHMEM flag 


Notes: 


The lock wait flags indicate that a thread is waiting for locked pages in the memory object to be unlocked, 
but not to resolve a conflicting lock request: that is indicated with the OB_LOCKWAIT flag. 

If a thread blocks waiting for long-term locks to clear then the address of the long-term lock count (VMOB + 
Oxd) is used as the Block-Id the thread blocks on. The thread blocks indefinitely. 

If a thread blocks waiting for short-term locks to clear then the address of the short-term lock count (VMOB + 
Oxe) is used as the Block-Id the thread blocks on. The thread will block for up to 10 seconds. If after that 
time the short-term lock has not been cleared then an error is returned and under the debug kernel the 
following message is sent to the debug console: 

VMLOCK: Short term lock for > 10 secs: hob=i 20 jb 


See .PB command for information on thread slots waiting on Block Ids. 


Count of active long-term lock holders. A non-zero value indicates one or more pages of the memory object have 
been long-term locked, that is prevented from being paged out from physical storage. Long-term locks are expected 
to be held for a relatively long period of time, in the order of seconds. See .MP command for information on 
displaying physical storage status. See also VM Lock Trace Kernel Debugger facility. 


Count of active short-term lock holders. A non-zero value indicates one or more pages of the memory object have 
been short-term locked, that is prevented from being paged out from physical storage. Short-term locks are expected 
to be held for a relatively short period of time, in the order of mili-seconds. See .MP command for information on 
displaying physical storage status. See also VM Lock Trace Kernel Debugger facility. 


description 

The object description appears to the right of the tabular display. It is combines the interpretation of own and hmte 
fields. The following forms are possible: 

Process owned objects 


These appear as: 
where: 


priv pid process 


MTE Owned objects 


pid is the owning 

process id 

process is the 

executable 
running the 
owning 
process 


These appear as: 


shared modu/e 


where: 


PTDA Pseudo-objects 


These appear as: 
where: 


MTE Pseudo-objects 


These appear as: 
where: 


LDT occupying storage 


This appears as: 
where: 


Free objects 


modu/e is the name 

of the 

module that 
contains the 
object (hob) 
displayed. 


ptda p/d process 


pid is the 

process id in 
which the 
object is 
located. 

process is the 

executable 
running the 
owning 
process 


mte modu/e 


modu/e is the module 

name that 
corresponds 
to the MTE 
pointed to by 
the va 


Idt pid process 


pid is the id of 

the process 
that owns the 
LDT related 
to the object 

process is the 

executable 
running the 
owning 
process 


These appear as: 


System Owned Objects 


free 


These appear as: 
where: 


owner user 


owner 


user 


is the system 
object name 
correspondin 
g to the own 
field. 

is the system 
object name 
correspondin 
g to the 
hmte field. 


Note: From 

fix 

pack 
29 of 
Warp 

3.0 
and 
GA 
Warp 

4.0 the 
hmte 
of all 
objects 
with a 
system 
owner 
id is 
also 
formatt 
ed in 
the 
user 
part of 
the 
descri 
ption. 


.MP - Format Memory Page Frame Structures (PFs) 



Display memory Page Frame Structures (PFs). 


Syntax: 


.MP 


B 


F 

I 

L 

R 


frame 

laddr Ln 


Parameters: 


B 


F 


I 


L 


Display in-use (busy) Page Frame Structures in sequential order. 

Note: In-Use PFs are signified by the PF_FREE flag being reset and not by the PF_BUSY flag being set. 
Display free Page Frame Structures. 

Display idle Page Frame Structures. (This option was introduced at fix pack 29 of Warp V3 and base Warp V4.) 


Follow left (forward) chain pointer. This is only of relevance to Free and Idle Page Frame Structures since these are 
linked in a double linked chain. 

Warning: Both the Dump Formatter and the Kernel Debugger may fail to recognise the chain pointers correctly. In 
particular the 2 high order digits of the frame number are truncated. Use this option advisedly! This is fixed from fix 
pack 29 for Warp V3 and base Warp V4. See Free Page Frame Structures or Idle Page Frame Structures for 
information on locating Idle and Free PF chains. 



R 


/addr 


Ln 


frame 


Follow right (backward) chain pointer. This is only of relevance to Free and Idle Page Frame Structures since these 
are linked in a double linked chain. 

Warning: Both the Dump Formatter and the Kernel Debugger may fail to recognise the chain pointers correctly. In 
particular the 2 high order digits of the frame number are truncated. Use this option advisedly! This is fixed from fix 
pack 29 for Warp V3 and base Warp V4. See Free Page Frame Structures or Idle Page Frame Structures for 
information on locating idle and free PF chains. 


Specifies the linear address of a specific Page Frame Structure to be formatted. 
An address expression may be specified. 


Specifies the number of Page Frame Structures to display from the starting criterion. 


Specifies a physical storage page frame number. This will cause the Page Frame Structure corresponding to that 
frame to be displayed except for UVIRT storage. PFs corresponding to UVIRT storage are zeroed unless aliased by 
non-UVIRT storage. In the former case .MP will display then next non-UVIRT PF. In the latter it will display the 
aliasing non-UVIRT PF. See DP command for related information. 


Results & Notes: 


Page Frame Structures are allocated in contiguous storage from the address given by global variable: 

_pft 


Output from the .MP. command appears in one of three formats. 

In-use Page Frame Structure 
Idle Page Frame Structure. 

Free Page Frame Structure. 

For a description of the fields formatted by .MP select .MP Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 


Free Page Frame Structures 


f fdf509c 

Free : 

BLink=0000f 

Flg=4 

FLink=001da 

Blk=00001 

Frame=0000d 

f fdf 50a8 

Free : 

BLink=001f 2 

Flg=4 

FLink=0003f 

Blk=00001 

Frame=0000e 

f fdf 50b4 

Free : 

BLink=001f 1 

Flg=4 

FLink=0000d 

Blk=00001 

Frame=0000f 

f fdf 50c0 

Free : 

BLink=001fe 

Flg=4 

FLink=001f 1 

Blk=00000 

Frame=00010 


Free Page Frame Structures. 

Notes 

• Free Page Frame Structures are chained in a double linked-list. The head of this list may be located as follows: 

1 . Locate list structure whose address is given by _pgFreeList 

2. The first double-word of the list structure points to the pseudo-page frame structure that heads the free list. 

3. The second double-word contains the pseudo-frame number of the pseudo-PF. N.B. This marks the end of the linked 
list only. 

4. The backward pointer to the first true free PF is given by the 5 low order digits of the second double-word of the 


pseudo-PF. This value may be used with the .MP command to format the first free PF provided it is not equal to the 
pseudo-frame number, which would imply no free PFs on the free list. 

5. Subsequent free PFs are found by following the BLink until the pseudo-frame is encountered. 

The Blk field has a residual field an is of no direct relevance to free Page Frame Structures. 


For a description of the fields formatted by .MP select .MP Output Field Descriptions 


Idle Page Frame Structures 


ffdfcdb8 Idle: 
ffdfcdac Idle: 
ffdfcc8c Idle: 


pVP=f f Ie6b9c 
pVP=f f Ie6ba8 
pVP=f f Ie6c08 


Blink=01279 Flg=0 
Blink=012 61 Flg=0 
Blink=0125d Flg=0 


Flink=0004c 

Flink=0127a 

Flink=01279 


Blk=0004a 

Blk=0004b 

Blk=00066 


Frame=0127a 

Frame=01279 

Frame=01261 


Idle Page Frame Structures. 

Notes 


Idle Page Frame Structures are chained in a double linked-list. The head of this list may be located as follows: 

1 . Locate list structure whose address is given by _pgldleList 

2. The first double-word of the list structure points to the pseudo-page frame structure that heads the idle list. 

3. The second double-word contains the pseudo-frame number of the pseudo-PF. N.B. This marks the end of the linked 
list only. 

4. The backward pointer to the first true idle PF is given by the 5 low order digits of the second double-word of the 
pseudo-PF. This value may be used with the .MP command to format the first idle PF provided it is not equal to the 
pseudo-frame number, which would imply no idle PFs on the idle list. 

5. Subsequent idle PFs are found by following the BLink until the pseudo-frame is encountered. 


For a description of the fields formatted by .MP select .MP Output Field Descriptions 


In-use Page Frame Structures 


f fdf 5000 

InUse : 

pVP=f f ldf 000 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

Frame=00000 

f fdf 500c 

InUse : 

pVP=f f ldf 060 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

Frame=00001 

f fdf 5018 

InUse : 

pVP=f f ldf 06c 

RefCnt=0001 

Flg=0 

11=00 

o 

o 

II 

1 — 1 
CO 

Blk=00000 

Frame=00002 

f fdf 5024 

InUse : 

pVP=f f ldf 078 

RefCnt=0001 

Flg=0 

11=00 

sl=00 

Blk=00000 

Frame=00003 


In-Use Page Frame Structures. 

For a description of the fields formatted by .MP select .MP Output Field Descriptions 


MP Output Field Descriptions 


Output from .MP appears in one of is of the following forms: 


f fdf 500c 

InUse : 

pVP=f f ldf 060 

RefCnt=0001 

II 

o 

11=00 sl=00 

Blk=00000 

Frame=00001 

f fdf cdac 

Idle: 

pVP=f f Ie6ba8 

Blink=012 61 

I- 1 

II 

o 

Flink=0127a 

Blk=0004b 

Frame=0127 9 

f fdf 50b4 

Free : 


BLink=001f 1 

II 

4^ 

FLink=0000d 

Blk=00001 

Frame=0000f 


Each of the fields has the following meaning: 
address 

The linear address of the PF structure is given to the left of each display line. 


type 


pVP= 


RefCnt 


Blink= 


Flink= 


The type of PF is displayed in the second column. Three types are possible: Free Idle and InUse. 


The linear address of the associated Virtual Page Structure. See .MV Command for information on displaying Virtual 
Page Structures. 


The number of PTEs that reference the frame of physical storage represented by this PF. A reference count greater 
than 1 indicates shared memory, some instances of which will be represented by VMCOs (see .MC command). 

When a PTE is attached to an existing PF then the Refcnt is incremented. 

When a page of memory is freed, the Refcnt is decremented. If it becomes zero the PF may be eligible for putting on 
the Idle list. 

PFs corresponding to UVIRT storage are zeroed unless aliased by non-UVIRT storage. In either case no reference 
accounting is performed for UVIRT mappings. 


The backward or right link to the previous Idle or Free PF. 


The forward or left link to the next Idle or Free PF. 


PF flags. 

The following flags are defined: 


name 

bit mask 

description 

PF_FAST 

0x1 

frame is fast memory 

PF_BUSY 

0x2 

frame is busy 

PF_FREE 

0x4 

frame is free 

PF_RES 

0x8 

reserved 


Notes: PF_FAST flag is set for some physical storage frames below 640K. 

PF_BUSY signifies that access to the PF is being serialised by the page frame manager. This is normally 
followed by setting the VP_BUSY flag in the associated VP, if reset or setting the VP_WANTED flag and 
waiting on the the Block Id of the VP address. Under the debug kernel the thread slot of the VP semaphore 
owner is saved in vp_semowner (VP+OxOa) See .PB command for information on thread slots waiting on 
Block Ids. 


Count of number of long-term lock requests active against this page frame. This is incremented when a request to 


lock a range of pages of a memory object is made. It is also, but rarely, set to 1 to isolate page frames that have 
caused trap 2 errors from which the system has recovered. See also .MO command output for flags relating to 
memory object locking. 


Count of number of short-term lock requests active against this page frame. This is incremented when a request to 
lock a range of pages of a memory object is made. For related information, see .MO command output for flags 
relating to memory object locking. 


Blk= 

Specifies the swap disk frame, loader block number or diagnostic flag depending on the flag settings of the 
corresponding Virtual Page Structure pointed to by the pVP= field. 

When VP_DF is set and VP_DISCARDABLE is reset then Blk= is the swap disk frame number that contains a copy 
of the page frame. 

When VP_DISCARDABLE is set and VP_RESIDENT is reset then the Blk= field is the Loader block Id. Except for a 
special case noted below, this is a page index, starting from 1 , into the objects of the module as an aggregated 
whole, with the size of each object rounded up to a page boundary. The special case occurs when the memory object 
that owes this page frame has an hmte set to system object id OxffcO, Discard Owner. When this occurs the 
following special block numbers may be used: 

OxOfffe System Infoseg 

OxOfffd Local Infoseg 

OxOfffe invalid LDT pages 

When VP_DF and VP_DISCARDABLE are reset the Blk= usually indicates the last cross-linked swapper disk frame 
(unless its zero), however under the debug kernel negative values are used to indicate errors or instances where 
swapper frames have been freed because the corresponding PTE for the frame was found to be dirty. The following 
error indicators are possible: 

-1 When also Fig=9 then the physical frame caused a Trap 2 error, but the system 

was able to recover the data. The frame is isolated from further use by setting 11=1 , 
refcnt=1 and PF FREE flags are reset and pVP=pgVPBasePg 
-3 A page-in operation failed with ERROR_SWAP_IO_PROBLEMS 

-4 A page_out operation failed with PGPO_FAILED 

-5 A page_out operation failed with ERROR_SWAP_FILE_FULL 

Otherwise disk frame reclamation is indicated by Blk= values of: -1 , -2, -7, -9 and OxfffO. 

For related VP information, see .MV command. 


Frame= 


This is the physical page frame number that this Page Frame Structure represents. 


.MV - Format Memory Virtual Page Structures (VPs) 



Display memory Virtual Page Structures (VPs). 


Syntax: 


.MV 


B 


F vpid 

L laddr 

R 


Parameters: 


B 


Display in-use (busy) Virtual Page Structures in sequential order. 



Note: In-Use VPs are signified by a zero reference count and not by the The VP_BUSY flag. See Ref= field in .MV 
Output Field Description. 


F 


L 


R 


/addr 


Ln 


up/d 


Display free Page Frame Structures. 


Follow left (forward) chain pointer. This is only of relevance to Free Virtual Page Structures since these are linked in 
a double linked chain. 

Warning: Both the Dump Formatter and the Kernel Debugger may fail to recognise the chain pointers correctly and 
under some circumstances the debug kernel may hang. Use this option advisedly! From fix pack 29 for Warp V3 and 
base Warp V4 this has been fixed. 

See Free Virtual Page Structures for information on locating Free VP chains. 


Follow right (backward) chain pointer. This is only of relevance to Free Virtual Page Structures since these are linked 
in a double linked chain. 

Warning: Both the Dump Formatter and the Kernel Debugger may fail to recognise the chain pointers correctly and 
under some circumstances the debug kernel may hang. (.MVFL will cause this effect). Use this option advisedly! 
From fix pack 29 for Warp V3 and base Warp V4 this has been fixed. 

See Free Virtual Page Structures for information on locating Free VP chains. 


Specifies the linear address of a specific Virtual Page Structure to be formatted. 
An address expression may be specified. 


Specifies the number of Virtual Page Structures to display from the starting criterion. 


Specifies a VP Id. This is an index in to the table of Virtual Page Structures, which are located in contiguous virtual 
storage. 


Results & Notes: 


Virtual Page Structures are allocated in contiguous storage from the address given by global variable: 

pgpVPBase 


Output from the .MV. command appears in one of two formats. 

In-use Virtual Page Structure 
Free Virtual Page Structure. 

For a description of the fields formatted by .MV select .MV Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 


Free Virtual Page Structures 


VPI=0d3e pVP=ffle8ee8 
VPI=0d3f pVP=ffle8ef4 
VPI=0d40 pVP=f f le8f 00 
VPI=0d41 pVP=ffle8f0c 
VPI=0d42 pVP=f f le8f 18 


free FLink=00000000 
free FLink=f f le9fec 
free FLink=f f le9fec 
free FLink=00001000 
free FLink=00000000 


BLink=fff 13280 
BLink=f f le8cf 0 
BLink=f f le8cf 0 
BLink=02450030 
BLink=f f le8f 00 


Free Virtual Page Structures. 

Notes 


Free Page Frame Structures are grouped in bundles that are chained in a circular double link list. Each bundle comprises 
contiguous free VPs in the VP array. The chain pointers are only used by the head and tail of each bundle as follows: 

For bundles of greater than one VP: 

1 . Blink of the head points to the tail 

2. Flink of the head points to the head of the next bundle 

3. Blink of the tail points to the head of the previous bundle 

4. Flink of the tail is set to zero 

For single VP bundles: 

1 . Blink points to the head of the previous bundle 

2. Flink points to the head of the next bundle 

The free VP chain is headed by a pseudo-VP whose Blink points to the head of the first true free bundle and whose Flink points 
to the last VP in the VP array. The pseudo-VP is located at global symbol: 

pgVPHead 


Unless a free VP is the head or tail of a bundle then its Flink and Blink will retain values from its previous use. In particular it 
may be possible to glean information about a previous allocation as the Flink field overlays the Fig and Block fields and the 
Blink field overlays the HobPg and Hob fields of an In-use VP. In the example above VPI d41 was probably allocated to page 
30 of hob 245. Using the following .MOC command might reveal who the owner was and who allocated this storage as follows: 

.MOC 245 


For a description of the fields formatted by .MV select .MV Output Field Descriptions 

For more examples using of the .M family of commands see: Exploring Memory Management. 


In-use Virtual Page Structures 


VPI=0000 

VPI=0001 

VPI=0002 

VPI=0003 


pVP=f f ldf 000 
pVP=f f ldf 00c 
pVP=f f ldf 018 
pVP=f f ldf 024 


Res Frame=0000 Flg=410 
Res Block=0000 Flg=c00 
Res Frame=0bc5 Flg=410 
Res Frame=0bc4 Flg=410 


HobPg=0000 

HobPg=0000 

HobPg=0000 

HobPg=027a 


Hob=f f 77 
Hob=f f 6c 
Hob=0001 
Hob=0022 


Ref=001 

Ref=042 

Ref=001 

Ref=001 


Own=000 

Own=000 

Own=000 

Own=000 


Free Virtual Page Structures. 

For a description of the fields formatted by .MV select .MV Output Field Descriptions 


.MV Output Field Descriptions 


Output from .MV appears in one of is of the following forms: 


VPI=0000 pVP=ffldf000 Res Frame=0000 Flg=410 HobPg=0000 Hob=ff77 Ref=001 Own=000 
VPI=0001 pVP=ffldf00c Res Block=0000 Flg=c00 HobPg=0000 Hob=ff6c Ref=042 Own=000 


VPI=0d40 pVP=ffle8f00 free FLink=f f le9fec BLink=f f le8cf 0 


Each of the fields has the following meaning: 


VPI= 


The VP index into the array of VPs. 


pVP= 


The linear address of the VP. 


status 


Bl0Ck=/7/7/7/7 


Frame=/7/7/7 


The status of the VP interpreted from the Fig field. The following values may appear: 

SOW Swap on Write flag (VP_SOW set) 

Res Page is resident (VP_RESIDENT set) 

Dsc Page is discardable (VP_DISCARDABLE set) 

Swp Page is swappable (VP_DISCARDABLE reset) 

free VP is free (vp_refcounf=0) 


The cross-linked loader block number or swapper disk frame. This implies the virtual page is not attached to a PF. If 
it is: 

discardable then it is linked to a loader block id, 
swappable then it is linked to a swapper disk frame. 

When the page is swappable (VP_DISCARDABLE reset) and does not have a disk frame (VP_DF reset) then the 
following special Block values may be used: 

0 Allocate PF on demand 

1 Allocate on demand zero-fill page 

2 page is in a broken disk frame 


The virtual page is linked to PF nnnn Refer to the .MP command for displaying information about the related page 
frame. 


Flink= 

Forward link of a free VP. This is only of relevance to the VP at the head of a bundle of free VPs. See Free Virtual 
Page Structures for information on how free VPs are linked. 

Blink= 

Backward link of a free VP. This is only of relevance to the VP at the head and tail of a bundle of free VPs. See Free 
Virtual Page Structures for information on how free VPs are linked. 

Fig= 

VP flags. 

The following flags are defined: 


name 

VP_BUSY 

VP_WANTED 

VP_CACHE 

VP_PFIDLE 

VP_PF 

VP_DF 

VP_DIRTY 

VP_SHDIRTY 

VP_SOW 


bi t mask 

0x001 

0x002 

0x004 

0x008 

0x010 

0x020 

0x040 

0x080 

0x100 


description 

page semaphore taken 
page semaphore requested 
search page cache for pf 
cross linked to idle pf 
cross linked to pf 
has swap file disk frame 
contents written to - from pte 
shadow dirty bit (for VDMs) 
change to swappable on write 


VP_PRIVATIZED 

0x200 

vp privatized 


VP_RESIDENT 

0x400 

cannot be moved 
pte 

- value from 

VP_D IS CARD ABLE 

0x800 

1 = discardable. 

0 = swappable 


Notes: 


PF_BUSY signifies that access to the VP is being serialised by the page frame manager. 

VP_WANTED signifies that a thread is waiting to mark the VP busy. The thread will wait on a Block Id of the 
VP address. Under the debug kernel the thread slot of the VP semaphore owner is saved in vp_semowner 
(VP+OxOa) see Own= field of the .MV display. See .PB command for information on thread slots waiting on 
Block Ids. 


HobPg= 

The relative page number of the memory object that this VP is assigned to. See Hob= field below. 

Hob= 

The hob of the memory object to which this page is assigned. 

Note: Use 

.MOC hob 


to obtain the virtual address and owner information relating to this VP. See .MO command for more 
information. 

Ref= 

The number of memory objects sharing this page of data. A reference count greater than 1 indicates shared memory, 
some instances of which will be represented by VMCOs (see .MC command) and others by aliases (see .ML 
command). 

The reference count is incremented and decremented according to usage. When the count becomes zero the VP is 
no longer in use and any committed physical storage or swapper storage my become eligible for freeing. 

UVIRT storage is not represented by VPs thus reference accounting is not performed. 

Own= 

The thread slot number of the current owner of the VP semaphore. This field is only used in the debug kernel and will 
only have significance if the VP_BUSY or WP_WANTED flags are set. See .PB command for information on thread 
slots waiting on Block Ids. 


.N - Display Dump Information Summary 



Display information saved by from the operating system when the stand alone dump procedure was initiated. 

Syntax: 


.N 


Parameters: 


none 


Results & Notes: 




.N command displays information saved saved when the kernel routine RASRST is entered at sand-alone dump initiation. 
.N displays the following information: 


gdtr_lim: 1FFF 
gdtr_base: 7C3E5000 
idtr_lim : 03FF 
idtr_base: FFE00150 
ldtr_reg: 0028 
lo_data_sel : 0400 
hi_data_sel : 0400 
trace_buf_addr : 0B490400 
sys_anchor_sel : 0070 
arena_base: FEB1F020 
max_threads : 0101 
phys_page_dir : 001D6000 
vm_ob ject_ptr : FEC80020 
StartInit_Data : 00000140 
dcm_ote_start : FFF0A92F 
CurProcPid : 000D 
TaskData: 0B5C0400 
FirstPacket: 158A 
LastPacket: 04C0 
SysSemDataTable : 53A60400 
GDT_Buf fers : 00A80138 
PapTCBPtrs : 0B6B0400 
callerSS: 00E8 
callerESP: 00000FCC 
savePage: 00241467 


Each of the items displayed has the following significance: 

gdtrlim 


gdtrbase 

Idtrlim 

Idtrbase 

Idtrreg 

lo_data_sel 

hi_data_sel 

trace_buf_addr 

sys_anchor_sel 

sarena_base 

maxthreads 

phys_page_dir 

vm_object_ptr 


The current GDTR register limit value. 

The current GDTR register base address. 

The current LDTR selector limit. 

The current LDTR selector base address. 

The current LDT selector. 

Selector for DOSGROUP segment. 

Selector for DOSHIGHDATA segment. 

Offset:selector address of ras_stda_addr, the selector for the system trace buffer. 
Selector for the SAS. 

Value of _parvmOne, the pointer to the first VMAR. 

Maximum Thread Slot Number. 

Value of cr3 register (that is, the physical address of the page directory table). 

Value of _pobvmOne, the pointer to the first VMOB 


Startlnit_data 


Value of _StartlNITData. 


dcm_ote_start 

Address of DOSCALLS.DLL OTE 

CurrProcPid 

Current process ID. 

TaskData 

Offset:selector address of scheduler global data. 

FirstPacket 

First word of the first device driver strategy 2 request packet in packet pool. 

LastPacket 

First word of the last device driver strategy 2 request packet in packet pool. 

SysSemDataTable 

Offset:selector address of SysSemDataTable. 

GDTBuffers 

GDT selector for buffer segment. The low order word of this field should be ignored. 

PapTCBPtrs 

Offset:selector address of papTCBPtrs. The word value at this label is an offset from the DOSGROUP selector 
(400) to the thread slot table. 

callerSS 

The SS selector on entry to RASRST, the stand alone system dump entry point within the kernel. 

Note: If this dump was taken in interrupt mode the SS selector will be E8. Further more, if that last device driver to 
use the interrupt stack is KDB$ then it is possible the the dump process was initiated with the 
Ctrl-Alt-Numlock-Numlock sequence. If the dump was taken in kernel mode then the SS selector will 
probably be 30 and the dump will have been initiated because of a trap or call to DosForceSystemDump API. 

callerESS 

The ES register on entry tp RASRST, the stand alone system dump entry point within the kernel. 

savePage 

Page directory entry 0. This data is overwritten by the dump process. 


.0 - Override default behaviour 



Override the default system behaviour for handling certain events. 

Syntax: 

.0 Q 

N n 

F 

Parameters: 

Q 

Query override settings in effect. 


N 


Activate (turn oN) overrides for event n . 


F 


Deactivate (turn ofF) overrides for event n. 


n 

Specifies the override event number. Currently only one override event is defined, which is event number 1 . When 
active this forces breakpoints to be serviced by the Kernel Debugger instead of the DosDebug or DosPTrace APIs. 

This only affects debugging situations where a debugging application is active under the Kernel Debugger. 

Results & Notes: 

This command was introduced with fix pack 29 for Warp 3.0 and fix pack 1 for Warp 4.0. 

Prior to the introduction of this command, the only way to override DosDebug and DosPTrace was to zero to address of the Debug Control 
Block ((ptda_pdcb +0x38)) in the PTDA of the debugee process. 

.OQ displays information about overrides in a tabular form as shown in the following example: 


# . OF 1 

DosDebugAPI Override is now OFF. 

# . OQ 

Overide(s) Query Information 

# | Overide | Status 


1 | DosDebugAPI | OVERRIDE OFF 


# . ON 1 

DosDebugAPI Override is now ON. 

# . OQ 

Overide (s) Query Information 

# | Overide | Status 


1 | DosDebugAPI | OVERRIDE ON 


.P - Display Process Status 


DF 


Display process and thread status information from the Per Task Data Area (PTDA), Thread Control Block (TCB) and Thread Swappable 
Data (TSD). 


Syntax: 


.p 

# 

★ 

slot 


Parameters: 

s/ot 

Display process status for thread slot s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 


TaskNumber 



# The debugger default thread slot. This defaults to the current slot unless 

overridden by the .S command. 

If no slot number is given then all thread slots are displayed, grouped by process. 

Results & Notes: 

The .P command locates a thread's TCB from either the thread slot table, the linear address of which is given by global variable: 

_papTCBSlots 


or by traversing the process tree using TCBpTCBNext (TCB +0x14), TCBpPTDA (TCB +0x08) and ptda_pTCBHead (PTDA + 0x20) fields. 
Output from the .P command appears in tabular form as follows: 


Slot 

Pid 

Ppid 

Csid 

Ord 

Sta 

Pri 

pTSD 

pPTDA 

pTCB 

Disp 

SG 

Name 

0001 

0001 

0000 

0000 

0001 

blk 

0100 

f fe3a000 

f fe3c7d4 

f fe3c61c 

leb4 

00 

*ager 

0002 

0001 

0000 

0000 

0002 

blk 

0200 

7b7ca000 

f fe3c7d4 

7b9c8020 

1 f 3c 

00 

*tsd 

0003 

0001 

0000 

0000 

0003 

blk 

0200 

7b7cc000 

f fe3c7d4 

7b9c81d8 

lf50 

00 

*ctxh 

0004 

0001 

0000 

0000 

0004 

blk 

081f 

7b7ce000 

f fe3c7d4 

7b9c83 90 

If 48 

00 

*kdb 

0005 

0001 

0000 

0000 

0005 

blk 

0800 

7b7d0000 

f fe3c7d4 

7b9c854 8 

1 f 2 0 

00 

*lazyw 

0006 

0001 

0000 

0000 

0006 

blk 

0800 

7b7d2000 

f fe3c7d4 

7b9c8700 

1 f 3c 

00 

*asyncr 

*0008 

0002 

0001 

0002 

0001 

blk 

0500 

7b7d6000 

7b9e4 02 0 

7b9c8a7 0 

leb8 

01 

pmshell 

000a# 

0002 

0001 

0002 

0002 

blk 

0800 

7b7da000 

7b9e4 02 0 

7b9c8de0 

led4 

01 

pmshell 


Each of the fields has the following meaning: 


slot 


The unique (hexadecimal) index in to the thread slot table of all threads. 

This value may be flagged with: 

* to the left to signify the current (or last) dispatched thread. 

# to the right to signify the Kernel Debugger or Dump Formatter default thread slot. 


Slot may be found in the TCBNumber (TCB + 0x2) field of the TCB 


Pid 


The process id this thread slot is assigned to. 


Ppid 


The parent process id that created this thread. A value of zero signifies a detached process. 


Csid 


The command subtree id. 


This is normally the same value as the Pid. When the parent process dies any orphaned children are adopted by 
their grandparent by making Ppid equal to the grandparent's Pid. Each orphan inherits the Csid of its dying parent. 
This mechanism ensures that orphaned PTDAs are not retained for returning termination information to their parent 
(via DosWaitChild). 

Csid is taken from the Csid (PTDA +0x4be (H/R: +0x4b6)) field of the PTDA 


Ord 


Sta 


The thread ordinal for this thread slot. This is the unique thread id assigned to the thread within the process to which 
it belongs. 

Ord is taken from the TCBOrdinal (TCB+ 0x0) field of the TCB 


The thread's ascending scheduler state taken from the TCBState (TCB +0x161) field. 

Except when a state transition is progress this is the same as the current state of the thread (see Qst field of the .PQ 
command.) 

The following states are possible: 


abrv Sta 


TCBState description 
value 


STATE_VOID 


rdy 

blk 

sus 

crt 

run 

bst 

tsd 

dly 

frz 

gsk 

bad 

Notes: 


0 Uninitialized or Dead thread 


S T AT E_RE AD Y 1 

STATE_BLOCKED 2 

STATE_SUSPENDED 3 


Thread ready to run 
Blocked on a Block Id 
*** Not in Use *** 


STATE_CRITSEC 4 

S T AT E_RUNN I NG 5 

STATE_READYBOOST 6 

STATE_TSD 7 

STATE_DELAYED 8 

STATE_FROZEN 9 

STATE_GETSTACK 10 


Blocked by another CritSec 
thread (after attempting to 
run) 

Thread currently running 

Ready, but apply an 10 boost 
after swapping in a TSD 

Thread waiting for the TSD 
daemon to page in the TSD. 

Delayed TKWakeup (Almost 
Ready) 

Frozen Thread via 
DosSuspendThread, 
DosCreateThread, DosExecPgm or 
DosSystemService 

TSD daemon is waiting for the 
page manager to page in a TSD 


STATE_BAD STACK 11 


TSD failed to page in 


The scheduler manages threads on queues by priority and state. See .PQ command for displaying 
scheduler queues. 

The scheduler uses a finite state machine to manipulate thread queues. TCBQState and TCBState are the 
state transition drivers. They hold a thread's current and desired state. Except during a state transition 
current and desired state will be identical. 

STATE_RUNNING is set when the next potential runner has been selected. The running thread's context is 
then switched and various dispatcher flags checked before finally giving control to user code. It is therefore 
possible for the running state to be set and for the user code not to run. 

STATE_READYBOOST is a modified ready state and never becomes the current state, instead a priority 
boost is applied and the state becomes STATE_READY 

STATE_CRTSEC This state applies to non-critical section threads only. It is only set when a critical section 
thread within the same process has given up the processor, while still in critical section, and another thread 
in the same process is selected to run. If this thread is thread 1 of the process and there are pending signals 
to process, the thread's signal handler will be dispatched. When there are no more pending signals or this 
thread is not thread 1 then STATE_CRITSEC will be set. 

STATE_FROZEN is normally only seen when an application uses the DosSuspendThread API or creates a 
thread (or process) that is initially suspended. DosSystemService is used by the session manage to freeze 
all threads of a process in one system call. 

Many states are transient accordingly the persistent appearance of a particular state might indicate a 
problem of the following nature: 


rdy 


run 


blk 


Many ready threads might indicate contention 
for processor time. Tends to indicate the 
existence of a higher priority CPU bound 
thread. 

Under the Dump Formatter this would indicate a 
trapped or processor bound thread. Under the 
Kernel Debugger a processor bound thread. 

All threads blocked could indicate no-work or a 


deadlock. Under Dump Formatter this would 
imply a manually invoked dump using 
Ctrl-Alt-Numlock-Numlock or use of the 
DosForceSystemDump API. 

The void state is rarely seen. Under Dump 
Formatter this probably indicates an incorrect 
version of the Dump Formatter for the system 
dumped. 

crt Another thread in the same process is in critical 

section and is either blocking without exiting 
critical section or is processor bound. 

dly Another thread is processor bound. 

frz A deadlock, loop or no-work for the freezing 

thread 

sus Is not used, so probably indicates a mismatch 

between the Dump Formatter and dump. 

tsd Physical storage overcommitted. Swapper very 

large. System may be thrashing. 

bst Physical storage overcommitted. Swapper very 

large. Very busy processor bound system 
System may be thrashing. 

gsk Physical storage overcommitted. Swapper very 

large. Very busy processor bound system 
System may be thrashing. 

bad Excessive swapper. System may die. Physical 

storage overcommitted. Very busy processor 
bound system. 


Thread priority (word length field) in TCBPriority (TCB +0x168). 

This is the current priority calculated by the scheduler based upon priority class (TCBPriClass (TCB +0x164)), 
priority class level (TCBPrilevel (TCB +0x165)) and priority boosts (TCBPriClassMod (TCB +0x166)). 

The following priority classes are defined: 


class 

value 

description 


CLASS_IDLE_TIME 

0x01 

Idle-Time class 

CLASS_REGULAR 

0x02 

Regular class 


CLAS S_T IME_CRI T I CAL 

0x03 

Time-Critical 

class 

CLASS_SERVER 

0x04 

Client-Server 

class 

Server 


The following priority boosts (class modifiers) are defined: 


Boost 

Value 

Description 

CLAS SMOD_KE YBOARD 

0x04 

Keyboard boost 

CLASSMOD_STARVED 

0x08 

Starvation boost 

CLASSMOD_DEVICE 

0x10 

Device I/O Done 
Boost 

CLAS SMOD_FOREGROUND 

0x20 

Foreground boost 

CLASSMOD_WINDOW 

0x40 

Window Boost 


pTSD 


pPTDA 

pTCB 


Disp 


SG 


Name 


CLASSMOD_VDM_INTERRUPT 0x80 VDM simulated 

interrupt boost 


Note: 


CLASSMOD KEYBOARD has no effect on CLASS_SERVER 

The priority level is a value between 0x0 and 0x1 f. 

Priority class and modifier values are logically ORed to form an index into the priority class translation table, 
which is located at global symbol: 

„schPriClassTbl 


The resulting value is logically ORed with the priority level. The final value is subject to the minimum thread 
priority (TCBPriorityMin (TCB +01 6a)). 

Priority boosts do not affect the priority of idle and time-critical threads. 

Priority level has little or no effect on the priority of boosted regular and server class threads, threads 


Linear address of the TSD control block associated with this thread this thread taken from the TCBpTSD (TCB 
+0x0c). 

Note: 


The TSD contains the ring 0 stack for the associated thread. For the current thread this is addressable from 
selector 30 however the base address of selector 30 is entirely different from TCBpTSD. This is because the 
two addresses are aliased using two PTEs to pin the same physical frame. This device allows the TSD for be 
accessed out-of-context by the system, at the same time protecting system code from erroneous stack 
references. 


Linear address of the control block representing the process to which this thread belongs. The address is taken from 

TCBpPTDA (TCB +0x08). 


Linear address of the TCB control block which represents the thread. 

Note: 


The output from .P is ordered by process and child process. TCBs are initially located from the thread table 
then the chain pointer TCBpTCBNext (TCB +0x14) is used to locate the remaining threads of a process. 

Linder the Dump Formatter .P will occasionally miss a thread because of the non-sequential manner in which 
the thread table slots are re-used. To ensure all active threads are displayed use .PU, or .PQ commands. 


The displacement into the TSD for the current thread that the dispatcher will use for its ESP after having switched 
back to this thread's context. 

This value is calculated from TSDKernelESP, therefore requires the TSD to be present. If the TSD is not present 
then a blank value is given. The TSD may be forced present under the Kernel Debugger by use of the .1 command. 


Screen Group ID currently assigned to this process. 

The Screen Groups ID is taken from the console locus structure (Cons_Loc +0x2) embedded in the PTDA ((PTDA 
+0x526 (H/R: +0x51 e))). 


The name of the primary executable running in this process. 

Except for process 1 and Dos Virtual Machines the name is obtained from the hmte stored in ptda_module (PTDA 
+0x5a6 (H/R: +0x59e)). If the SMTE is paged in then the name is taken from the file name pointed to by smte_path 
otherwise it it taken from mte_module and prefixed with an I point. See .LM command for information on formating 
loader control blocks. 


Process 1 comprises internal threads, that is threads which run in the kernel and are not separately loaded modules. 
ptda_module is zero for this process so the Dump Formatter and Kernel Debugger translate the Tids for Pid 1 as 
follows: 


Tid name 


description 


1 *ager Ager thread used for 

compressing the Swap File. 

2 *tsd Scheduler's Daemon Thread used 

to page in TSDs 


3 *ctxh Default Global Context Hook 
dispatching thread. 


4 *kdb Kernel Debugger Daemon thread 

used to process page-in 
requests from the . ID command 

5 *lazyw File system cache lazy writer 

thread. 


6 *asyncr File system asynchronous read 
ahead thread. 


7 *sysinit System initialisation thread. 

8-n Other transient internal 

threads associated with system 
initialisation have a blank 
name . 


Virtual DOS Machines run the DEM component of OS/2 to provide DOS emulation. DOS programs are loaded by the 
DEM and not known to the (OS/2) loader. Thus ptda_module is zero and the Kernel Debugger and Dump Formatter 
use the name *vdm to indicate a VDM. The PSP of the first loaded DOS program in a process may be located from 
CurrentPDB (PTDA +0x2ea), which contains its segment address. The preceding paragraph contains the DOS 
arena record, the last 8 bytes of which contains the DOS program name currently executing. 


Scheduler Finite State Machine 


OS/2 Scheduler Finite State Machine 


terminate 


run 



E:it KModc 


Enter KMode 


run 


tsd < 


■N: laitAiglS 


fa.b,c] EtbedulB tsd 
pager dasrncm 


bad: bad stack 
bill: bloated 

bst: ready + priority boost 
ott: bloated by critical section 
dly: delayed take-up 
£n: frozen 

gsk: get rO stack (tsd) 
rdf: ready 
run: running 

tsd: sabedula *t.sd (tsnan 
---: (void) dead thread 


.PB - Display Blocked Thread Information 



Display information about all blocked threads. 


Syntax: 


■ PB 

# 

★ 

slot 


Parameters: 

s/ot 

Display user information for thread slot s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 


TaskNumber 



# The debugger default thread slot. This defaults to the current slot unless 

overridden by the .S command. 

If no slot number is given then all thread slots are displayed in slot number order. 

Results & Notes: 

The .PB command locates each thread's TCB from the thread slot table, the linear address of which is given by global variable: 

_papTCBSlots 


or by traversing the process tree using TCBpTCBNext (TCB +0x14), TCBpPTDA (TCB +0x08) and ptda_pTCBHead (PTDA + 0x20) fields. 
Output is displayed only if a thread is blocked on a Block-Id. It appears in tabular form as follows: 


Slot 

Sta 

BlockID 

Name 

Type 

Addr 

Symbol 

0001 

blk 

fff 11050 

*ager 




0002 

blk 

f f f 74f 59 

*tsd 



_tkTSDDaemon 

0003 

blk 

f f f43c78 

*ctxh 



_kmCTXHDaemon 

0004 

blk 

f f f7545a 

*kdb 



_tkKDBDaemon 

0005 

blk 

fff02dfc 

*lazyw 



_semLW 

0006 

blk 

f f f llld4 

*asyncr 



_AsyncReadSem 

0008 

blk 

fffeOOOe 

pmshell 

RamSem 

074b: 06d6 


000a 

blk 

f f ca0002 

pmshell 




000b 

blk 

fffdOOOb 

pmshell 

MuxWait 



000c 

blk 

fffdOOOc 

pmshell 

MuxWait 



OOOd 

blk 

04000df 0 

pmshell 

DosSem 

0400 : Odf 0 

CtrlNumLkQ 

0007 

blk 

fe750al0 

pmshell 

Sem32 

8001 0019 

vhevLazy Write 

0010 

blk 

fe728dcc 

pmshell 

Sem32 

8001 0001 

SrvReq 

0011 

blk 

f f fe0006 

pmshell 

RamSem 

d0c7 : 0020 


0012 

blk 

f f fd0012 

pmshell 

MuxWait 



*0013 

blk 

f f fe0007 

pmshell 

RamSem 

d09f : ObcO 

memory_pool + 

0014# 

blk 

f f fe0008 

pmshell 

RamSem 

d09f : 0bc8 

memory_pool + 


Each of the fields has the following meaning: 


slot 


Sta 


BlockID 


Name 


The unique (hexadecimal) index in to the thread slot table of all threads. 

This value may be flagged with: 

* to the left to signify the last dispatched thread. 

# to the right to signify the Kernel Debugger or Dump Formatter default thread slot. 
Slot may be found in the TCBNumber (TCB + 0x2) field of the TCB 


The ascending or desired state of the thread. This should always appear as blk for the .PB command, however 
Dump Formatter does not check the thread state so formats all threads. Those whose state is not blk should be 
ignored. From fix pack 29 for Warp V3 and base Warp V4 this has been fixed so that only blocked threads are 
formatted. See Scheduler Finite State Machine and ,PQ command for more information on thread states. 


The token used by TKSIeep and TKWapeUp to sleep and wake a thread on an event. 

The Blockld is taken from TCBSIeepID (TCB + 0x1 8c). 

The BlockID is a conventional value. A number of conventions are used by various system components. Usually the 
BlockID is constructed so to be unique across all conventions. Frequently it will refer to the address of an associated 
resource, such as a system control block, or a field within a control block. See discussion of the Type field below for 
more information on interpreting Blocklds. 


Type 


The name of the primary executable running in this process. 

See name field description of the .P command for further information. 


Interpretation of the use of the BlockID in conjunction with double word TCB_Semlnfo (TCB + 0x1 4c) and double 
word TCBSemDebugAddr (TCB + 0x150). 


The following Types are recognised by the Dump Formatter and Kernel Debugger: 

RamSem 

The thread is waiting on a RamSem or FastSafeRamSem. 


The high word of the BlockID is Oxfffe, the low word is the RamSemID taken from 
the RamSem structure. 


The Addr field is taken from TCB_Semlnfo. This is a se/ectoroffset address of 
the RAMSEM The RamSem may be imbedded within a FastSafeRamSem or a 
PMFastSafeRamSem. 


The Symbol displayed is either that of the TCB_SemDebugAddr or if -1 , the 
RamSem address. See LN command for information on displaying symbols. 


MuxWait 


The thread is waiting on multiple events. 

The high word of the BlockID is Oxfffd, the low word is the slot of the waiting 
thread. 

TCB Semlnfo and TCB SemDebugAddr are not used with a MuxWait BlockID. 

To locate the semaphores that comprise a given MuxWait proceed as follows: 

1 Locate the MuxWait table at symbol MuxTable. Display this 
using DB for convenience. This table comprises 9 byte entries 
whose format is given by the MuxTableEntry structure. 

2 Scan the MuxTable for entries that have this thread's slot 
number (+0x2 into each entry). 

3 Of those entries, select those with non-zero MuxType (+4 into 
each entry). 

4 Choose one of the following: 

For type 1 (SysSem) 

the last double word is the 
linear address of a system 
semaphore structure. Use 
the technique described 
below under SysSem for 
interpreting the SysSem. 

For type 2 (RamSem) 

the last double word of the 
entry contains the RamSem 
handle, the high word is the 
hob of the memory object 
containing the RamSem. The 
low word is the offset into the 
object where the RamSem is 
located. Use the technique 
described above under 
RamSem for interpreting the 
RamSem 

For type 3 (Physical RamSem) 

the last double word is the 
physical address of the 

RamSem. 

For type 4 (32-bit event sem) 

the last double word is the 
physical address of a 32-bit 
event semaphore. See 
Sem32 below. 

See Mux Semaphore example debugging log for an explicit example of using this 
technique. 


Addr and Symbol fields are blank. 


ReqPkt 


The thread is waiting for an I/O request packed to complete. 


The BlockID is the Se/ector:Offset address of the request packet. The Selector 
is the DOSGROUP kernel selector and should be selector 400. 

The address should lie between addresses at global symbols: FirstPacket and 
LastPacket. 

See the Physical Device Driver Reference manual for information on device driver 
request packets. 

Addr and Symbol fields are blank. 


SysSem 


DosSem 


Sem32 


The thread is waiting on a system semaphore. 

The BlockID is the Se/ectorOffset address of the SysSemTbIStruc structure. 

The Selector is the DOSGROUP kernel selector and should be selector 400. 

The address should lie within the System Semaphore Data Table, located at 

symbol SysSemDataTable for length 256*6 bytes. 

Offset +0 of each table entry contains the owner's thread number. 

The name associated with the semaphore may be located as follows: 

1 Locate the SysSem RMP segment by displaying double word at 
symbol SysSemRMPHdl. The high word is the selector for the 
semaphore RMP. 

2 Display the System Semaphore RMP using DB. The first 0x14 
bytes is the RMP header. The remainder comprises variable 
length records. The first word of each record is its length and 
therefore the relative offset to the beginning of the following 
record. Offset 2 of each record is the semaphore data table 
selector offset. 

3 Scan the RMP looking for an offset that matches the low word 
of the BlockID. When found the remaining bytes of the RMP 
record is the semaphore name (with the top two bytes overlaid 
by the semaphore offset). 

See System Semaphore example debugging log for an explicit example of using 

this technique. 

The Addr and Symbol fields are blank. 


The thread is waiting on an internal RamSem or blocking on an address in the 
kernel’s DOSGROUP segment. 

The BlockID is the se/ector:offset of the DosSem. The Selector is the 
DOSGROUP kernel selector and should be selector 400. The offset does not lie in 
the System Semaphore Data Table or the I/O Request Packet Table. 

Addr is the BlockID formatted as selector-offset . 

The Symbol displayed is either that of the TCB_SemDebugAddr or if -1 , the 
DosSem address. See LN command for information on displaying symbols. 


The thread is waiting on a 32-bit semaphore. 

The BlockID is the address of the 32-bit Semaphore structure. 

TCB_Semlnfo contains the semaphore handle. This is of the form: 

8001 nnnn Shared 32-bit semaphore, nnnn is the 

(double-word) index into the shared semaphore 
table located at symbol _pShSemTbl. Each 
entry is an address of the corresponding 32-bit 


semaphore structure, (that is, the Sem32 
BlockID). 


0001 nnnn Private 32-bit semaphore, nnnn is the 

(double-word) index into the private semaphore 
table located at pPrSemTbl (PTDA +0x4cc 
(H/R: +0x4c4)). Each entry is an address of the 
corresponding 32-bit semaphore structure, (that 
is, the Sem32 BlockID). 

Addr field is the semaphore handle formatted as two words. 

The Symbol displayed is either that of the TCB_SemDebugAddr or if -1 , the 

Sem32 address. See LN command for information on displaying symbols. 

Use the .D SEM32 comand with the BlockID to format the 32-bit semaphore. 


Buffer 


SFT 


The thread is waiting for a file system buffer. 

The Blockld is the se/ectoroffset address of the buffer. The high word is the 
buffer selector and should be a8. 

The Addr and Symbol fields are blank. 


The thread is waiting for a SFT entry. 

The Blockld is the se/ector:offset address of the SFT. The high word is the 
buffer selector and should be one that is listed in the SFT table pointed to by c0:0. 

The Addr and Symbol fields are blank. 


ChildWait 

The thread is waiting in DosWaitChild for a child process to terminate. 

The high word of the BlockID is the ptda_Pid offset from selector 30 (Oxffca). 
The low word of the BlockID is the Pid to which this thread belongs. 


b /an k type 

The thread is waiting on a Blockld that the Kernel Debugger and Dump Formatter 
have not been able to identify. 

Addr field is blank. 

The Symbol displayed is either that of the TCB_SemDebugAddr or if -1 , the 
Sem32 address. See LN command for information on displaying symbols. 


Notes: 


The BlockID interpretation is not exact. A device driver, for example, could call DevFllp_ProcBlock using a 
value for BlockID that conflicts with another convention. 

Under the Debug kernel only, TCB_SemDebugAddr is used to record the creator's address of kernel, 
system and RAM semaphores. If it is not used it is set to Oxffffffff. 

ChildWait BlockIDs might be missed by the Dump Formatter and Kernel Debugger. Look out for BlockIDs 
of the form Oxffca????. ChildWait is correctly reported from fix pack 29 for Warp V3 and base Warp V4. 

Some Sem32 BlockIDs are missed by the Dump Formatter. Check TCB_Semlnfo for a 32-bit semaphore 
handle and BlockIDs of the form Oxfe?????? 

If BlockID is a linear address owned by ksem then the semaphore is a Kernel Semaphore. However, not 
every KSEM is owned ksem owned memory. Under the ALLSTRICT kernel, a KSEM may be readily 
identified from the first 4 bytes, which have the signature "KSEM" Under the RETAIL and HSTRICT kernels, 
the Blockid is chosen to be the address (or handle) of the KSEM. Under the ALLSTRICT kernel, Event 
KSEMs use the KSEM handle+4 as the Blockld. Use .D KSEM command with the BlockID to format a 
KSEM. 

In general a BlockID will be chosen to be meaningful to the programs using it. Often it is an address of a 
resource that needs to be serialised. Where no other information is given one should try: 


M B/ock/D 


LN B/ock/D 


Unwind the User's Stack 


to try to establish 
an owner of the 
resource 
represented by 

the BlockID 

to try to establish 
a meaningful 
symbol 

associated with 

the BlockID 

to try to establish 
the API or call the 
lead to the thread 
waiting on the 

BlockID (see .K 
command) 


Addr 

The address of the semaphore associated with this BlockID 
See Type field discussion above for more precise information. 

Symbol 

Either the symbolic address of the creator or of the associated semaphore. 
See Type field discussion above for more precise information. 


.PQ - Display Scheduler Queue Information 



Display scheduler thread queue information for all (active) threads. 

Syntax: 


• PQ 


# 

~k 

slot 


Parameters: 

s/o/ 

Display queue status for thread slot s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 

_TaskNumber 


# The debugger default thread slot. This defaults to the current slot unless 

overridden by the .S command. 

If no slot number is given then all thread slots are displayed in slot number order. 

Results & Notes: 

The .PQ command locates each thread's TCB from the thread slot table, the linear address of which is given by global variable: 


_papTCBSlots 


or by traversing the process tree using TCBpTCBNext (TCB +0x14), TCBpPTDA (TCB +0x08) and ptda_pTCBHead (PTDA + 0x20) fields. 
Output from the .PQ command appears in tabular form as follows: 


Slot 

QSt 

Pri 

pTCB 

0001 

blk 

0100 

f fe3c61c 

0002 

blk 

0200 

7b9c8020 

0003 

blk 

0200 

7b9c81d8 

0004 

blk 

081f 

7b9c83 90 

0005 

blk 

0800 

7b9c8548 

0006 

blk 

0800 

7b9c8700 

0008 

blk 

0500 

7b9c8a7 0 

000a 

blk 

0800 

7b9c8de0 

*000b 

blk 

0800 

7b9c8f 98 

000c# 

blk 

0800 

7b9c9150 


PriNextQ PriPrevQ PriHigh 

7b9cb3b0 7b9c9830 

7b9ca960 7b9ca960 
7b9cabl8 7b9cabl8 


PriLow 


PriNext PriPrev 


Each of the fields has the following meaning: 

slot 

The unique (hexadecimal) index in to the thread slot table of all threads. 

This value may be flagged with: 

* to the left to signify the current (or last) dispatched thread. 

# to the right to signify the Kernel Debugger default thread slot. 

Slot may be found in the TCBNumber (TCB + 0x2) field of the TCB 

QSt 

The thread's descending or current scheduler state taken from the TCBQState (TCB +0x1 60) field. 

Except when a state transition is progress this is the same as the desired state of the thread (see Sta field of the .P 
command.) 

The following states are possible: 


Abrv 

Qst 


TCBQState Value 

Description 

— 

STATE. 

.VOID 

0 

Uninitialized or Dead thread 

rdy 

STATE. 

.READY 

1 

Thread ready to run 

blk 

STATE. 

.BLOCKED 

2 

Blocked on a Block Id 

sus 

STATE. 

.SUSPENDED 

3 

*** Not in Use *** 

crt 

STATE. 

.CRITSEC 

4 

Blocked by another CritSec 
thread (after attempting to 
run) 

run 

STATE. 

.RUNNING 

5 

Thread currently running 

tsd 

STATE. 

_TSD 

7 

Thread waiting for the TSD 
daemon to page in the TSD. 

bst 

STATE. 

.READYBOOST 

6 

current state never set to 
this value - see note below. 

dly 

STATE. 

.DELAYED 

8 

Delayed TKWakeup (Almost 
Ready) 

f rz 

STATE. 

.FROZEN 

9 

Frozen Thread via 
DosSuspendThread, 
DosCreateThread, DosExecPgm o: 
DosSystemService 

gsk 

STATE. 

.GET STACK 

10 

TSD daemon is waiting for the 
page manager to page in a TSD 


bad S TAT E_BAD STACK 


11 


TSD failed to page in 



Notes: 

STATE_READYBOOST is a modified ready state and never becomes the current state, instead a priority 
boost is applied and the state becomes STATE_READY 

See Sta field decription of the .P Command for related information on thread states. 

Pri 

Thread priority in TCBPriority (TCB +0x168) 

This is the current priority calculated by the scheduler based upon priority class (TCBPriClass (TCB +0x164)) priority 
class level (TCBPrilevel (TCB +0x165)) and priority boosts (TCBPriClassMod (TCB +0x166)). See Pri field 
description of the .P command for further information. 

pTCB 

Linear address of the TCB control block that represents the thread. 

PriNextQ 

The TCB address of the thread at the head of the next priority queue. 

PriNextQ is taken from the TCBpTCBPriNextQ (TCB + 0x170) double-word field. 

If there are no other linked priority queues then TCBpTCBPriNextQ and TCBpTCBPriPrevQ point to this thread and 
PriNextQ and PriPrevQ are shown blank. 

All TCBs not heading a priority queue have TCBpTCBPriNextQ and TCBpTCBPriPrevQ pointing to themselves. 
PriNext and PriPrev is only of relevance to blocked and delayed threads. 

PriPrevQ 

The TCB address of the thread at the head of the previous priority queue. 

PriPrevQ is taken from the TCBpTCBPriPrevQ (TCB + 0x174) double-word field. 

If there are no other linked priority queues then TCBpTCBPriNextQ and TCBpTCBPriPrevQ point to this thread and 
PriNextQ and PriPrevQ are shown blank. 

All TCBs not heading a priority queue have TCBpTCBPriNextQ and TCBpTCBPriPrevQ pointing to themselves. 
PriNext and PriPrev is only of relevance to blocked and delayed threads. 

PriHigh 

The TCB address of the next higher priority thread within this priority queue. 

PriHigh is taken from the TCBpTCBPriHigher (TCB + 0x178) double-word field. 

If there are no higher priority threads on this priority queue then TCBpTCBPriHigher points to this thread and 
PriHigh is shown blank. 

PriLow 

The TCB address of the next lower priority thread within this priority queue. 

PriLow is taken from the TCBpTCBPriLower (TCB + 0x1 7c) double-word field. 

If there are no lower priority threads on this priority queue then TCBpTCBPriLower points to this thread and PriLow 
is shown blank. 

PriNext 

The TCB address of the next thread of the same priority within this priority queue. 

PriNext is taken from the TCBpTCBPriNext (TCB + 0x180) double-word field. 

If there are no other threads of the same priority on this priority queue then TCBpTCBPriNext and 
TCBpTCBPriPrev point to this thread and PriNext and PriPrev are shown blank. 

PriPrev 

The TCB address of the previous thread of the same priority within this priority queue. 


Priprev is taken from the TCBpTCBPriPrev (TCB + 0x184) double-word field. 

If there are no other threads of the same priority on this priority queue then TCBpTCBPriNext and 
TCBpTCBPriPrev point to this thread and PriNext and PriPrev are shown blank. 


Scheduler Priority Queues 


Threads are linked in structures call Priority Queues or PriQs. 

Priority queues are a double-linked list of thread priority groups. Each group is a double-linked list of threads of the same priority. 

Six chain pointers are used for the links of a PriQ: 

TCBpTCBPriHigher (TCB + 0x178) 

TCBpTCBPriLower (TCB + 0x1 7c) 

TCBpTCBPriNext (TCB + 0x180) 

TCBpTCBPriPrev (TCB + 0x184) 

By default these chain pointers are set to point to their own TCB. 

TCBpTCBPriHigher and TCBpTCBPriLower link the heads of each priority group. 

TCBpTCBNext and TCBpTCBPrev link the TCBs within each priority group. 

A number of PriQs are defined. Each is anchored from a global symbol pointer: 

_ptcbPriQTSD 

Anchor for all threads in tsd state. 

_ptcbPriQRunner 

Anchor for all threads in run state. At most this contains one TCB. 

_ptcbPriQReady 

Anchor for all threads in rdy state. 

_ptcbPriQGetStack 

Anchor for all threads in gsk state. 

_ptcbPriQBadStack 

Anchor for all threads in bad state. 

ptda_pTCBPriQCritSec 

Anchor per-process for all threads within a process in crt state. 

Notes: 

For the current process ptda_pTCBPriQCritSec (PTDA +0x2e4) is a also a global symbol. Out of current 
context it can be located relative to the process' PTDA address. 

The TCB address of the thread that has entered critical section is saved in ptda_pTCBCritSec (PTDA 
+0x2e0) 

Sleeping threads are queued on priority queues but in a manner to favour wake-up processing. The Block-Id is hashed to form an index into 
a table of PriQ anchors. The table is located at global symbol: 

__aptcbSleep 

Each anchor points to a chain of PriQs of threads sleeping on the same Block-Id. The head TCB of each PriQ within a hashed chain is 
doubly linked from: 


TCBpTCBPriNextQ (TCB + 0x170) 


TCBpTCBPriPrevQ (TCB + 0x174) 


Threads that happen to sleep on the same Block-Id as a multi-wake-up block-id are guaranteed not to be put in the same chain as the 
multi-wake-up threads. 

When multi-wake-up threads wake their entire sleeping PriQ is moved to a chain of PriQs for threads in dly state. The delayed thread PriQ 
is anchored from global symbol: 

_ptcbPriQDelayed 


Since ptcbPriQDelayed anchors a chain of PriQs, the head of each PriQ is doubly-linked using TCBpTCBPriQNextQ and 
TCBpTCBPriQPrevQ. 


.PU - Display Thread User Space Information 



Display thread user space summary information for all (active) threads. 

Syntax: 

■ PU 

# 

★ 

slot 


Parameters: 

s/ot 

Display user information for thread slot s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 

_TaskNumber 

# The debugger default thread slot. This defaults to the current slot unless 

overridden by the ,S command. 

If no slot number is given then all thread slots are displayed in slot number order. 

Results & Notes: 

The .PU command locates each thread's TCB from the thread slot table, the linear address of which is given by global variable: 

_papTCBSlots 


or by traversing the process tree using TCBpTCBNext (TCB +0x14), TCBpPTDA (TCB +0x08) and ptda_pTCBHead (PTDA + 0x20) fields. 
Output from the .PU command appears in tabular form as follows: 


Slot 

Pid 

Ord 

pPTDA 

Name 

pstkf rame 

! CS : EIP 

SS :ESP 

cbargs 

0001 

0001 

0001 

f fe3c7d4 

*ager 

f fe3bf 54 

le30 : 00001794 

0030 : 0000a402 

0000 

0002 

0001 

0002 

f fe3c7d4 

*tsd 





0003 

0001 

0003 

f fe3c7d4 

*ctxh 





0004 

0001 

0004 

f fe3c7d4 

*kdb 





0005 

0001 

0005 

f fe3c7d4 

*lazyw 





0006 

0001 

0006 

f fe3c7d4 

*asyncr 





0008 

0002 

0001 

7b9e4020 

pmshell 

7b7d7 f 4c 

d02f : 0000272d 

OOlf :0003f8b8 

0008 

*000a 

0002 

0002 

7b9e4020 

pmshell 

7b7dbf 44 

d087 : 00003413 

bfff :000007a6 

0010 

000b# 

0002 

0003 

7b9e4020 

pmshell 

7b7ddf 48 

d087 : 0000351a 

bf f f : OOOOOf cO 

000c 



Each of the fields has the following meaning: 


slot 


Pid 


Ord 


pPTDA 


Name 


pstkframe 


CS:EIP 


SS:ESP 


cbargs 


The unique (hexadecimal) index in to the thread slot table of all threads. 

This value may be flagged with: 

* to the left to signify the current (or last) dispatched thread. 

# to the right to signify the Kernel Debugger or Dump Formatter default thead slot. 

Slot may be found in the TCBNumber (TCB + 0x2) field of the TCB 
The process id this thread slot is assigned to. 

The thread ordinal for this thread slot. This is the unique thread id assigned to the thread within the process to which 
it belongs. 

Ord is taken from the TCBOrdinal (TCB+ 0x0) field of the 

Linear address of the control block representing the process to which this thread belongs. The address is taken from 

TCBpPTDA (TCB +0x08). 

The name of the primary executable running in this process. 

See name field description of the .P command for further information. 


The address of the ring 0 stack frame that saved the user (ring 2 or ring 3) registers at the last transition to ring 0. For 
internal threads that have never run in ring 2 or ring 3 or for the currently running ring 3 thread this field will appear 
blank. 

The address for the user stack frame is taken from TCB_pFrameBase (TCB + 0x3c). See .R command for further 
information on displaying registers saved in the user stack frame. 


The user (ring 2 or ring 3) CS:EIP saved in the ring 0 user stack frame the last time the thread made a transition to 
ring 0. This field will appear blank if the thread is an internal ring 0 thread, currently running in ring 3 or the TSD for 
this thread is paged out. See .1 command for information on paging in a TSD. 


The user (ring 2 or ring 3) SS:ESP saved in the ring 0 user stack frame the last time the thread made a transition to 
ring 0. This field will appear blank if the thread is an internal ring 0 thread, currently running in ring 3 or the TSD for 
this thread is paged out. See .1 command for information on paging in a TSD. 


The user (ring 2 or ring 3) cbargs saved in the ring 0 user stack frame the last time the thread made a transition to 
ring 0. This field will appear blank if the thread is an internal ring 0 thread, currently running in ring 3 or the TSD for 
this thread is paged out. See .1 command for information on paging in a TSD. 


.R - Display User's Registers 



Display the user registers for a given thread slot. Set default addresses for E command, D command, K command and U command. 


Applicable to the Dump Formatter only, the default adressing mode is not set according to the VM flags of the EFLAGS register but is 
assumed always to be in protect mode. This has been corrected from fix pack 29 of Wapr 3.0 and base Warp 4.0. 


Syntax: 



.R 

# 

★ 

slot 


Parameters: 

s/ot 

Display user registers for thread slot s/ot. This option is valid only under the Kernel Debugger. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 

_TaskNumber 

# The debugger default thread slot. This defaults to the current slot unless 

overridden by the ,S command. 

If no slot number is given then the debugger's default slot number is assumed. 

Results & Notes: 


Registers are displayed and register mnemonics are assigned the values displayed for use in address expressions and operands of other 
Kernel Debugger and Dump Formatter commands. 

The register information is obtained as follows: 

Under the Kernel Debugger, if the displayed slot is the current system slot and the system is not in kernel mode (that is, 
lndos-i=1) then the hardware register values save by the debugger are displayed. 

Otherwise the registers are extracted from the from the ring 0 stack frame base pointed to by TCB_pFrameBase (TCB + 0x3c) 
for the thread slot in question. 

The ring 0 stack frame base is created when the threads makes a transition from ring 2 or 3 to ring 0. This happens for a variety 
of reasons, such as issuing a call gate, trapping, pre-emption, interrupt, etc.. The format of the stack frame base depends on the 
reason for the ring 0 transition. TCB_pcriFrameType (TCB + 0x38) points to the CRI, which contains a table of RIPs. Each RIP 
entry is associated with a specific hardware register. The RIP contains the offset and length of the associated register saved in 
the stack frame base. See Client Register Information and Stack Frames for details of the CRI and RIP formats. 

Note: 


If the thread has never run out of kernel mode, as is the case with some internal threads, then the CRI is never updated. 
The .R command is not able to format the user registers. For these threads the R command should be used, but only 
when the thread in question is the current system thread. Because the R command is an alias to the .R under the Dump 
Formatter, there is no way the display the current registers for an internal thread under the Dump Formatter. The only 
recourse is to display the TSD for the thread and attempt to unravel the stack manually. 

If an invalid thread slot number is given the the Kernel Debugger issues the following message: prompted with the command prompt. 


Invalid task number: nnnn 


The format of the .R command output depends on whether the RT command has been used to toggle register display to full or short form 
and also whether the Y 386ENV command has been used to toggle register interpretation into 286 or 386 mode. Examples of the various 
forms follow: 


##rt 
## . r 2c 

eax=f 110099f ebx=00000001 ecx=0133fe4c edx=00000007 esi=0133ffec edi=00000000 
eip=00000626 esp=0133fe20 ebp=0133fe88 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02f ss=099f ds=0053 es=0053 fs=150b gs=0000 cr2=1581928c cr3=001d0000 


gdtr=7c3e5000 lfff idtr=f feOOdf 0 03ff tr=0010 ldtr=0028 crO=pg et ts em mp — 
dr0=00000000 — el- drl=00000000 — el- dr2=00000000 — el- dr3=00000000 — el- 
tr6=00000 v=0 d=00 u=00 w=00 c=w tr7=00000 ht=0 rep=0 dr6= — — — dr7= — — 
002c|d02f:00000626 66ead77a021a5b00 jmp 005b : Ia027ad7 

##rt 

##.r 

eax=00000000 ebx=00000014 ecx=0000abd7 edx=0000abd7 esi=00080bff edi=00080007 
eip=0000272d esp=0000a668 ebp=0008a670 iopl=2 — — — nv up ei ng nz na pe nc 
cs=d02 f ss=0047 ds=abd7 es=dl37 fs=150b gs=0000 cr2=1581928c cr3=001d0000 

doscalll :CONFORM16 : postDOSSEMWAIT : 
d02f : 0000272d c9 leave 


##y 386env 
## . r 2c 

ax=099f bx=0001 cx=fe4c dx=0007 sp=fe20 bp=fe88 si=ffec di=0000 

ip=0626 cs=d02f ds=0053 es=0053 ss=099f — nv up ei ng nz na pe nc 

002c | d02f : 0626 66ead77a021a5b00 jmp 005b : Ia027ad7 

## 


##rt 


## . r 2c 

ax=099f bx=0001 cx=fe4c dx=0007 


ip=0626 cs=d02f ds=0053 es=0053 

gdtr=3e5000 lfff idtr=e00df0 03ff 
002c | d02f : 0626 66ead77a021a5b00 jmp 
## 


sp=fe20 bp=fe88 si=ffec di=0000 
ss=099f — nv up ei ng nz na pe nc 

tr=0010 ldtr=0028 iopl=2 msw=ts em mp 

005b : Ia027ad7 


Following the formatted register display, one line of disassembled code is displayed at the default disassembley address. See the U 
command for details on disassembling code. 

Each of the fields has the following meaning: 

Genera/ Registers 

These comprise the following registers: 

ax, be, cx, dx, sp, bp, si, di 
eax, ebx, ecx, edx, esp, ebp, esi, edi 
Each is displayed with its value in hexadecimal. 

Segment Registers 

These comprise the following registers: 
cs, ds, es, fs, gs, ss 

Each is displayed with its selector value in hexadecimal. 

instruction Pointers 

These comprise the following registers: 
ip & eip 

Each is displayed with its value in hexadecimal. 

F/ag registers 

These comprise the following registers: 
flags & eflags 

These have their bit setting interpreted as follows: 

Bit Value Flag Description 

17 1 VM Virtual 8086 Mode (EFLAGS 

only) 


16 

0 

RF 

Resume Flag - Disable Debug 
Exceptions (EFLAGS only) 

14 

1 

NT 

Nested Task 

11 

1 

OV 

Overflow 

11 

0 

NV 

“■Overf low 

10 

1 

DN 

Direction Down 

10 

0 

UP 

Direction Up 

9 

1 

El 

Enable Interrupts 

9 

0 

DI 

Disable Interrupts 

7 

1 

NG 

Negative Sign 

7 

0 

PL 

Plus Sign 

6 

1 

ZR 

Zero Result 

6 

0 

NZ 

Non-zero Result 

4 

1 

AC 

Auxiliary Carry 

4 

0 

NA 

“'Auxiliary Carry 

2 

1 

PE 

Parity Even 

2 

0 

PO 

Parity Odd 

0 

1 

CY 

Carry 

0 

0 

NC 

“"Carry 


Bits 12 and 13 are the I/O Privilege Level bits. These are formatted as iopl =/eirei. 
Flags 14, 16 and 17 when reset are indicated by 
Memory Management Registers 


gdtr=xKKKKKKr yyyy 
\^X\— xxxxxxxx yyyy 
ldtr=xKKi' 
tr=xxxx 


Controt Registers 

crO= 


Global Descriptor Table Register base address (xxxxxxxx) and limit (yyyy) 
Interrupt Descriptor Table Register base address (xxxxxxxx) and limit (yyyy) 
Local Descriptor Table Register GDT selector (xxxx). 

Task Register GDT selector (xxxx). 


System control flags and Machine Status Word. 

These have their bit setting interpreted as follows: 

Bit Value Flag Description 

31 1 PG Paging Enabled 

41 ET Extension Type Flag - x87 

support 


3 


1 


TS Task Switch Flag 



cr2= 

cr3= 


Debug Registers 

drO to dr3 


dr6= 


2 

1 

EM 

Emulation exception 

1 

1 

MP 

Math Present 

0 

1 

PM 

Protect Mode Enabled 


Reset flag bit are shown with 
Page fault linear address. 

Page Directory Base Register (PDBR). 

These are formatted as follows: 

dr0=22222222 glxnb 
dr 1= 1 1 1 1 1 1 1 1 glxnb 
dr 2= 1 1 1 1 1 1 1 1 glxnb 
dr 3= 1 1 1 1 1 1 1 1 glxnb 

where //////// is the breakpoint linear address and g/xnb are dr7 and dr6 related 
flags. 

The flags have th following interpretations: 
g G indicates a globally enabled breakpoint. 

/ L indicates a locally enabled breakpoint. 

x E indicates an execute breakpoint 

R indicates an read breakpoint 
W indicates an write breakpoint 
n The number of bytes tested (1 , 2 or 4) 

b B indicates a that a debug exception was generated that matched 

this breakpoint. This is the B/7 value of dr6. 

- indicates a flag bit reset. 

The control bits 13-15 are interpreted as follows: 

Bit Value Flag Description 

15 1 BT Breakpoint triggered on task 

switch 

14 1 BS Breakpoint triggered on single 

step . 

13 1 BD Breakpoint on debug register 

access/update . 

Flag bits not set are indicated by -- 


dr7= 


The control bits 8 and 9 are interpreted as follows: 



Bit Value Flag Description 

91 GE Exact data matching enabled 

for global breakpoints 

8 1 LE Exact data matching matching 

for local breakpoints 


Test Registers 


Flag bits not set are indicated by -- 


Ir 6= t////\i= i/ 6=ctct \i~uu w=mv c=c 


///// is the linear page address. 
it is tr6 flag bit 1 1 , the valid bit. 
cfcf are tr6 flag bits 10 and 9. 
uu are tr6 flag bits 8 and 7. 
iv are tr6 flag bits 6 and 5. 
c is set as follows: 

r tr6 flag bit 0 set. TLB read command, 

w tr6 flag bit 1 reset. TLB write command. 

\\l=.ppppp to=/r rep =a 


ppppp is the tr7 physical frame address. 
h is flag bit 4 value. This is the hit or PL bit. 
r are tr7 flag bits 3 and 2. These are the report or REP bits. 
The following INTEL(R) publications should be consulted for definitive information on processor registers: 

lntel486(TM) Microprocessor Family Programmer's Reference Manual 
Pentium(TM) Processor User's Manual 


.REBOOT - Restart the System 



Restart the system. 

Syntax: 


.REBOOT 


Parameters: 


None 


Results & Notes: 


DosHIp service DosHIpReboot is called to restart the system. No system shutdown processing, whatsoever, is performed. 
This command is not available to the Dump Formatter! 


.S - Set or Display Default Thread Slot 



Set or display the Kernel Debugger's and Dump Formatter's default thread slot. 


This command affects the default operation of the following: 


D command 
E command 
U command. 

.1 command 
.K command 
.P command 
.PB command 
.PQ command 
.PU command 
.R command 


Syntax: 


s 


* 

slot 


Parameters: 

s/ot 

Set the default thread slot to s/ot. 

The following short-hand may be used for the slot number: 

* The current (last) thread the dispatcher gave control to. This value is taken from 

the word a global label: 

_TaskNumber 

If no slot number is given .S displays the current thread slot number in message: 

Current task number: nnnn 


s 


where nnnn is the thread slot number. 

Set current ESP, EBP, SS, CS and EIP registers to those of the Dispatcher. 

This option sets these registers as if the thread context had just been switched by the OS/2 Dispatcher. The R 
command will show the thread in kernel mode, about to be run. 

No actual updating of register values takes place. Only default values are effected. 

The new defaults are derived as follows: 


ESP 


taken from TSDKernelESP (TSD + Disp value of .P command output.) 



EBP 


taken from TSDUserSSPad (TSDKernelESP - 2) 

SS selector 30 (TASKAREA segment). 

CS Selector 1 70 (DOSHIGH32CODE segment). 

EIP label pgSwitchRet. 

This option is not available to the Dump Formatter. 

Note: 

The intent of this option is to simulate the correct value of the ring 0 stack selector for the default thread. This 
is only safe to use in commands that make explicit reference to the stack selector, for example: 

■ SS 21 
R 

DD SS : ESP 

If an indirect reference is made to selector 30, for example by referring to a symbol from the TASKAREA 
segment then the adjustment to the default slot is not made. For example: 

DW JFN_Tabel 114 

will only display the JFT for the current thread slot. To display the JFT for another slot requires the following 
technique: 

DW %ptda_address+JFN_Table-ptda_start 114 


Results & Notes: 


The .S command sets certain default values such that the view of the user’s space in the new default slot is as if the the thread context had 
switched. Linear and LDT selector based addresses will be accesses correctly by the Dump Formatter and Kernel Debugger. Flowever, 
certain system data that are updated by a context switch are not changed and continue to display in the system's current thread context. 
These items include: 

Task Register (TR) 

GDT descriptor table entries for selectors 28, 30, 38 and 1 50b 
Current TSS ring 0, and ring 2 stack selectors and pointers. 

Global and System copy of the Current Local Information Segments. 

The Thread Local Memory Area and Local Information Segment mapped by LDT descriptor dfff. 

Note: 

Descriptor dfff maps a global shared memory object, but it's data is copied from the incoming PTDA and TCB when a 
context switch occurs. This achieves the effect of thread local memory. 


.SYSDUMP - Force a System Dump and Restart the System 



Dump and Restart the system. 

Syntax: 


. SYSDUMP 


Parameters: 


None 

Results & Notes: 


The Kernel Debugger gives control to RASRST to force a system dump. The dump drive will be that specified in variable: DumpDevice, 
which defaults to A. This may be modified by using the E command. 

The current CPU register values as displayed by the R command may be found from symbol _RegSA and formatted using the PMDF 
REXX EXEC DR. See Forcing a System Dump from the Kernel Debugger for further information. No system shutdown processing, 
whatsoever, is performed. 

This command is not available to the Dump Formatter! 


.T - Dump the System Trace Buffer 



Dumps the system trace buffer. 


Syntax: 


.T 


count 


MAJ=mm 


MIN=nn 


S filespec 


Parameters: 


count 


M AJ=/77/77 


MIN=/7/7 


s 


The number of trace entries to print, starting with the most recent. If not specified then the entire trace buffer will be 
dumped. 


Specifies that only trace events with major code mm should be displayed. 

See System Trace Facility - Major Code Assignments for a information on the deployment of trace major and minor 
codes in OS/2. 

Warning: The Kernel Debugger may fail to process the MAJ= parameter correctly. Under some circumstances the 
debug kernel may hang. Use this option advisedly! 


Specifies that only trace events with minor code nn should be displayed. 

This option required the specification of a major code using the MAJ= parameter. 

See System Trace Facility - Major Code Assignments for a information on the deployment of trace major and minor 
codes in OS/2. 

Warning: The Kernel Debugger may fail to process the MAJ= parameter correctly. Under some circumstances the 
debug kernel may hang. Use this option advisedly! 


Specifies that the trace buffer should be saved to a file named in f//espec. 

This option is only available to the Dump Formatter. 



The saved trace file may be subsequently formatted using the OS/2 TRACFMT command. 


fi/espec 

The file specification for the saved trace buffer. 

The fi/espec may be fully qualified. The path defaults to the current directory. 

Results & Notes: 

The trace is activated using the OS/2 TRACE command. 

If the trace is not active then the following message is generated: 

Trace not on 


The trace buffer is allocated in a single segment (STDA) whose selector may be located from global symbol ras_stda_addr. The STDA is a 
circular buffer whose entries are recorded in reverse order. The header gives the offsets to the first, last and current entires. The format of 
the trace buffer is described under System Trace Data Area.. 

The major codes being traced are recorded in a bit string located at label ras_mec_table. Each active major code has its corresponding bit 
set. 

The minor codes being traced are recorded in a bit string whose selector is located at label ras_min_table. The minor code table contains 
32 byte entries, each corresponding to a major code. Each bit of each entry corresponds to a minor code within the major. If the bit is set 
then the minor code is traced. 

When tracing by Pid is active then the ptda_rasflag (PTDA +0x39a) is set to Oxff. 

The status of system tracing is recorded in status byte at label ras_systr_flags. The following flags are defined: 


name 


bi t mask 


RF_TRC AVAIL 0x80 
RF_TRCPAUSED 0x40 
RF_TRCPID 0x20 
RF_TRCERRCOUNT 0x10 
RF_TRC SUSP END 0x08 
RF_TRCMINORCD 0x04 


description 

System Trace Available 
Trace paused 
Trace by PID 

Tracing until error count 
Suspend due to error count 
Tracing by Minor Code 


Under the kernel debugger the system trace buffer cannot be saved directly. However by setting the RF_TRCPAUSED bit in 
ras_systr_flags flag byte, the trace may be suspended and saved at a later time by using one of the system trace utilities (TRSPOOL, 
TRACEFMT or TRACEGET) or from a system dump. When setting RF_TRCPAUSED be certain to OR in the flag bit. 

.T command output appears as follows (see note at the end of this section for information on recent changes to the format of trace output): 


MAJ=04 MIN=0089 
MAJ=06 MIN=008c 
00 00 

MAJ=06 MIN=000c 
08 00 

MAJ=04 MIN=0009 
MAJ=04 MIN=0089 


PID=0006 

PID=0000 

PID=0000 

PID=0006 

PID=0006 


CONTEXT=KERNEL : PROTECT 
CONTEXT=KERNEL : PROTECT 

CONTEXT=KERNEL: PROTECT TS=1336 

CONTEXT=KERNEL : PROTECT 
CONTEXT=KERNEL : PROTECT 


Each of the fields is defined as follows: 


MAJ= 

The traced event major code. 

MIN= 

The traced event minor code. 

PID= 

The current Pid when the event occurred. See ,P command for information on displaying active Pids. 


CONTEXT = system .-processor 

The system and processor context under which the event was traced. 
system context may be: 

KERNEL 
API 


processor context may be: 

PROTECT 
REAL 

TS =/i/jss 

The system timestamp where fih is 100th seconds and ss is seconds. 

The timestamp is taken from the Global Information Segment (GISEG+Oxa). It is only recorded in the trace record if 
the time has changed since the previous timed stamped record was recorded. 

Note: TRACEFMT treats this value as a word length fixed number of two decimal places. 

trace c/ata 

Additional trace data. 

A trace event may be accompanied with additional trace data, in which case it is dumped in hexadecimal and ASCII 
format on the following line. 

Related information on the system trace facility may be found in: 

System Trace Facility 
Dynamic Trace Customiser 
OS/2 Command reference - TRACE Command 
OS/2 Command reference - TRACEFMT Command 
OS/2 Command reference - TRACEBUF CONFIG.SYS statement 
New Trace Format 


If the trace record was created internally by a kernel routine. 

If the trace record was created externally by use of the DosDynamicTrace or 
DosSysTrace APIs. 

See Dynamic Trace Customiser for information on creating dynamic trace records 
(via DosDynamicTrace). 

See DosSysTrace (Static Trace Event Recording) for information on creating static 
trace records. 

If the trace record was created when the system was running in protect mode. 

If the trace record was created when the system was running in real mode. 


From OS/2 2.1 1 fix pack 91 and OS/2 3.0 fix pack 8, the system trace has been enhanced to include more useful timestamp information. 
The Kernel Debugger and Dump Formatter were updated in fix packs 16 (OS/2 3.0) and 105 (OS/2 2.1 1) to take account of the new format. 

Warning: 

The use of the .T command after the new trace format was implemented, but before the Kernel Debugger and Dump Formatter were 
updated, caused the Kernel Debugger and Dump Formatter to trap. 


The following is an example of the new format: 


Trace On at 0000,0000,0000,0000,0000,0000,0000 
Trace Off at 0000,0000,0000,0000,0000,0000,0000 

MAJ=03 MIN=0009 PID=0000 CONTEXT=KERNEL : PROTECT 

00 00 00 00 bd 55 f5 ff 60 01 00 00 02 00 01 00 
MAJ=03 MIN=000f PID=0000 CONTEXT=KERNEL : PROTECT 
00 00 cc cc fl 27 00 00 00 10 00 00 06 02 01 00 


c8 3c f2 ab 

MAJ=03 MIN=0008 PID=0017 CONTEXT=KERNEL : PROTECT 

00 00 00 00 93 86 e5 lb 5b 00 00 00 02 22 01 00 
MAJ=03 MIN=0008 PID=0017 CONTEXT=KERNEL : PROTECT 


TS=3611 , 382e 

.... =Uu . ' . . 

TS=3611 , 382e 

. . LLq ’ 

H<r+ 

TS=3611, 252d 

e . [ . . 

TS=3611, 222d 


00 00 00 00 93 86 e5 lb 5b 00 00 00 02 22 01 00 e.[.. 

MAJ=03 MIN=0008 PID=0017 CONTEXT=KERNEL : PROTECT TS=3611,222d 

00 00 00 00 93 86 e5 lb 5b 00 00 00 02 22 01 00 e.[.. 


The formatted trace is headed by a pair of time-stamps that give the time tracing was initiated and terminated. These are of the form: 


YYYY, xxMM, xxDD, xxHH, xxmm, xxss, xxhh 


where: 


YYYY 

is years, 

MM 

is Months 

DD 

is Days, 

HH 

is hours, 

mm 

is minutes, 

ss 

is seconds. 

hh 

is 1/1 00th seconds, 

XX 

ignore. 


The time-stamp of each trace record is now shown as a pair of word values of the form: 

TS=MMHH, hhss 


where 


MM 

is minutes, 

HH 

hours, 

hh 

1/1 00s seconds and 

ss 

seconds. 

Note: 



The byte reversal occurs because the time values are originally byte values which are displayed as words. 


System Trace Facility - User Guide 


The OS/2 Trace facility is an important RAS mechanism within the OS/2 product. It allows specific events within the operating system, in 
system extensions and in applications to be recorded in a circular System Trace buffer. Software developers can create tracepoints that are 
used to monitor the execution of their software modules. A tracepoint is in essence a "window" that can be used to "peek" into a software 
module whenever that module reaches the state that corresponds to the tracepoint. 

The OS/2 Trace facility includes three important utility programs: 

TRACE 

The OS/2 Trace control utility is used to control (that is, enable and disable) the tracing of individual events. 

TRCUST 

The Dynamic Trace Customiser is used to define both dynamic tracepoints for .DLL modules and trace formatting 
files for use by TRACEFMT utility. 

TRACEFMT 

The Trace Formatter is used to format the contents of the sytem trace buffer for viewing. It may also be used for 
saving both formatted and unformatted trace data in a disk file and therefore may be used with the Dump Formatter 


.TS command to format a system trace buffer that has been captured in a system dump. 


The following topics are discussed in this chapter: 
Dynamic versus Static Trace 
Guidelines for Defining Tracepoints 


Dynamic Versus Static Trace 


OS/2 supports two types of tracepoints: 

• Static tracepoints 

• Dynamic tracepoints 

Both types of tracepoints can be used to monitor the execution of a software module. They differ in their style of execution. 

Static tracepoints are, essentially, in-line function calls that are always present. The OS/2 user has the ability (through the use of the OS/2 
TRACE utility) to indicate that a particular static tracepoint is "enabled". Until a static tracepoint is enabled, the actual tracepoint logic logic is 
"branched over" and not executed. Once "enabled" the static tracepoint logic is executed. 

Dynamic tracepoints do not normally reside within the software modules to which they correspond. They are "patched in" when the OS/2 
user uses the TRACE utility to "enable" a dynamic tracepoint. 

This implies that a dynamic tracepoint does not burden a software module with any execution overhead until the tracepoint is "patched in" by 
the TRACE utility. There is a small continual performance overhead associated with a static tracepoint because the tracepoint must always 
check to see whether it is currently enabled. On the other hand, the dynamic tracepoint mechanism is costlier in operation than the staic 
tracepoint operation because its "patching" mechanism is built upon the OS/2 breakpoint mechanism. Also, there are some software 
modules (for example, device drivers) that cannot use dynamic tracepoints. Most of the operating system tracepoints listed in the Trace 
Reference are implemented as dynamic tracepoints. 

All Trace event records include a major trace code and a minor trace code which identify the event which is being recorded. When the user 
uses The TRACE utility to control a specific tracepoint, static tracepoints are identified by a combination of major and minor trace codes. 
Dynamic tracepoints are identified by a combination of software module name and minor trace code. 

The following general categories of events are traced within OS/2: 

1 . External application program interfaces (APIs) 

2. Internal interfaces 

3. Other internal events 


Guidelines for Defining Tracepoints 


The following subsections provide guidelines for programmers who are adding tracepoints to their software modules. 

• Assignment of Major and Minor Codes 

• Trace Event Call Location 

• Trace Event Parameters 


Assignment of Major and Minor Codes 


Component and subsystem developers who assign their own major and minor trace codes should follow the following conventions: 

1 . Minor codes should be assigned in the range 0001 H-FFFFH. Minor code OOOOFI is reserved and should not be used. 

2. An interface/event which requires both a pre-invocation trace and post-invocation trace of the event should share the same 
major code. The minor code assigned for the pre-invocation trace should be in the range 0001 FH-7FFFFH. The minor code for the 
post-invocation trace of the event should be in the range 8001 FH-FFFFFH and should be assigned by turning on the high order bit 
of the pre-invocation minor code. For example: 



Major 

Minor 

Event Name 

Code 

Code 

KbdCharln Pre-Invocation 

0011H 

0001H 

KbdCharln Post-Invocation 

0011H 

8001H 


3. The T race Definition Files for dynamic tracepoints should use the following TYPE definitions when defining tracepoints. Other 
TYPEs or GROUPS may be defined as desired but these should be used as a minimum. 

• TYPE=(PRE,API) - pre-invocation of external interface 

• TYPE=(POST,API) - post-invocation of external interface 

• TYPE=(PRE,INT) - pre-invocation of internal interface 

• TYPE=(POST,INT) - post-invocation of internal interface 


Trace Event Call Location 


Trace events, each with a unique minor code, should be placed at the following locations within a component or subsystem performing a 
service as a result of an external API call: 

1 . Pre-Invocation: At the beginning of any external interface before performing any actions or changing any data. This is considered 
pre-invocation of a service. 

2. Post-Invocation: Before returning from performing any service through an external interface. This is considered post-invocation 
of a service, and is significant since: 

a. Information may be returned to the caller which is of interest for problem determination 

b. It causes a "service completion" event to be added to the trace buffer which may be paired with the pre-invocation 
trace event 

3. Other: Events within a component should be considered as points of interest for tracing when they may be used for problem 
determination within the component or subsystem. These include: 

a. Significant changes in the state of the machine. 

b. Significant changes in the state of the system. System state changes are usually those which affect system data 
structures. These structures are those which are referenced by more than one component or which represent 
significant system resources. 

c. Allocation or deallocation of a resource managed by a component performing a service 
This detail is determined and assigned by each component or subsystem owner. 


Trace Event Parameters 


In general, interface parameters should be passed with the trace call. Interfaces to performance sensitive code may require that only a few 
of the most important parameters, if any, be passed with the trace call. 



1 . 


Pre-Invocation: 


2 . 


3. 


a. Call by value parameters set by the caller should be passed with the trace call 

b. Call by reference parameters to simple data (BYTE, WORD, DWORD) set by the caller should be passed and copied 
with the trace call 

c. Call by reference parameters to character string data set by the caller should be passed and copied with the trace 
call 

d. Call by reference parameters to complex data (structures other than character strings) should be handled by passing 
a subset of the most important data in the structure if the entire structure can not/need not be recorded 

Post-Invocation: 

a. A return code should always be returned from a post-invocation trace call. If the return code is not zero, then any 
additional parameters that are traced may not be valid. 

b. Call by value parameters returned by the service should be passed with the trace call 

c. Call by reference parameters to simple data (BYTE, WORD, DWORD) returned by the service should be passed and 
copied with the trace call 

d. Call by reference parameters to character string data returned by the service should be passed and copied with the 
trace call 

e. Call by reference parameters to complex data (structures other than character strings) should be handled by passing 
a subset of the most important data in the structure if the entire structure can not/need not be recorded 

Other: 

a. Significant data relating to the event 

b. Address of a control block; Id or address of a resource 


Dynamic Trace Customiser (TRCUST) - Reference 


OS/2 provides a mechanism by which developers may dynamically apply tracepoints in their module at run time. This method eliminates all 
overhead of tracing when tracing is disabled. It also allows the developer to add tracepoints without modifying source code. This reduces the 
possibility that adding a tracepoint will induce errors into one's code. OS/2 needs a binary file, for each module being dynamically traced, 
which defines the tracepoints for the module. 

Note: 

Information given here refers to the following versions of the system tracing tools except where explicitly noted: 

TRCUST 3.06 or higher 
TRACE 2.4 or higher 
TRACEFMT 2.4 or higher 
TRSPOOL 4.2 or higher 

TRACEGET with OS/2 Warp V3.0 FP35, OS/2 Warp V4.0 FP10 or OS/2 Warp E-Server or higher 

DTRACE 4.3 or higher 

TRSPOOL 4.1 or higher 

TFFLST 1.1 or higher 

TDFLST 1 .7 or higher 


DEBDEL 1 .0 or higher 


MAKETSF 1 .2 or higher 
MAPTSF 1.7 or higher 


Note: 


There are certain restrictions on the use of dynamic trace which should be noted. These are: 

1 . Dynamic tracepoints may be applies to any non-VDM protect-mode module. Flowever, in order to apply tracepoint to non-DLL 
modules a version of the trace command shipped with OS/2 Warp V3.0 fix pack 32, OS/2 Warp V4.0 fix pack 1 or OS/2 Warp 
E-Server is required. 

2. Dynamic tracepoints may be applied to routines that run at interrupt time only after fix pack 35 for OS/2 Warp V3.0, fix pack 1 of 
OS/2 Warp V4.0 or OS/2 Warp E-Server. 

3. A dynamic tracepoint cannot be applied to a module running under the Kernel Debugger that has a Breakpoint in place at the 
same location as the trace point. 


The Trace Customizer (TRCUST) converts tracepoint definitions from a trace source file (TSF) into dynamic tracepoints for the trace 
definition file (TDF), and into formatting rules in the trace format file (TFF). 

TRCUST provides a high-level access to Dynamic Trace, particularly suitable for use by developers. The associated DTRACE tool provides 
a very low-level interface to Dynamic Trace, which is suitable for attacking complex problems. Full details of the Dynmaic Trace facility may 
be found in The Dynamic Trace Facility And The DTRACE Tool. 


Definitions 

.TSF An ASCII file created by a developer which defines all dynamic tracepoints for a given module. TRCUST allows just one major 

code to be associated with a TSF. 


.TDF A binary file, created by TRCUST, using the .TSF file as input. This file defines all tracepoints in the module in a manner 

acceptable to OS/2. This is used by the Trace Utility, TRACE. 

.TFF A binary file also created by TRCUST using the .TSF file. This file defines how all tracepoints will be formatted. This is used by 

the Trace Formatter, TRACEFMT. 


major code A byte value used to identify the module being traced. TRCUST allows at most only one major code per TSF. 
minor code A word value used to uniquely identify each tracepoint. 

GROUP A value used to identify this tracepoint with tracepoints of the same category. Examples are MEM for memory management 
and PM for Presentation Manager. For an example of uses of groups, see the online help for the TRACE command. 

TYPE A value used to associate a subset of dynamic trace events within a module. Examples are PRE for pre-invocation, POST for 
post-invocation and API for API calls within a module. For an explanation and examples of uses of types, see the online help 
for the trace command. 


Overview 


File Naming and Location 
Invoking the Trace Customizer 


File Naming and Location 


The TDF file name is the same as the module to be traced, but has a file extension of "TDF''. The TFF has a name of the form 


"TRCOOxx.TFF" where xx is the major code, for example, a module with major code 0xC2 will generate a TFF with the name 
''TRC00C2.TFF". This naming convention is used to allow TRACEFMT to dynamically generate the TFF name given only the major code. 

TRCUST can be invoked to process a TSF or to combine several TFF files into a single TFF. For processing a TSF, TRCUST is given the 
name of a TSF, and optionally: 

• the desired name of the resulting TDF 

• the MAP file name 

• the error message level 

TRCUST will store the TSF tracepoint formatting specifications in the TFF file and if the tracepoint specified was not for a static tracepoint, 
the TSF tracepoint definition will be converted into the format required by the Trace Utility and stored in the TDF file. On errors, TRCUST will 
display appropriate messages, skip any tracepoint with errors in its definition, and continue processing the next tracepoint definition. 

For combining TFF files that use the same major code, TRCUST is given the name of the file containing the TFF filenames to combine and 
the name of the file to contain the combined trace format statements. 

TRCUST will issue an error message and abort processing under the following conditions: 

• the TSF cannot be opened 

■ when combining TFF files, if any TFF input files cannot be read or if all TFF input files do not use the same major code 

• when defining dynamic tracepoints, if the executable module to contain the tracepoints cannot be read 

■ the TDF, or TFF files cannot be written to 

■ an error in the header definition in the TSF 

• a missing ending quote in the TSF 

Note: TRCUST always returns 0 so that, when invoking it from a makefile, processing of the rest of the makefile can continue if TRCUST 
aborts. 

Combine TFF files when several modules that use dynamic tracing use the same major code. The Trace Formatter can only use one TFF 
file per major code to get formatting information from. After the TSF file for each module is run through TRCUST to produce a TDF and TFF 
file, TRCUST can be invoked again, this time using the combine TFF files option and a file that only contains the paths to all the TFF files 
using the same major code. TRCUST will read all the TFF files. If all TFF files don't use the same major code, TRCUST will issue an error 
message and abort. TRCUST will read each trace format record from the TFF files and write them (in ascending order according to minor 
code) to the destination TFF file given. 


Invoking the Trace Customizer 


The Trace Customizer is a protect mode only program and must therefore be run under OS/2. 
TRCUST operates in two possible modes: 

It may be invoked to combine TFF files, 
or to process a TSF. 


Invoking TRCUST to Combine TFF files. 


The syntax for combining TFF files is as follows: 


[d: ] [path] TRCUST [d: ] [path] tf fsource /C=[d: ] [path] tffdest [/Wn] 


where: 


TRCUST 


is the name of the Trace Customizer program. A drive and path may optionally be specified to explicitly define the location of the 
Trace Customizer program, otherwise the program is searched for in the current directory, followed by looking along the path 
defined by the PATH environment variable. 

[d:][path]tffsource 

is the name of a file containing fully qualified (including extensions) pathnames of TFF files to combine. Each TFF file must use the 
same major code and each filename in the tffsource file is separated by white space. This will combine all TFF files for the same 
major code into a single TFF file. If duplicate minor code format definitions are found, the first format definition for the minor code 
remains valid, the duplicates are discarded and a warning message is issued. If no path is provided the tffsource file is searched 
for in the current directory, followed by using the current value of DPATH. 

[d:][path]tffdest 

is the name of the trace format destination file to store the combined trace format definitions. 

/Wn (optional) 

is the level of error messages to be displayed, where n can be 0, 1 , or 2. The possible message levels are shown below along with 
the messages that each displays: 


0 fatal and severe messages 

1 fatal, severe, and error messages 

2 all (fatal, severe, error, and warning) messages 

A message level of 2 is the default. 

An example of a tffsource file for using the combine TFF files option of TRCUST is: 


\TFF\PROGl \TRC00C2 . TFF \TFF\PROG2 \TRC0 0C2 . TFF 
\TFF\PROG3\TRC00C2 . TFF \TFF\PROG4\TRC00C2 . TFF 


To invoke TRCUST to combine TFF files using the above file as input (assume filename is \TFF\PROG\TFFOOC2) and output the combined 
format statements into file \TFF\PROG\TR\TRCOOC2.TFF is: 


TRCUST \TFF\PROG\TFF00C2 /C=\TFF\PROG\TRC00C2 . TFF 


Invoking TRCUST to Process a TSF file. 


The syntax for processing a TSF file is as follows: 


[d: ] [path] TRCUST [d: ] [path] tsf [ [d: ] [path] tdf ] [/M=mapfile] [/Wn] [/D] 

[ /L=loadmod] [/NODE] [/NOLN] [/RMn] [/RSnnn] [/I] [/P] 

[/PREINV] [/RAS] 


where: 

TRCUST 


is the name of the Trace Customizer program. A drive and path may optionally be specified to explicitly define the location of the 
Trace Customizer program, otherwise the program is searched for in the current directory, followed by looking along the path 
defined by the PATH environment variable. 



[d:][path]tsf 


is the name of the trace source file. If no file extension is provided then an extension of TSF is assumed. If no path is provided the 
trace source file is searched for in the current directory, followed by using the current value of DPATH. 

[d:][path]tdf (optional) 

is the name of the trace definition file to store the dynamic tracepoint definitions, if not specified, the TSF filename is used with an 
extension of TDF. If no file extension is provided then an extension of TDF is assumed. 

/D (optional) 

allows duplicate minor codes to be used. This is useful where there is no need to distinguish different tracepoints which create 
records of the same format. For exmaple, multiple return points from a subroutine. 

/I (optional) 

allows case-insensitive references to MAP file symbols to be used in TSF TRACE statements. 

/L=loadmod (optional) 

specifies the load module path and file name to be read by TRCUST. If not specified TRCUST uses the specification in the 
MODNAME statement of the TSF. If no path information is given in the MODNAME statement TRCUST assumes uses current 
directory and DPATFI to locate the load module. 

MODNAME is required by the TRACE command to allow it to load and determine the traced module's handle. / L is useful in cases 
where the load module is built using a name that differs from the installed name or where path information is required on the 
MODNAME statement for the TRACE command which differs from the directory used when the TDF is built. See also the IP switch 
for TRCUST. 

/M=mapfile (optional) 

defines mapf//e as the MAP file for this module. The name may be qualified by a drive/directory, otherwise it will be searched for in 
the current directory followed by the path specified by the DPATFI environment variable. If specified as an option, the MAP file must 
exist and the filename extension must be MAP or TRCUST will abort processing. The mapfile will only be used if a symbol is not 
found in the symbolic debug information stored in the executable module. 

/NODE (optional) 

forces TRCUST to ignore debugging information even if present. This is provided for cases where 

a) the user wishes to use MAP symbols in preference to debugging information. 

b) the level of debugging information in not supported by TRCUST and errors are produces if it is used. 

Note: 

Debugging information is not a public standard. Some compilers may appear to emulate supported styles of symbolic 
debugging information while not actually doing so. 

TRCUST supports the following debugging information styles: 

IBM C and C6 CodeView NBOO and NB02 styles. 

IBM CSet/2 FILL version NB03 style. 

IBM CSet/2++ and IBM VisualAge VI to V3 FILL version NB04 styles. 

IBM ALP assembler Debugging Informaion (FILL version NB04). 

Any compiler or assembler that conforms to the FILL NBOO - NB04 debugging information styles. 


/NOLN (optional) 

forces TRCUST to ignore module line number records but honor any other debugging informantion present. This option is provided 
for cases where line number information does not conform to supported specifications and causes unpredictable results. Currenty 
TRCUST is limited to supporting no more then 64K of line number information. For exceedingly large source files this limit could be 
exceeded. 

Note: 


/NODE implies /NOLN 



/p 


(optional) 


allows the path information specified with MODNAME to be retained in the TDF. The default is to strip path information from the 
module name. With no path information the TRACE command will rely on PATH, LIBPATH or the command line specification to the 
TRACE command to locate the traced module. 

/PREINV (optional) 

allows a tracepoint to be placed after the MOV (E)BP,(E)SP instruction on entry to a routine where local variable references will be 
valid. This is intended for use where local data refences are made from the TSF, but the tracepoint is definied by reference to the 
routine's MAP file symbol name. In general it is better to use number references since /PREINV relies on the style of code 
generated by the compiler used. See name specification of the TP statement for information on difference between MAP file 
symbol references and symbolic debugging information references. 

Note: PREINV does not search for the equivalent ENTER instruction. 

/RAS (optional) 

allows major code 0 trace definitions to be generated. 

Note: Major code 0 is reserved by the system for system trace internal processing. The /RAS option should not be used except for 
the express purpose for which it is intended. 

/RMn (optional) 

specifies the mode by which the RETEP keyword of the TSF TRACE statement will operate. Eight modes of RETEP operation are 
defined as follows: 

0 Disallow RETEP tracepoints. 

1 determine the RETEP tracepoint directly from CodeView symbol records only. 

2 use mode 1 then search for a LEAVE+RET or POP EBP instruction sequences near the end of 

the traced routine. 

This is the default RETEP processing mode. 

3 use mode 2 then search for an isolated LEAVE instruction near the end of the traced routine. 

4 use mode 2 then search for an isolated RET instruction near the end of the traced routine. 

5 use modes 2 and 3 combined. 

Note: Version 2.0 of TRCUST only uses this search mode but is less reliable than mode 2 
alone. 

Warning: 

Use of RETEP can run the risk of having a tracepoint not generated on an insruction boundary. 
The result of which would be unpredictable and probably cause the traced program to trap. This 
risk is grealty reduced by allowing the RETEP mode to default to /RM2. If the user chooses to 
widen the RETEP criteria then appropriate validation of the resulting tracepoints must be made. 

6 use mode 4 then search for an isolated JMP instruction near the end of the traced routine. 

7 use mode 6 but search for an isolated LEAVE instruction near the end of the traced routine, 

before searching for JMP. 


Note: 


Successful location of return tracepoints can only be guaranteed with unoptimised IBM C and C6 CodeView information 
where the return point is given explicitely. More advanced compilers do not necessarily generate a single return point. They 
may even generate common epilog code for multiple routines hence the following limitations should be noted: 

Only the last return from a routine is located. 

Only mode 1 can accurately determine the last return, however this is only available to code-view version 0 modules. 

Searching for instruction sequences may result in a tracepoint erroneously being placed within an instruction. 

It may not be possible to use RETEP to define the return tracepoint for modules that use private (particularly optimised) 
calling conventions. 


The default mode is 2. This reasonably safe. Higher modes are less safe. 

Use mode 5 for compatible behaviour with earlier versions of TRCUST. However, note that earlier versions of TRCUST 
erroneously permit certain tracepoints which are not permitted using mode 5. 

To avoid possible errors, JMP instructions with opcode Oxff are not selected in modes 6 and 7. 

For an alternative method of specifying return tracepoints refer to the TP keyword of the TSF TRACE statement and how to use 
source line number references. 

/RP (optional) 

modifies RETEP processing to allow Pascal Return instructions (RET n) to be included in the search criteria for return tracepoint 
location. Use this with 16-bit code where you know that pascal returns are generated. 

/RSnnn (optional) 

specifies how far RETEP will search from the end of a routine to find the return instruction sequence. This defaults to 18 bytes 
however RETEP will not search before the start of the routine. 

/Wn (optional) 

is the level of error messages to be displayed, where n can be 0, 1 , or 2. The possible message levels are shown below along with 
the messages that each displays: 


0 fatal and severe messages 

1 fatal, severe, and error messages 

2 all (fatal, severe, error, and warning) messages 

A message level of 2 is the default. 


Symbolic Debug Support 


Source Level Symbolic Support 
MAP File Support 
Building a Module 


Source Level Symbolic Support 


If the module has been compiled and linked with the debug options: 

1 . /Ti on the C/Set2 or ViualAge language compiler for C source files 

2. ICO or DE on the link command 

then the Trace Customizer can look into the module to extract symbolic or debugging information. In this case addresses may be specified 
symbolically. Having generated trace definitions there is no further use for symbolic information. Thus debugging information may be safely 
removed by using the DEBDEL utility. 

Notes: 


Not all source files must be C language when using symbolic support. Assembler and other languages may be used as long as 
they generate Micorsoft 16-bit CodeView or IBM HLL version 3 and 4 symbolic debugging information. 

Tracepoints may be defined by filename and line number references or by symbolic names. 

Tracepoints may reference local or global variables. 


If symbolic names are referenced then the following points should be observed: 

Some compilers will modify external or public symbolic names used in the program. If this is done then the modified form must 
be used when referenced in the TSF. The modification rules are compiler dependent however three common cases are cited 
below. 

Names must be used case sensitively. 

With IBM C/2 and Microsoft C 6.0, external routine names have an underscore prefix to their names when declared using the 
cdecl convention and are capitalised when declared using the Pascal convention. Symbols for routine names treated this way 
refer to the first instruction of the routine. When debugging information is present, the unaltered name is also usable and refers 
to the first instruction following the prologue code, that is creation of the entry stack frame. For example both _main and main 
may be used. The former refers to the true entry point and the latter after the prologue code. The advantage of using the latter 
form (main) is that symbolic references may be made to the parameters passed; in this example argc argv and envp. 

C runtime library routine names are usually prefixed with an underscore. 

With IBM CSET/2 and IBM VisualAge C symbolic names defined by the user are not prefixed with an underscore. Flowever C 
runtime library routine names are usually prefixed with an underscore. Symbols for routine names defined by the user refer to 
the initial instruction of the routine when compiled without symbolic debugging information and to the first instruction following the 
prologue code when debugging information is present. In the latter case, symbolic references may be made to parameters 
passed to the routine. In the former case this is not possible except by making EBP relative references and using the /PREINV 
command line switch - see MAP File Support for more information in using symbolic references without the presence of symbolic 
debugging information. 

With IBM VisualAge C++ routine names are subject to name mangt/ng where class-hierarchical information is encoded into the 
externalised name. The mangled form of the name must be used in TSF references. 

In all cases symbolic name lengths are restricted to a maximum length of 255 characters. 


MAP File Support 


The Trace Customizer can also use the symbolic information in the MAP file produced by the linker. All public symbols will be listed with 
their offsets in the module being traced. This is not as complete a support as offered by the debug compile option for C language source 
files, but it does allow entry points, public labels and global data to be referenced symbolically within the TSF. Note that the use of a MAP 
file is NOT language dependent. 

Notes: 


When using a MAP file, if the symbolic name is a C language entry point, it will be case sensitive (unless the / 1 command line 
switch has been specified). 

Some compilers will modify external or public symbolic names used in the program when they appear in the MAP file. If this is done 
then the modified form must be used when referenced in the TSF. The modification rules are compiler dependent however three 
common cases follow: 

With IBM C/2 and Microsoft C 6.0, external routine names have an underscore prefix to their names when declared using the cdecl 
convention and are capitalised when declared using the Pascal convention. Symbols for routine names treated this way refer to the 
first instruction of the routine. 

With IBM CSET/2 and IBM VisualAge C symbolic names defined by the user are not prefixed with an underscore. MAP file 
symbols for routine names defined by the user refer to the initial instruction of the routine, regardless of the presence of debugging 
information, unless the /PREINV command line switch is specified. When /PREINV is used TRCUST will search for the first 
instruction following the prologue code, that is, after the entry stack frame has been created. 

With IBM VisualAge C++ routine names are subject to name mangt/ng where class-hierarchical information is encoded into the 
externalised name. The mangled form of the name must be used in TSF references. 

In all cases symbolic name lengths are restricted to a maximum length of 255 characters. 

C runtime library routine names are usually prefixed with an underscore. 


Building a Module 


To trace only public procedures, you only need your MAP file that was generated by linking your module. 

To trace local variables in C language routines, compile the C programs with the debug option and assemble the ASM routines with public 
symbols. Link all the OBJs together with the debug option (/CO) and run TRCUST on the executable module. You can now strip the debug 
information from the executable file by either relinking the OBJs without the debug option or by using the DEBDEL tool to delete the debug 
information from the executable module file. 


TDF and TFF File Usage 

The TDF, and TFF files produced by TRCUST are used in the following way: 

. TSF 
V 

TRCUST Util 

V V 

. TDF . TFF 

V 

TRACE Util 

V 

tracepoints set 

V 

tracepoint hit 

V 

OS/2 kernel 

V 


V V 

trace buffer > TRACEFMT Util 

V 

formatted 
trace records 


How TRCUST fits into the system 


To trace a module do the following: 


1 . Define the tracepoints and data to be traced in the TSF. 

2. Invoke the Trace Customizer using the TSF as input. 

This produces two files, a TDF and a TFF. 

3. Put the TDF file in the same directory the module to trace resides, put the TFF file in a directory accessible by TRACEFMT. It is 
suggested that all TFF files reside in the same subdirectory, an example directory would be \OS2\SYSTEM\TRACE, which is the 
default directory searched by TRACEFMT. Flowever a private directory may be specified by using the /t= command line option or 
the Set TFF Path memu pulldown of TRACEFMT. 

4. Invoke the OS/2 TRACE command using eith the name of the TDF or the module name instead of the major code value, which is 
done only with static trace. 

Note: 

The TRACE command will assume that a simple unqualified name refers to a TDF and will search, 
\OS2\SYSTEM\TRACE, the current directory and DPATFI for the TDF. If it is still unable to locate the TDF then the name 
is assumed to be a DLL and LIBPATFI is searched for the TDF. 

If a qualified name is used then TRACE will assume this to be the traced module and will attempt to locate the TDF in the 
module's directory, by searching the current directory then LIBPATFI for DLLs or PATFI for non-DLLs. 

This activates the tracepoints, causing the trace data to be saved in the system trace buffer. 

5. The OS/2 TRACE command can be used to turn tracing off at any time. 

6. The system trace buffer may be captured for formatting at a later time using either of the TRACEGET or TRSPOOL utilities. Or 
alternatively TRACEFMT may be use to capture and format the trace buffer immediately. 

TRACEFMT uses the major code to determine the TFF file and uses the formatting string corresponding to the minor 
code value to format the data in the RAS trace buffer and output it to the screen, file or printer. 

Tracepoints may selectively be turnned on or off at any time, by reference to individual minor codes or a group or group+type combination. 

Active tracepoints may be queried using either: 

TRACE /Q 


or 


DTRACE QUERY /X /A 

The latter example gives detailed information on tracepoint status and location within each module. 


Symbols and Abbreviations Used in the Document 


[...] 


[-1-1 

-] 

{■ 4-1 

-} 

item... 


statement,.... 

nnn 


nnnnn 



denotes optional items. 

denotes a list of optional items, zero or more of which may be chosen. 

denotes a list of items of which ONE must be chosen. 

denotes that item is repeated zero or more times. 

denotes this example is incomplete. 

is a number in the range 0-255 inclusive. 

is a number in the range 0-65535 inclusive. 


All numbers and values can be entered in decimal form or in C hexadecimal form (Ox....). 



Trace Source File 


This section details the statements that can appear within a trace source file. 
Examples are given of TRACE statements. 


TSF Format 


The layout of a trace source file is: 


Header 

Type List Definition 
(optional) 

Group List Definition 
(optional) 


Tracepoint Definitions 


Layout of a trace source file 


Note: 


Comments may be freely inserted anywhere in the trace source file. A comment is identified by a ; or by using C syntax 
comments anywhere in the file. A C comment has start and end delimiters, namely /* and 7. C type comments may span lines, 
and may be nested. 

Below are sample TSF files. See Sample Trace Source Files for more examples. 


; Sample trace source file depicting dynamic tracing for OS calls compiled 
; with 32-bit addressing 


MODNAME = doscalll.dll 

MAJOR = 100 /* this is decimal, would be 0x64 if specified hex */ 

MAXDATALENGTH = 200 /* max bytes logged per tracepoint is 200 */ 


TYPELIST NAME=PRE, ID=1, 

NAME=SYS , ID=0x40 , 

NAME=API, ID=128, /* decimal, if hex would be 0x80 */ 

NAME=POST, ID=0x8000 


GROUPLIST NAME=MEM, ID=2, 
NAME=FS , ID=0x5 , 
NAME=MOU, ID=13 , 
NAME=DOS , ID=0x2B 


/* would be 43 if decimal */ 


TRACE MINOR=0x0001, 

TP=.DosOpen, /* Pre-invocation tracing on DosOpen */ 

TYPE= (PRE, API) , 

GROUP=DOS , 

DESC=" (OS) DosOpen Pre-Invocation", 

FMT="Major = %X Minor = %Y" , 


FMT=" EAX = %D" , 

FMT=" FileName = %P%S", 

REGS= (EAX) , 

ASCIIZ32= ( . FileName, DIRECT, 128) 


TRACE 


MINOR=0x7001, /* Puts tracept on code at line 28 

/* of file dosopenl.c. Debug 
TP=@dosopenl . c, 28, /* info is needed to use this. 

TYPE= (API) , 

GROUP=DOS , 

DESC=" (OS) CheckParm After Createhandle" , 


FMT=" New handle = %P%W" , 

MEM32= ( . handle, DIRECT, 2) 


*/ 

*/ 

*/ 


TRACE 


MINOR=0x8001 , /* 

TP= .DosOpenC, RETEP, /* 
TYPE= (API , POST) , /* 

GROUP=DOS , /* 

DESC=" (OS) DosOpenC 
FMT=" 

FMT=" 


Post-invocation tracing at 

procedure DosOpenC return point . 
Debug info is needed to use 
this type of tracepoint. 


Post-Invocation" , 
Return Code = %P%W" , 
Variable Rec= %P%U" , 


MEM32= ( . ret code, DIRECT, 2 ) , 

/* The following will log a variable length structure. The 
/* second field in the structure is the length of the 

/* record (position var_struct+2) . This LEN parameter must 

/* immediately precede the memory specification defining 
/* the variable length record. 

LEN= (var_struct+2, DIRECT) , 

MEM32= ( . var_struct , DIRECT, LEN) 


*/ 

*/ 

*/ 

*/ 


*/ 

*/ 

*/ 

*/ 

*/ 


TSF Header 


This defines common information for the module to be traced. The format is: 


[ MODNAME = [d:] [path] Name ] 
[ MAJOR = nnnnn ] 

[ MAXDATALENGTH = nnnn ] 

[ TDFID = nn ] 


where: 

MODNAME=[d:][path]Name where: 
d: 

is the drive containing the module. If not specified the current drive is used. 

path 

is the path to the module. If not specified the current path is used. 

Name 


is the name of the executable module to be traced. If an extension is not specified and the Name is not 
OS2KRNL, an extension of DLL is appended to Name. 

Path information may be specified but is normally discarded before storing module name information in the 
TDF unless the IP switch is specified on the command line. TRCUST uses the path information to locate and 
read the load module while processing the TSF. If either the name or path differs from the module's installed 
name or path then the / L= command line option may be use to direct TRCUST on while module file name to 
read. 

Note: MODNAME is required only for dynamic tracepoint definitions with TRCUST version 2.22 and later. 


MAJOR=nnnnn (optional) 


defines the major trace ID allocated to this module. It may be in the range 1 to 65535 decimal or specified 0x1 to Oxffff hex. The 
default value is 1 . The major trace ID is part of the data placed in the trace buffer when a tracepoint is executed. 

Only one major code is permitted per module. 

Notes: 


Prior to fix pack 35 for OS/2 Warp V3.0 and for OS/2 Warp V4.0 only major codes 0x1 - Oxff may be used. After fix pack 
35 for OS/2 Warp V3.0 the major code range of 0x1 - Oxffff permissible. TRCUST version 2.2 or later is required if the 
extended range of major codes is to be used. 

Also note that the default major code (1 ) is reserved by OS2 for dekko tracepoints. Ranges available to the user are: 
245-255 and 0x8000-0xffff. 

Major code 0 is permissible but only with the /RAS switch specified on the command line. However this is reserved for 
specific use by system use and should not noramlly be used. 

MAXDATALENGTH=nnnn (optional) 

defines the maximum amount of data that a single tracepoint call will insert into the trace buffer. 

The length may be in the range 20 to 4099 decimal or specified 0x1 4 to 0x1 003 hex. The default value is 51 2. 

Note: 


Prior to fix pack 35 for OS/2 Warp V3.0 and fix pack 1 0 for OS/2 Warp V4.0 MAXDATALENTH defaults to 1 28 and may 
only specify a value in the range of 20 to 512. 

TDFID=nn (optional) 

defines an identifer in the range 0 to 65565 for use with the GETVARS and QUERY functions of the DTRACE command. The 
default TDFID is 0 and is normally allowed to default. 


Typelist Definition 


This defines the optional typelist event IDs. For more description and examples of event types see the online help for the trace command. 

The intent of type definitions is to assign one or more categories to a tracepoint so that they may be selected as a subset of one or more 
groups by the TRACE command. For example, tracepoints at routine entry points might be assigned a type of PRE, while those defined at 
return points might be assigned a type of POST. Each tracepoint may be associated with 0 or more types. 

The format is: 


TYPELIST NAME=TypeName, ID=TypeValue , 

[NAME=TypeName, ID=TypeValue, ] . . . 


where: 

NAME=Typename 

defines a 1-8 byte character string used to reference the TypeValue in the tracepoint definitions. All TypeNames and GroupNames 
within a TSF must be unique. 

ID=TypeValue 

defines a bit value of the form 2**y where y in range 0 to 1 5, permitting a maximum of 1 6 types to be defined in a single TSF. This 
can be decimal or specified Oxnnnn for hex. 

An example TYPELIST definition follows: 

TYPELIST NAME=PRE, ID=1, 

NAME=SYS, ID=0x4 0 , 

NAME=API, ID=12 8 , 

NAME=POST, ID=0x8000, 


Grouplist Definition 


This defines the optional grouplist IDs. For more description and examples of groups see the online help for the trace command. 

The intent of group definitions is to assign subsets of tracepoints to a meaningful category so that they may be selected by group name 
using the TRACE command. For example, tracepoints associated with file system APIs might be assigned to the FS group. Each tracepoint 
may be associated with at most one group. Note the difference between group and type association in this aspect. 

The format is: 


GROUPLIST NAME=GroupName, ID=GroupValue, 

[NAME=GroupName, ID=GroupValue, ] . . . 


where: 

NAME=GroupName 

defines a 1-8 byte character string used to reference the GroupValue in the tracepoint definitions. There are a maximum of 48 
GroupNames allowed in a TSF file. All TypeNames and GroupNames within a TSF must be unique. 

ID=GroupValue 

defines a word value in the range 1 to 65535 decimal or 0x1 to OxFFFF hex. 

An example GROUPLIST definition follows: 

GROUPLIST NAME=MEM, ID=2, 

NAME=FS, ID=0x5 , 

NAME=MOU, ID=13 , 


Tracepoint Definitions 


The tracepoint address and the data to be traced are specified by the TRACE statement. There are a maximum of 65535 tracepoints 
permitted in a trace source file. 

The format of the TRACE statement is: 


TRACE [MINOR=minorcode, ] 

TP= { 0 STATIC, | 0 filename, linenum, | . name [ { + | — }offs] [, RETEP [=retopt [ fret opt ...]]]}, 
[OPCODE=Oxnn, ] 

[ TYPE= (typename [ , typename ...]),] 

[GROUP=groupnam, ] 

[DESC="Tracepoiiit description " , ] 

[FMT="Formatting string", ] . . . 

[LEN= (length_spec, flag) , ] 

[ DATA_STMT , ] . . . 


The TRACE keyword delimits a tracepoint definition statement. The definition is considered complete when the next TRACE keyword is 
encountered or the end of file is reached. There is one TRACE statement for each tracepoint. 

LEN is used to log variable length records. A DATA_STMT must immediately follow the LEN statement. LEN will give the location of a one 
word field containing the number of bytes to log for the following DATA_STMT . 



MINOR Keyword 


The MINOR parameter is an optional keyword parameter. If it is specified in the first tracepoint definition, it must be specified in every 
tracepoint definition. If it is not specified in the first tracepoint definition, it cannot be specified in any of the subsequent tracepoint definitions. 
It should be coded as: 


MINOR=nnnnn, 


where: 

nnnnn 

is a decimal number from 1 to 65535 or a hex number from 0x1 to OxFFFF. This represents the minor code for the tracepoint, 
which should normally be unique within the major code specified for this module. When duplicates are encountered, the original 
trace definition is saved and duplicates are discarded with an error message. 

Duplicate minor codes within major code are permitted when the /D command line switch is specified. Flowever there are 
precautions to note: 

Any formatting information specified in trace definitions with duplicate minor codes is discarded. Only the original is 
retained in the generated TFF. 

Use of duplicate minor codes should be limited tracepoints where a common formatting template may be used. For 
example, multiple exit points from a routine. 

If minor codes are not specified at all in the TSF then TRCUST will generate them sequentially for each trace definition 
encountered starting with 1 . Flowever, if any definition has an explicit minor code specified then all definitions must have explicit 
minor codes specified. 


TP Keyword 


The TP parameter is a required keyword parameter. If TP is specified more than once for a single tracepoint definition, the tracepoint is 
discarded. TP has three mutually exclusive definitions which can be coded as: 


TP=@STATIC, 


where: 

STATIC 


defines this tracepoint entry to be used only for creating a trace format statement for the TFF file. No tracepoint definition is created 
for the TDF, and the only other TRACE parameters that will be used are DESC, MINOR and FMT. This is used to create trace 
formatting information for static tracepoints (or dynamic tracepoints generated directly by the DTRACE command). If the TSF 
contains only @STATIC directives, no TDF files are created and MODNAME is then not required. 


TP=0filename, linenum, 


where: 

filename 


is an ASCII string specifying the name (including extension) of a source filename used in creating the module. The source filename 
is stored in the debug information contained in the executable module, so debug information must exist to use this parameter. The 


filename is not case sensitive. 

Note: 


path information may be specfied with filename when also specified at compilation time. 


linenum 


is a decimal number specifying the line number in the given source file name to place the tracepoint. 

Note: Debug information must exist to use this option. The statement at the given source linenum may have been rearranged during 
compiler optimization, so the developer must use this with caution. If the linenum is not found in the debug information, the tracepoint is 
applied at the next linenum defined in the debug information and a warning message is issued to the user. 

An example to apply a tracepoint to line 35 of file stubfile.c is: 

TRACE MINOR=0x700A, /* puts tracepoint on code at line */ 

TP=@stubfile . c, 35, /* 35 of source file stubfile.c */ 


Use of line number refernece affords great flexibility is tracepoint location, however the user will need to modify the TSF file every time 
referenced source files are updated. To facilitate this the MAKETSF utility may be used to generate line number references automaticaly 
from TSF statements embeeded as comments in C or Assembler source. 


TP= . name [ {+ I -}of f s] [, RETEP [=retopt [fret opt ...]]], 


where: 

name 

is a public label or an entry point name of a procedure to be traced. The preceding name is required. Name must be found in 
the debug information in the module or name must be a public symbol as found in the MAP file. If debug information is used, the 
address of this tracepoint will be immediately following the prologue of the procedure. If MAP information is used, this address 
points to the opcode at the given label unless the /PREINV command line switch is specified. In this case TRCUST attempts to 
locate the instruction following the 

MOV EBP, ESP 

or 

MOV BP , SP 

instructions as with done when debug information is used. Use of /PREINV allows parameter and local variable references to be 
made relative to EBP in non-optimised code. 

See Source Level Symbolic Support and MAP File Support for information on using symbolic references, 
offs (optional) 

is a decimal (specified as nnnnnnnn) or hex (specified as Oxnnnnnnnn) offset from the entry point address. 

RETEP (optional) 

specifies that the tracepoint will be inserted at the return address corresponding to this entry point. 

Default criteria for specifying the return point are specified by the /RM RETEP mode command line option. TRCUST will search 
back from the end of the routine for the instruction sequence matching the RETEP mode. The length of the search is governed by 
the /RS command line option. The default RETEP mode may be overridden per tracepoint by coding one or more optional retopt 
keywords, separated by a + sign with RETEP. The following keywords are allowed: 

CV use CodeView information. 

LRET search for a LEAVE+RET or POP EBP + RET instruction sequences near the end of the routine. 

RET search for RET instruction sequences near the end of the routine. 

JMP search for JMP instruction sequences near the end of the routine. 


Note: to reduce the hazard of generting a tracepoint on a non-instruction boundary, JMP 
instructions with OxFF opcodes are not selected. 


LEAVE 


search for a LEAVE instruction near the end of the routine. 


Note: 

If more than one option is specified the RETEP uses the following order of precidence: CV, LRET, RET, LEAVE, JMP. 
When the RETEP is used, the name must be a valid entry point to a procedure. 

The RETEP option depends upon the manner in which a C compiler generates its code. Therefore this option may not work 
will some of the newer compilers or with code optimisation. 

Warning: 

Use of RETEP can run the risk of having a tracepoint not generated on an insruction boundary. The result of which would be 
unpredictable and probably cause the traced program to trap. This risk is grealty reduced by allowing the RETEP mode to default 
to /RM2. If the user chooses to widen the RETEP criteria then appropriate validation of the resulting tracepoints must be made. 


Note: For ASM functions to accomplish tracing, a label must be made public to have a tracepoint applied. Therefore, to accomplish "POST" 
tracing, a label must be made public at the return statement. 

Partial examples of Pre/Post tracing of DosOpen follows: 

TRACE MINOR=0x0001, 

TP=. DosOpen, /* Pre-invocation tracing */ 

TRACE MINOR=0x8001 , 

TP= . DosOpen, RETEP , /* Post-invocation tracing */ 


Note: It is not 

: possible to set dynamic tracepoints on the following machine instructions: 

0x9C 

PUSHF 

OxCC 

INT 3 

OxCD 

INTn 

OxCE 

INTO 

0x62 

BOUND 

0x69 

IMUL 

0x6B 

IMUL 

0xF6 

DIV, IDIV, MUL, IMUL 

0xF7 

DIV, IDIV, MUL, IMUL 


TRCUST gives an error for these opcodes and the tracepoint is rejected. 
Note: No more than one tracepoint may be applied to a given address. 


OPCODE Keyword 


The OPCODE parameter is an optional keyword parameter. 


OPCODE=Oxnn, 


where: 

nn 


is the expected one byte hex opcode to be found at the tracepoint address and TRCUST verifies the value with that in the module. 
The opcode of the instruction being traced must be the same as this value or an error message is issued and the tracepoint is 
rejected. This may be used to verify the opcode expected at the address specified by the TP parameter. This may be useful when 
using TP = (©filename, linenum to ensure the requested instruction is traced. 


TYPE Keyword 


The TYPE parameter is an optional keyword parameter that defines the event types of this tracepoint. For more description and examples of 
event types see the online help for the trace command. Also see the TYPELIST statement for information on how types are used. 


TYPE= (typename [ , typename ...]), 


where: 

typename 

is an ASCII string specifying the type of this tracepoint. The typename symbol must have been previously defined by the 
TYPELIST statement. If an invalid typename is given, the tracepoint will be discarded and a message issued. 

The final type value is obtained by logically combining each type name value using the OR operator. If TYPE is omitted, the trace 
statement will have a typeva/ue of 0. 


GROUP Keyword 


The GROUP parameter is an optional keyword parameter that defines the group this tracepoint belongs to. For more description and 
examples of groups see the online help for the trace command. Also see the GROUPLIST statement for information on how types are used. 


GROUP=groupnam, 


where: 

groupnam 

is an ASCII string specifying which group this tracepoint belongs. The groupname symbol must have been previously defined by 
the GROUPLIST statement. If an invalid groupname is given, the tracepoint will be discarded and a message issued. 

If GROUP is omitted, the trace statement will have a groupva/ue of 0. 


DESC Keyword 


The DESC parameter is used to produce a description for the tracepoint that is output as the first line of formatted data. It should include the 
entry point name of the procedure being traced and whether this is an entry or return point. The descriptive string is enclosed in double 
quotes as for a C language string. The DESC parameter is required if any FMT specifications are present. 

The recommended formats for such strings are as follows: 

DESC ="name Pre-Invocation", 

DESC^'-name Post-Invocation", 


where: 


name 


is the system component (in parentheses) followed by the entry point name of the procedure. 


Pre-Invocation 

identifies this tracepoint as an entry point, that is, before the function has been executed. 

Post-Invocation 

identifies this tracepoint as a return point from the function. 

The words Pre-invocation and Post-invocation are not mandatory, merely recommendations to be compatible with the base OS/2 
tracepoints, when formatted, if a tracepoint is inserted in the middle of a procedure it will be appropriate to use different wording. The Trace 
Customizer does not check the wording. 

An example of pre-invocation and post-invocation tracepoints follow: 

TRACE MINOR=0x0001, 

TP= . DosOpen, 

DESC=" (OS) DosOpen Pre-Invocation", 

TRACE MINOR=0x8001, 

TP= .DosOpen, RETEP, 

DESC=" (OS) DosOpen Post-Invocation", 


FMT Keyword 


The optional FMT parameter is used to produce the formatting string for the trace data. The developer should use these to control formatting 
the output produced by the Trace Formatter. Each FMT keyword causes CR/LF to be appended to the format string. The formatting string is 
similar to a C library printf string specification. It consists of ASCII characters and formatting controls enclosed in double quotes as for a C 
language string. Each formatting primitive describes the format of the data in the trace buffer at the formatting position and must match the 
data stored in the trace buffer by the data statements described later. See Formatting Trace Data for a description of how the data is stored 
in the trace buffer and subsequently formatted. 

The formatting controls are as follows: 

%lnnn Ignore nnn number of bytes in the trace buffer. 

This tells the Trace Formatter to skip over the next nnn bytes in the current trace record. This could be used, for example, to skip 
over unimportant data, traced as a block, and only output the data of interest. 

When using this control, nnn represents an ASCII decimal number and must be followed by a space. 


statement: FMT = "ignore ten bytes %I10 here", 

FMT = " and two more %I2 here", 

generates : ignore ten bytes here 

and two more here 


%P Process the data prefix bytes associated with the trace data. 

This tells the Trace Formatter that the next bytes in the trace record are the prefix or header bytes for data logged by the dynamic 
tracing mechanism. This is required to precede any format control describing data logged from memory. Do not use this before 
data that was logged from a register and never use with static tracepoints. 

%P may be used in combination with any of the following formatting controls: %A, %B, %C, %D, %F, %Q, %S, %U, %W. 

%P%x may be specified as %Px. 

See Formatting Trace Data for a description of how the data is stored in the trace buffer and the use of this control. 

statements: FMT="memory byte = %P%B", 


generates: memory byte = C2 


%B Output a byte of data in hexadecimal. 

statement: FMT = "memory byte = %P%B" 
generates: memory byte = 01 

%C Output an ASCII character 

statement: FMT = "memory bytes = %C%C%C" 
generates: memory byte = ABC 

%C formats a byte of data as a single ASCII character, with no separating spaces. Bytes outside the range 0x20 - 0x7f are 
formatted as periods. 

Note: 

The %C formatting control is only available with TRCUST 2.26 or later and TRACEFMT version 2.2 or later. 

%W Output a word of data. 

statement: FMT = "register word = %W" 
generates: register word = 0001 

statement: FMT = "memory word = %P%W" 
generates: memory word = 0001 


%D Output a double word of data. 

statement: FMT = "double word EAX = %D" 
generates: double word EAX = 0000 4B2C 

statement: FMT = "double memory word = %P%D 
generates: double memory word = 0000 4B2C 


%F Output a Flat (0:32 bit) address. 

statement: FMT = "flat address EAX = %F" 
generates: flat address EAX = 00004B2C 

%Q Output a quad word of data. 

statement: FMT = "quad word from regs EAX and EBX = %Q" 


generates: quad word from regs EAX and EBX = 00004B2C 00000001 



%A Output a segmented (1 6:1 6 bit) address. 


statement: FMT = "segmented address in SS:SP = %A" 
generates: segmented address in SS:SP = 00B7:0001 

statement: FMT = "segmented address in memory = %P%A" 
generates: segmented address in memory = 00B7:0001 

%R Repeat the following format control for the rest of the memory that was logged. 

The action of %R differs between dynamic and static trace: 

For dynamic trace records, %R will process the 3-byte memory prefix to determine the length of data to which repeat 
formatting applies. %R is used in place of the %P control. 

For static trace records, %R applies itself to all the remaining data in the trace buffer. No 3-byte memory prefix is 
examined or processed. 

%R may be used only with the following formatting controls: %A, %B, %C, %D, %F, %Q, %W, in particular it has no meaning with 
%S and %U. 

statement: FMT = "log a variable number of words from memory = %R%W" 
generates: log a variable number of words from memory = 0001 0004 

%S Output an ASCIIZ string. 

The prefix formatting control should always precede this for dynamic tracepoints because the data was logged from memory. 

Note: If the tracepoint is static, then %P should not be used because the string is terminated with a null byte. 

statement: FMT = "string = %P%S" 
generates: string = c:\os2\os2.ini 

%U Format the remainder of the trace record as a sequence of bytes in hexadecimal or dump format depending upon the View 
pull-down selection from TRACEFMT. 

This will output the remaining of the traced data, including any prefix bytes. 

statement: FMT = "garbage = %U" 

generates: garbage = [00 00 00 03 c2 cl c4 ff 04 00 09 cO 18] 

With fix pack 35 for OS/2 Warp V3.0, fix pack 10 of OS/2 Warp V4.0 and OS/2 Warp E-Server the TRACEFMT utility permits 
unformatted data to be displayed in dump format, where both the hexadecimal and ASCII representations of the data are displayed 
together with offsets. ASCII characters outside the range 0x20-0x7f are displayed as for example: 

Data [ + 0000 04 00 5A 00 00 0C 00 2B-DF F6 FF FF FF 00 00 01 ..Z.... + ] 

Data [ + 0010 00 01 CO . . . ] 

%X Output the major event code. 

statement: FMT = "major code = %X" 



generates: major code = 00C2 


%Y Output the minor event code. 


statement: FMT = "minor code = %Y 
generates: minor code = 0081 


Note to CMVC Users: To avoid conflicts with source file control information, all formatting specifications can be in upper or lower case. 

Also, prefix format specifications may be combined with data format specifications. For example, the following create 
the same format controls in the TFF: 


FMT = " %P%W here" 
FMT = "%p%w here" 
FMT = " %P %W here 


LEN Keyword 


The LEN parameter is an optional keyword parameter that defines the length of the variable length record that will follow in the next MEM or 
MEM32 statement. 


LEN= (length_spec, flag) , 


where: 

length_spec 

is an address specification that points to the one word length field of the next memory specification. This format can be 
symbolic_name+nnnnnnnn where symbolic_name is a symbolic memory location and nnnnnnnn is the offset from that 
symbolic address. The length_spec can also be Flat Register Form, or Segment Register Form. 


flag 


is a mandatory parameter that identifies the level of indirection to be used on the length_spec. It is one of: 

D[IRECT] 

l[NDIRECT][*[{+|-}iiiiiiii]]... 

DIRECT implies that the length_spec specifies a memory location that contains the length of the variable length record. INDIRECT 
means that the length_spec contains an address and is dereferenced to obtain the memory location. The optional asterisks denote 
the level of indirection, one for each level. The indirect offsets iiiiiiii are added to or subtracted from the value found at the given 
level of indirection. 

The following are example LEN statements followed by the memory statement whose length they describe. 


TRACE MINOR= , 

/* Symbol vrecord is a record whose first field is a one */ 

/* word value that is the total length of the entire */ 

/* variable length record. */ 

LEN= (vrecord, DIRECT) , 

MEM= ( .vrecord, DIRECT, LEN) , 

/* Symbol vrec_ptr is a pointer to a variable length record */ 


/* and vend_ptr is a pointer to the end of the same record. */ 
/* The second field (10 bytes from end of record) is total */ 
/* length of the variable length record. */ 
LEN= (vend_ptr , INDIRECT*-10 ) , 

MEM= ( .vrec_ptr, INDIRECT, LEN) , 

/* Symbol vrec_ptr is a pointer to a variable length record.*/ 
/* The second field (2 bytes from beginning of record) is */ 
/* total length of the variable length record. */ 
LEN= (vrec_ptr, INDIRECT*+2) , 

MEM= ( . vrec_ptr, INDIRECT, LEN) , 


/* Symbol ind_ptr is a pointer to a structure. The third */ 
/* field in the structure (6 bytes from beginning) is a */ 
/* pointer to a variable record. The fourth field in the */ 
/* variable length record (8 bytes from beginning) is the */ 
/* total length of this variable length record. */ 
LEN= (ind_ptr, INDIRECT*+6*+8 ) , 

MEM= ( . ind_ptr , INDIRECT*+6* , LEN) , 


/* If DS:DI contains the address of ind_ptr, to perform */ 

/* the above logging, the statements would be: */ 

LEN= (RDS+DI , INDIRECT* + 6* + 8 ) , 

MEM= (RDS+DI, INDIRECT*+6* , LEN) 


DATA STMT 


There are three types of data that may be traced as part of the optional DATA_STMT section of the TRACE statement. 

Registers 
Memory 
ASCIIZ strings 

More than one keyword is permitted in a tracepoint definition. The order of the statements defines the order in which the data is inserted into 
the trace buffer. 

The combined amount of data to be traced for a single tracepoint cannot exceed MAXDATALENGTH. If TRCUST determines that the 
maximum data size might be exceeded, a warning message is issued but the tracepoint definition will remain valid. 

The keywords for tracing the three types of data are REGS, MEM32, MEM, ASCIIZ32, and ASCIIZ. 

The REGS keyword identifies which registers are to be recorded in the trace buffer. 

The MEM32 keyword is used to record sections of memory in the trace buffer. Access to this memory location is through 32-bit flat 
addresses from functions compiled using 32-bit addressing. Several MEM32 parameters may be coded at any one tracepoint if several 
different memory areas are to be traced. 

The MEM keyword is also used to record sections of memory in the trace buffer, but access to this memory is through a segment:offset pair. 
This is used for functions compiled using 16-bit addressing with segment registers. Several MEM parameters may be coded at any one 
tracepoint if several different memory areas are to be traced. 

The ASCIIZ32 keyword is used to record an ASCIIZ string in the trace buffer. This is a special form of the MEM32 keyword and there may 
be more than one ASCIIZ32 parameter coded for a single tracepoint. 

The ASCIIZ keyword is used to record an ASCIIZ string in the trace buffer. This is a special form of the MEM keyword and there may be 
more than one ASCIIZ parameter coded for a single tracepoint. 


REGS Keyword 


This is coded as: 



REGS= (register [ , register ] . . .) , 


where: 

register 

is one of the following to support OS/2 versions 1.1 and 1 .2: 

CS,DS,SS,ES,AX,BX,CX,DX,SP,BP,SI,DI,IP,FLAGS 
with the addition of the following to support OS/2 version 2.0: 

EAX,EBX,ECX,EDX,ESP,EBP,ESI,EDI,EFLAGS,EIP,FS,GS 
or the symbolic name of a C language variable declared with the register storage-class specifier as: 

.symbolic_name 

The same register may appear multiple times in the register list. It will be traced as many times as it appears. Extended registers 
(E) are 32 bits and logged as two words. All other registers are 16 bits and logged as one word. 

Note: To log a C language variable declared with the register storage class, debug information must exist and the variable name is case 
sensitive. When formatting the data logged from a register variable, remember that there are no memory prefix bytes put into the log buffer. 

Example of the REGS statement follows: 

/* Given the following declaration in a C language source file: */ 
register int ret_code; 

/* To log registers AX, CX and the register variable ret_code : */ 

TRACE MINOR= 

REGS= (AX, CX, . ret_code) , 

FMT="AX=%W CX=%W ret_code=%W" 


MEM32 Keyword 


This is used to log memory in a function compiled using 32-bit flat addressing and is coded as: 


MEM32= (address_spec, flag, { length | LEN ] ) , 


where: 

address_spec 

is a flat memory address specification as described in Address Specification. 


flag 


is a mandatory parameter that identifies the level of indirection to be used on the address. It is one of: 

D[IRECT] 

l[NDIRECT][*[{+|-}iiiiiiii]]... 

IS 

DIRECT implies that the address specifies a memory location to be saved in the trace buffer. 

INDIRECT means that the address contains a flat address and is dereferenced to obtain the memory location. The optional 
asterisks denote the level of indirection, one for each level. The indirect offsets iiiiiiii are added to or subtracted from the value 
found at the given level of indirection. 

IS (Indirect Segmented) means that the address contains a segmented address that is dereferenced to obtain the memory location. 


length 

is the number of bytes at the memory location to be saved in the trace buffer. If length is too big, a warning message will be given, 
and length will be set to MAXDATALENGTH. If length is 0 an error message will be given, and this tracepoint will be ignored. 

LEN 


specifies that this is a variable length record to log and the length was specified by the preceding LEN statement. If there was no 
preceding LEN statement, this tracepoint is rejected. Either length or LEN must be specified, but not both. 

Example of the MEM32 statement follows: 

TRACE MINOR= 

/* To log retcode enter the following: */ 

MEM32= ( . retcode, DIRECT, 2) , 

/* s_ptr is a pointer to a structure, log it for 4 bytes. */ 

MEM32= ( . s_pt r , INDIRECT, 4) , 

/* Field 6 bytes into structure pointed at by s_ptr is a */ 

/* pointer to a structure, log 8 bytes past begin of struct.*/ 

MEM32= ( . s_ptr, INDIRECT*+6*+8, 10) , /* logs ten bytes */ 

/* s_ptr points to a variable length record, second field */ 

/* is the record length (offset 4 from record beginning) .*/ 

LEN= ( S_pt r , INDIRECT * + 4 ) , 

MEM32= ( . s_pt r , INDIRECT, LEN) 

/* s_end points to the end of same variable length record,*/ 

/* second field is the record length (offset -6 from */ 

/* record beginning) . */ 

LEN= (s_end, INDIRECT*- 6 ) , 

MEM32= ( . s_pt r , INDIRECT, LEN) 


MEM Keyword 


This is used to log memory in a function compiled using 16-bit segment:offset addressing and is coded as: 


MEM= (address_spec, flag, { length | LEN } ) , 


where: 

address_spec 

is a segmented memory address specification as described in Address Specification, 
flag 

is a mandatory parameter that identifies the level of indirection to be used on the address. It is one of: 

DjlRECT] 

l[NDIRECT][*[{+|-}iiiiiiii]]... 

IF 

DIRECT implies that the address specifies a memory location to be saved in the trace buffer. 

INDIRECT means that the address contains a segmented address and is dereferenced to obtain the memory location. The optional 
asterisks denote the level of indirection, one for each level. The indirect offsets iiiiiiii are added to or subtracted from the value 
found at the given level of indirection. 

IF (Indirect Flat) means that the address contains a flat address that is dereferenced to obtain the memory location. 


Only far pointers may be dereferenced when using segmented addressing. 


length 

is the number of bytes at the memory location to be saved in the trace buffer. If /ength is too big, a warning message will be given, 
and /ength will be set to MAXDATALENGTH. If /ength is 0 an error message will be given, and this tracepoint will be ignored. 

LEN 


specifies that this is a variable length record to log and the length was specified by the preceding LEN statement. If there was no 
preceding LEN statement, this tracepoint is rejected. Either length or LEN must be specified, but not both. 


ASCIIZ32 Keyword 


This is used to log a string in a function compiled using 32-bit flat addressing and is coded as: 


ASCIIZ32= (address_spec, f lag, maxlength) , 


where: 

address_spec 

is a 0:32 bit fiat memory address specification as described in Address Specification, 
flag 

is a mandatory parameter that identifies the level of indirection to be used on the address. It is one of: 

DjlRECT] 

l[NDIRECT][*[{+|-}iiiiiiii]]... 

IS 

DIRECT implies that the address points to a memory location, the contents of which are to be saved in the trace buffer. 

INDIRECT means that the address points to a flat address pointer which is dereferenced to obtain the target location to save in the 
trace buffer. The optional asterisks denote the level of indirection, one for each level. The indirect offsets iiiiiiii are added to or 
subtracted from the value found at the given level of indirection. 

IS (Indirect Segmented) means that the address points to a segmented address pointer which is dereferenced to obtain the target 
location to save in the trace buffer. 

maxlength 

is the maximum length of the string that will be saved in the trace buffer. It should be no greater than MAXDATALENGTH. The 
actual length to be traced will depend on where the zero terminating byte is found. 

If max/ength is 0 an error message will be given, and this tracepoint will be ignored. 

Note: When using dynamic tracing, the OS/2 kernel does not place the terminating null byte into the trace buffer; therefore the 
prefix byte must be used by the Trace Formatter to obtain the length of the string. 


ASCIIZ Keyword 


This is used to log a string in a function compiled using 16-bit segmenhoffset addressing and is coded as: 


ASCI IZ= (address_spec, flag, maxlength ) , 


where: 


address_spec 

is a segmented memory address specification as described in Address Specification. 


flag 


is a mandatory parameter that identifies the level of indirection to be used on the address. It is one of: 

D[IRECT] 

l[NDIRECT][*[{+|-}iiiiiiii]]... 

IF 

DIRECT implies that the address points to a memory location, the contents of which are to be saved in the trace buffer. 

INDIRECT means that the address points to a far pointer which is a segmented address that is dereferenced to obtain the target 
location to save in the trace buffer. The optional asterisks denote the level of indirection, one for each level. The indirect offsets 
iiiiiiii are added to or subtracted from the value found at the given level of indirection. 

IF (Indirect Flat) means that the address points to a far pointer which is is a flat address that is dereferenced to obtain the target 
location to save in the trace buffer. Only far pointers may be dereferenced using segmented addresses. 

maxlength 

is the maximum length of the string that will be saved in the trace buffer. It should be no greater than MAXDATALENGTFI. The 
actual length to be traced will depend on where the zero terminating byte is found. 

If max/ength is 0 an error message will be given, and this tracepoint will be ignored. 

Note: When using dynamic tracing, the OS/2 kernel does not place the terminating null byte into the trace buffer; therefore the 
prefix byte must be used by the Trace Formatter to obtain the length of the string. 


Address Specification 


The syntax for specifying a memory address given here applies to the MEM32, MEM, ASCIIZ32 and ASCIIZ keywords above. 
An address is specified in one of the following forms: 

1 . Symbolic name form (can be used for MEM32, MEM, ASCIIZ32, and ASCIIZ). 

2. Flat register form (can be used only for MEM32 and ASCIIZ32). 

3. Segment register form (can be used only for MEM and ASCIIZ). 


Symbolic Name Form 

This is coded as: 


. name [ {+ I -Jnnnnnnnn] . . . [ {+ | -} (iiiiiiii) ] , 


where: 

name 


is a symbolic name of a memory location. The is required before the name. The debug information in the module is checked for 


the name and if not found and a MAP was given, the MAP is checked. An error message is output by the Trace Customizer if the 
symbol is not found and the trace definition is ignored. 

The name is normally case sensitive and may be subject to modification by the compiler. 

See Source Level Symbolic Support and MAP File Support for information on using symbolic references. 

If the /I command line switch is specified then MAP file symbolic references may be may case-insensitively. 

name is limited to a maximum length of 255 characters. If a symbol exceeds this length then TRCUST will only use the first 255 
characters. A warning message is issued when name truncation occurs. 


nnnnnnnn (optional) 

is a displacement from the symbolic address. If hex the syntax is Oxnnnnnnnn. 
iiiiiiii (optional) 

is a displacement from the indirect address. If hex the syntax is Oxiiiiiiii. This specifies a displacement from the final address when 
using INDIRECT, IF (Indirect Flat) or IS (Indirect Segmented) addressing. 


Flat Register Form 


This is coded as: 


Fjbreg [ { + I - } ireg] ...[{+ I - } nnnnnnnn] . . . [ { + | - } (iiiiiiii) ] , 


where: 

breg 

is a flat model (0:32 bit) base register and is one of: 

EAX,EBX,ECX,EDX,ESP,EBP,ESI,EDI,EIP 
ireg (optional) 

is an extended data, base or index register. More than one ireg may be used to define a displacement from the flat register value to 
the memory location. It may be one of: 

EAX,EBX,ECX,EDX,EBP,ESI,EDI,EIP 

nnnnnnnn (optional) 

is an optional fixed displacement to be added to the address calculated in the registers. If hex the format is Oxnnnnnnnn. 
iiiiiiii (optional) 

is a displacement from the indirect address. If hex the syntax is Oxiiiiiiii. This specifies a displacement from the final address when 
using INDIRECT or IS (Indirect Segmented) addressing. 

This form of address is calculated at run time. 


Segment Register Form 


This is coded as: 


Rsreg[ {+ | -}dreg] ...[{+ -}nnnnn] ...[{+ | 


(iiiii) ] , 


where: 

sreg 

is a segment register and is one of: 

CS,DS,SS,ES,FS,GS 

Note: The prefix R implies that the adjoined segment register is to be used with an initial offset of zero. Thus RDS refers to data 
addressed by DS:0 

dreg (optional) 

is a data, base or index register. More than one dreg may be used to define a displacement from the segment register value to the 
memory location. It is one of: 

BP,SP,SI,DI,AX,BX,CX,DX,IP 

nnnnn (optional) 

is an optional fixed displacement to be added to the address calculated in the registers. If hex the syntax is Oxnnnn. 
iiiii (optional) 

is a displacement from the indirect address. If hex the syntax is Oxiiii. This specifies a displacement from the final address when 
using INDIRECT or IF (Indirect Flat) addressing. 

This form of address is calculated at run time. 


Formatting Trace Data 


This section gives a brief description of the formatting process as an aid to generating correct formatting strings. 

Each trace record stored in the RAS buffer consists of a header followed by a number of variable length trace data records. The header 
identifies the major and minor code, time stamp, process ID, etc., and the total length of the trace data for that trace record. 

Each MEM32, MEM, ASCIIZ32, or ASCIIZ data statement, coded in the trace source file for a tracepoint, produces an associated data 
record to be stored in the trace buffer. The data records consist of a 3-byte prefix followed by the trace data. This prefix consists of a status 
byte followed by the length of the data for that statement. The status byte indicates whether valid data has been traced. 

Dynamic trace can only trace data that is resident in memory at the time that the tracepoint is executed. Data may not be able to be traced 
for two reasons: it resides in a page that is currently paged out or the address specified is invalid. This latter case usually occurs due to 
tracing indirectly via invalid pointer variables. In either of these two cases dynamic trace sets the status byte accordingly and stores the 
pointer in the place of the wanted data. No more data is attempted to be traced for this invocation of the tracepoint, but tracing will resume 
the next time this tracepoint is encountered. 

Since the position of these prefix bytes, within a trace record, is dependent on the data being traced and the number of MEM32, MEM, 
ASCIIZ32, or ASCIIZ statements, the Trace Formatter must be told when to expect the prefix in the trace record. This is the purpose of the 
%P and %R formatting controls. One of these must be coded in the formatting string at every place a data record is expected, (noting the 
restrictions on the use of %R specified in the description of the FMT= keyword. 

The following values are used in the status byte of the prefix: 

0 Valid data to log 

1 ASCIIZ string to log 

-1 Invalid Selector 

-2 Selector not Present 


-3 


Page not Present 


If the prefix indicates an error TRACEFMT will interpret the error and format the failing address. 

Note: With ASCIIZ and ASCIIZ32 commands, the prefix is used by the TRACEFMT utility to obtain the length of the string since the string is 
not null terminated. 


Sample Trace Source Files 


This section gives four sample TSF files. The first is for a module written in a mix of C and MASM and compiled with 1 6:1 6 segmented 
addressing. The second was compiled with 0:32 flat addressing. The third module consists of routines, some which were compiled using 
16-bit segmented addressing and some that were compiled using 32-bit flat addressing. The fourth is for monitoring function references in a 
module. 


TSF Using 16-bit Segmented Addressing 


; Trace source file for the xxx dynalink. Compiled with 16-bit offsets. 

MODNAME=\c\src\xxx . dll 
MAJOR=0xC5 
MAXDATALEN=2 0 0 

; We will want to trace up to 200 bytes in any one trace call. 

TYPELIST NAME=API, ID=08, 

NAME=SYS , ID=04, 

NAME=PRE, ID=02 , 

NAME=POST, ID=64 

GROUPLIST NAME=MEM, ID=1, 

NAME=FS, ID=3 

/* The following tracepoint does not need debug info, 
only a MAP file is necessary with label xxalloc 
public in it. The program must be compiled in 16-bit 
mode because segmented addressing is used (ASCIIZ 
instead of ASCIIZ32) . 

This logs the word registers AX and BX and the string 
pointed at by DS:DI for a max of 20 bytes. */ 


TRACE 


MINOR=25, TP=. xxalloc, 

OPCODE=Ox8B, /* the opcode is optional */ 
TYPE= (API, PRE) , 

GROUP=MEM, 

DESC=" (OS) xxalloc Pre-Invocation", 

FMT =" AX = %W " 

FMT =" upper BX 

FMT =" lower BX 

FMT =" param = % 

REGS= (AX, BX) , 

ASCIIZ= (RDS+DI, DIRECT, 20) 


= %B", 
= %B", 
P%S", 


/* This defines a tracepoint at Foo label. The ten words 
to log are found indirectly through SS:SP. Note that 
each word needs a format control but since only one 
memory access was done, one prefix control is needed. */ 

TRACE MINOR=0xB0, TP=.Foo, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (OS) Foo Pre-Invocation", 

FMT=" First Five words = %P%W%W%W%W%W" , 

FMT=" Three words ignored %I6", 

FMT=" Last Two Words = %W%W", 

MEM= (RSS+SP , INDIRECT, 20) 



/* This defines a tracepoint at Goo label. DS:DI points 
to a structure whose second field is a pointer to an 
ASCIIZ string. The offset from the first field in the 
structure is 4 bytes. Max string size to log is 40 bytes. * 

TRACE MINOR=0xBl , TP=.Goo, 

TYPE= (SYS) , 

GROUP=FS , 

DESC=" (OS) Goo Pre-Invocation", 

FMT=" Second field in struct points to %P%S", 

ASCI IZ= (RDS+DI+4, INDIRECT, 40) 


/* This defines a tracepoint at Hoo label. DS:DI points to 
memory that contains a pointer to a structure. We want to 
log the third field in the structure (offset 6 from begin 
of structure) . */ 

TRACE MINOR=0xB2 , TP=.Hoo, 

TYPE= (SYS) , 

GROUP=FS , 

DESC=" (OS) Hoo Pre-Invocation", 

FMT=" Third field in struct is doubleword = %P%D", 

MEM= (RDS+DI , INDIRECT*+6 , 4) 


/* This defines a tracepoint at Zoo label. DS:DI points to 
memory that contains a pointer to end of a structure. We 
want to log the last field in the structure (of f set -2 from 
end of structure) . */ 

TRACE MINOR=0xB3, TP=.Zoo, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (OS) Zoo Pre-Invocation", 

FMT=" Last field in struct is word = %P%W", 

MEM= (RDS+DI , INDIRECT*-2 , 2 ) 


/* This defines a tracepoint at procedure CheckIT. This 
is a C routine compiled with debug information. The 
data to log is an ASCIIZ string called Namelt. */ 

TRACE MINOR=0xB3, TP=.CheckIt, 

TYPE= (PRE) , 

GROUP=FS , 

DESC=" (OS) Checklt Pre-Invocation", 

FMT=" Namelt = %P%S", 

ASCI IZ= ( .Namelt, DIRECT, 64) 


/* This defines a tracepoint at the return point of the 
procedure Checklt, a C routine compiled with debug. 
Status_Rec is a record variable. We want to log the 
age field (four bytes from the begin of Status_Rec) , 
the name (six bytes from Status_Rec that points to 
an ASCIIZ string) , the age of the next Status_Rec 
(a pointer to the next Status_Rec is ten bytes from 
the begin of Status_Rec, the age is four bytes from 
the begin of the next Status_Rec) . */ 

TRACE MINOR=0x80B3, TP= . Checklt , RETEP , 

TYPE= (POST) , 

GROUP=FS, 

DESC=" (OS) Checklt Post-Invocation", 

FMT=" Status_Rec . age = %P%W", 

FMT=" Status_Rec . name = %P%S", 

FMT=" Status_Rec . next->age = %P%W", 

MEM= ( . Status_Rec+4, DIRECT, 2) , 

ASCI IZ= ( . Status_Rec+6, INDIRECT, 64) , 

MEM= ( . Status_Rec+10 , INDIRECT* + 4 , 2 ) 


/* This defines a tracepoint at line 58 in the source 
file check. c Debug info is needed to use this 
type of tracepoint. v_ptr is a pointer to a variable 
sized record. The length is 4 bytes past the 
beginning of the record. Log that record. */ 



TRACE 


MINOR=Ox71B4, TP=@check . c, 58 , 

TYPE= (SYS) , 

GROUP =FS, 

DESC=" (OS) Checklt before allocation", 

FMT=" Variant Record = %P%W%D%U", 

LEN= ( v_ptr , INDIRECT*+4) , 

MEM= ( . v_ptr, INDIRECT, LEN) 


/* This does not define a tracepoint, it only defines a 
trace formatting string for minor code 181 (B5 hex) . */ 

TRACE MINOR=OxB5 , TP=0STATIC, 

DESC=" (OS) StaticProcedure Pre-Invocation", 

FMT=" DI = %W FLAGS = %W" 


/* This defines a tracepoint at routine Lookup, but no 
data is to be logged, only the DESC will show up 
in the Trace log when the tracepoint is formatted. */ 


TRACE MINOR=OxB6 , TP=. Lookup, 

TYPE= (SYS) , 

GROUP =FS, 

DESC=" (APP) Lookup Pre-Invocation", 


TSF Using 32-bit Addressing 


; Trace source file for the NEW dynalink. Compiled with 32-bit offsets. 

MODNAME=NEWCALLS . DLL 

MAJ0R=2 4 1 

MAXDATALEN=2 0 0 

; We will want to trace up to 200 bytes in any one trace call. 

TYPELIST NAME=API, ID=08, 

NAME=SYS , ID=04, 

NAME=PRE, ID=02 , 

NAME=POST, ID=64 

GROUPLIST NAME=MEM, ID=1, 

NAME=FS , ID=3 

/* The following tracepoint does not need debug info, 
only a MAP file is necessary with label NewAllocSeg 
public in it. The program must be compiled in 32-bit 
mode because flat addressing is used (ASCIIZ32 instead 
of ASCIIZ) . 

This logs lower word of EAX, the double word of EBX 
and the string at the address specified by ESP with 
offset ESI. */ 

TRACE MINOR=45 , TP= . NewAllocSeg, 

TYPE= (API, PRE) , 

GROUP =MEM, 

DESC=" (NEW) NewAllocSeg Pre-Invocation", 

FMT =" AX = %W ", 

FMT =" EBX = %F" , 

FMT =" param = %P%S", 

REGS= (AX, EBX) , 

ASCIIZ32= (FESP+ESI, DIRECT, 20) 


/* This defines a tracepoint at Foo label. The ten words 


to log are found indirectly by using EBP with offset 

EDI. Note that each value logged needs a format control. */ 

TRACE MINOR=OxDO, TP=.Foo, 

TYPE= (SYS) , 

GROUP=FS , 

DESC=" (NEW) Foo Pre-Invocation", 

FMT=" First Five words = %P%W%W%W%W%W" , 

FMT=" Three words ignored %I6", 

FMT=" Last Two Words = %W%W", 

MEM32= (FEBP+EDI, INDIRECT, 20) 


/* This defines a tracepoint at Goo label. EAX + EDI points 
to a structure whose second field is a pointer to an 
ASCIIZ string. The offset from the first field in the 
structure is 4 bytes. Max string size to log is 40 bytes.*/ 

TRACE MINOR=0xDl , TP=.Goo, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (NEW) Goo Pre-Invocation", 

FMT=" Second field in struct points to %P%S", 

ASCI IZ32= (FEAX+EDI+4 , INDIRECT, 40) 


/* This defines a tracepoint at Hoo label. EBP + EDI points 
to memory that contains a pointer to a structure. We want 
to log the third field in the structure (offset 6 from 
begin of structure) . */ 

TRACE MINOR=0xD2 , TP=.Hoo, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (NEW) Hoo Pre-Invocation", 

FMT=" Third field in struct is doubleword = %P%D" , 

MEM32= (FEBP+EDI, INDIRECT*+6, 4) 


/* This defines a tracepoint at Zoo label. EAX + EDI points 
to memory that contains a pointer to end of a structure. We 
want to log the last field in the structure (offset -2 from 
end of structure) . */ 

TRACE MINOR=0xD3, TP=.Zoo, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (OS) Zoo Pre-Invocation", 

FMT=" Last field in struct is word = %P%W", 

MEM= (FEAX+EDI , INDIRECT*-2 , 2 ) 


/* This defines a tracepoint at procedure CheckIT. This is 
a C routine compiled with debug information. The 
data to log is an ASCIIZ string called Namelt. */ 

TRACE MINOR=0xD3, TP=.CheckIt, 

TYPE= (PRE) , 

GROUP=FS, 

DESC=" (NEW) Checklt Pre-Invocation", 

FMT=" Namelt = %P%S", 

ASCI IZ32= ( .Namelt, DIRECT, 64) 


/* This defines a tracepoint at the return point of the 
procedure Checklt, a C routine compiled with debug. 
Status_Rec is a record variable. We want to log the 
age field (four bytes from the begin of Status_Rec) 
the name (six bytes from Status_Rec that points to 
an ASCIIZ string) and the age of the next Status_Rec 
(a pointer to the next Status_Rec is ten bytes from 
the begin of Status_Rec, the age is four bytes from 
the begin of the next Status_Rec) . */ 

TRACE MINOR=0x80D3, TP= . Checklt , RETEP , 

TYPE= (POST) , 

GROUP=FS, 

DESC=" (NEW) Checklt Post-Invocation", 

FMT=" Status_Rec . age = %P%W", 



FMT=" Status_Rec . name = %P%S", 

FMT=" Status_Rec . next->age = %P%W" , 

MEM32= ( . Status_Rec+4 , DIRECT, 2 ) , 

ASCI IZ32= ( . Status_Rec+6, INDIRECT, 64) , 

MEM32= ( . Status_Rec+10 , INDIRECT* + 4 , 2 ) 


/* This does not define a tracepoint, it only defines a 
trace formatting string for minor code 223 (DF hex) . */ 

TRACE MINOR=0xDF, TP=0STATIC, 

DESC=" (NEW) StaticProcedure Pre-Invocation", 

FMT=" DI = %W FLAGS = %W" 


/* This defines a tracepoint at routine Lookup, but no 
data is to be logged, only the DESC will show up 
in the Trace log when the tracepoint is formatted. 
Lookup is a C language routine not compiled with 
debug and not declared with Pascal 
calling conventions; the underscore is needed for 
this label. */ 

TRACE MINOR=OxEO, TP=._LookUp, 

TYPE= (SYS) , 

GROUP=FS, 

DESC=" (NEW) Lookup Pre-Invocation" 


TSF Using Mix of 16-bit and 32-bit Addressing 


; Trace source file for the MIXED dynalink. 

; Parts were compiled with 16-bit compiler, some with 32-bit compiler. 
; The developer must know how the parameters being sent in are 
; to be addressed, whether they are segmented or flat addresses. 

MODNAME=MIXCALLS . DLL 
MAJOR=250 
MAXDATALEN=2 0 0 

; We will want to trace up to 200 bytes in any one trace call. 

TYPELIST NAME=API, ID=08, 

NAME=SYS , ID=04, 

NAME=PRE, ID=02, 

NAME=POST, ID=64 

GROUPLIST NAME=MEM, ID=1, 

NAME=FS , ID=3 

/* The following tracepoint is for the routine MixStub. 

This was compiled using segmented addressing and 
one of the parameters to it is a pointer to a control 
block called mix_ctrl. This pointer, found at SS:SP, 
is a flat address because the routine that sent it was 
compiled with the flat addressing specification. 

This logs the mix_ctrl block for 6 bytes. */ 

TRACE MINOR=95, TP=. MixStub, 

TYPE= (API, PRE) , 

GROUP=MEM, 

DESC=" (OS) MixStub Pre-Invocation", 

FMT =" mix_ctrl = %P%W %W %W", 

MEM= (RSS+SP, IF, 6) /* is an indirect flat address */ 


/* The following is for the routine FlatStub. This was 



compiled using 32-bit flat addresses. A parameter to 
flatstub is a pointer called p_seg_info. This 
pointer is a segmented address because the routine 
calling flatstub was compiled using 16-bit segmented 
addressing. Log where p_seg_info points for 2 bytes. */ 

TRACE MINOR=OxfO, TP= . Flatstub, 

TYPE= (SYS) , 

GROUP =FS , 

DESC=" (OS) Flatstub Pre-Invocation", 

FMT=" seg_info = %P%W" , 

MEM32= ( .p_seg_info, IS, 2 ) /* value p_seg_info is a 16-bit */ 

/* segmented address */ 


Trace Customizer Messages 


The messages generated by the Trace Customizer are given below. In addition to the message itself, the source line in error is displayed. 
Errors in the FATAL and SEVERE category will cause the compiler to abort immediately. 

ERROR messages will normally cause a tracepoint definition to be discarded and processing continues with the next definition. 
WARNING messages will allow a valid tracepoint definition to be produced, and the results will normally be as expected. 

TRCUST (n) severity: message_text 


where: 

n 

severity 


message_text 


is the line number of the tsf in error or (1 ) if the command syntax is in error. 

is the message severity and may take one of the following values: 

• FATAL 

• SEVERE 

• ERROR 

• WARNING 

is the text of the message. 


Fatal Messages 


Msg No. Message Text 

1 TSF file not specified 


2 


file not found or access denied : %s 


3 

4 

5 

6 

7 

8 

9 

10 
11 
12 

13 

14 

15 

16 

17 

18 

19 

20 


cannot open file : %s 

error accessing file : %s 

error writing to file : %s 

unable to allocate more memory 

too many tracepoints in file 

error reading file: %s, Rc = %s 

changing file pointer for: %s, Rc = %s 

unknown EXE header type for: %s 

invalid path specified in combine file 

max TFF files to combine is 50 

all TFFs not have same major code, file: %s 

invalid MAP file extension given in: %s 

TCF file not specified 

filename to long: %s 

token in TSF file exceeds %s bytes 

invalid page length, %s bytes specified" 

error detected unpacking page 

module does not contain code - no page map 


Severe Messages 


Msg No. 

Message Text 

33 

module name not specified 

34 

premature end of file encountered 

35 

syntax error : missing '%s' before '%s' 

36 

new line in literal 

37 

NULL in literal 

38 

keyword '%s' expected, '%s' found 

39 

symbolic info not given for %s 

40 

MAJOR redefinition 

41 

TDFID redefinition 

42 

MAXDATALENGTH redefinition 

43 

line too long in input file: %s 

44 

Invalid RETEP criteria specified 



Error Messages 


Msg No. 

Message Text 

65 

number expected, '%s' found 

66 

unexpected: %s, ignored 

67 

minor code not specified 

68 

minor code out of range 

69 

TYPELIST redefinition, ignored 

70 

GROUPLIST redefinition, ignored 

71 

TP redefinition, tracepoint ignored 

72 

MINOR redefinition, tracepoint ignored 

73 

OPCODE redefinition, tracepoint ignored 

74 

syntax error: missing '%s' before '%s' 

75 

opcode: %s out of range 

76 

opcode at TP address cannot be traced 

77 

opcode mismatch at address to apply TP 

78 

register expected, '%s' found 

79 

symbol not found: %s 

80 

address not found 

81 

segment register expected, '%s' found 

82 

trace record incomplete, '%s' required 

83 

RPN command record exceeds 255 bytes 

84 

invalid parameter: '%s', ignored 

85 

invalid ID: %s, ignored 

86 

group/type redefinition: %s, ignored 

87 

typeid redefinition: %s, ignored 

88 

groupid redefinition: %s, ignored 

89 

invalid address specified: %s 

90 

line number past end of code for file %s 

91 

Debug info does not exist for: %s 

92 

line number missing or invalid: %s 

93 

filename %s not found in Debug info 

94 

duplicate minor code = %s, ignored 


95 


duplicate minor code = %s in file %s, ignored 



96 

97 

98 

99 

100 
101 
102 

103 

104 

105 

106 

107 

108 

109 

110 


variable LEN parameter not preceding 

RPN stack limit of 1 6 exceeded 

invalid flat register specified: %s 

total FMT format specs above 4096 bytes 

zero length specified, tracepoint ignored 

ORBIT redefinition, tracepoint ignored 

invalid ORBIT value, tracepoint ignored 

opcode defined after ABORT 

opcode defined after REMOVE 

duplicate TP address, ignored 

/ D not allowed with /C, ignored 

unable to locate end of %s 

HLL Debug Info not in order - forcing /NODE 

Ignoring unsupported line numbers, version %s%s 

Unrecognised line entry type %s. Line numbers ignored 


Warning Messages 


Msg No. 

Message Text 

129 

MAXDATALENGTH out of range, 512 used 

130 

typename unknown: %s, ignored 

131 

groupname unknown: %s, ignored 

132 

file: %s, extension invalid, using: %s 

133 

'%s' expected before '%s\ one assumed 

134 

too many %s, first 16 types, 48 groups used 

135 

name too long: %s, first 8 characters used 

136 

linenum in file: %s not found, using #%s 

137 

bad object number: %s used for file %s 

138 

offset %s is invalid for object number %s 

139 

page tracepoint to be applied at not valid 

140 

MAXDATALENGTH to log could be exceeded 

141 

MAJOR out of range, 1 used 

142 

TDFID out of range, 0 used 

143 

index too large, high word ignored 

144 

unable to determine return point for %s 



145 


truncating name: %s to 256 bytes 


Using the MAKETSF Utility 


The purpose of MAKETSF is to extract dynamic trace definitions imbedded in C or ASM source file to which they relate. MAKETSF will also 
substitute line number information into those trace definions that are specified by line number and source file reference. 

For example: 


TRACE TP=@myprog . c, 1234 


This specifies a tracepoint at location corresponding to line 1 234 in module whose source is "myprocg.c". 

The problem with this type of specification is that line number reference will need to be updated whenever the source is changed. 

MAKETSF allows the trace definitions to be imbedded in the source as comments but in extraction will generate the correct line number 
information. It does this be detecting the string "TP=@," or "TP=@ " and then inserting the line number specification. If the TP= keyword 
explicitly specifies an address expression then the trace definiton is extracted without modification. 

To use line number references modules must be compiled and linked with symbolic debugging information. For CSET2 and VisualAge the 
compile option is /Tl, and the LINK386 option is /DE. 

Note: 


Optimised code may not place tracepoints in the desired location. 


For example, in a C program 


/***DT here is the header 

* MODNAME=my . exe 

* MAJOR=25 6 
*/ 


void myproc (char * parml) { 
int result; 


/***DT tracepoint definition 

* TRACE TP=@, 

* DESC="a tracepoint", 

* MEM32=( .parml, I, 4) , 

* MEM32= ( . resut, D, 4) , 

* FMT="parml=%p%f result=%f 
*/ 


Similarly in an assember program: 


;*** dt here is the header 
; MODNAME=my . exe 


MAJOR=256 


parml DD ? 

myproc proc 

push ebp 
move ebp,esp 


;***DT tracepoint definition 
; TRACE TP=0, 

; DESC="a tracepoint", 

; MEM32= ( .parml, D, 4) , 

; FMT="parml=%p%f " 


Notes: 

The comment block must begin in column 1 with either ;***DT or /*** DT. 

If the C form is used then an * must appear in column 2 of each line. A */ in column 2 ends the comment block. 

If the ASM form is used then a ; is required in every column. 

If TP=@ is coded then MAPTSF will insert the file name and line number corresponding to the trace definition. 

MAKETSF will respond to the $include <filename> directive if coded in column 1 . This is intended for use where multiple source modules 
comprise a single load module. A list of component source files can be coded in a single file using include statements then given to 
MAKETSF for processing. For example: 


A sample include file for MAKETSF 


$include myprog.c 

$include . . \asm\myproc . asm 

$include . . \sub\subr . c This is a comment 


MAKETSF will ignore any line that is not part of a ;***DT or/***DT comment block or a Sinclude statement. 
TSF output form MAKETSF is written to the output file if specified, otherwise to STDOUT. 

Messages are written to STDERR. 


MAKETSF Synatx and command line options 

The syntax for MAKTSF is: 

MAKETSF <options> input 


There are five switch options that MAKETSF supports: 

-a 

append output to output file. The default is to replace the output file. 



-b<path> 


-o<output> 

-P 


specifies the base directory path (or drive) from which input files specifications are assumed to be relative. If not 
specified then the current directory is assumed to be the base path. 

Note: 

Note: the base path is not included in the file specification of the TP= keyword, whether or not -p is specfied. 
no includes. 

This forces MAKETSF to ignore $include directives. 

specifies the output file. The default is to direct output to STDOUT. 

include source file path information. 

This forces MAKETSF to retain the full file specification from $include statements or the command line input file in the 
TP= keyword. The default is to strip path information. 

verbose mode. 

This gives information about number of files read and blocks processed. 


Using the DEBDEL Utility 


The DEBDEL utility may be use to remove debugging information from a load module after TRCUST has generated the TDF. This avoids 
the need to re-link edit the load module without / DE option. 

Removal of debugging information does not affect the validity of the TDF, however if the source is re-compiled then the TDF must be 
re-built. 

The syntax for DEBDEL is: 


DEBDEL module_file 


There is only one parameter: module_file. This is the load module file to be stripped of debugging debugging information. 

Note: 


DEBDEL updates the module in place without first copying it. 


Using the MAPTSF Utility 

The MAPTSF utility will generate a TSF from a MAP file. One tracepoint is generated for each public code symbol. Optionally a return 
tracepoint may be generated for each public code symbol. 

The syntax for MAPTSF is as follows: 


MAPTSF map_file [ /MAJOR=ma jor_code] 
[ /MODNAME=name ] 



[ /MAXDATALENGTH=max_data_length] 
[ /MINORSTART=minor_code] 

[ /TEMPLATE=template_f ile] 

[ /LOGSTACK=stack_bytes ] 

[ / EXCLUDE=string [ * ] [,....]] 
[/INCLUDE=string[*] [,....]] 

[ /REGISTERS=reg [ , reg] . . . ] 
[/LOGRETURN] 

[/RETEP] 

[/CASESENSITIVE] 

[/TYPES] 

[ /GROUPS=string [ , ] ] 


There is only one required parameter: map_file, which specifies the input MAP file. The remaining parameters are optional and have the 
following meaning: 

/MAJOR 

specifies the major code to be used in the MAJOR= statement of the TSF . If omitted, TRCUST will select the default 
major code of 1 when compiling the TSF. 

/MODNAME 

specifies the module name to be used in the MODNAME= statement of the TSF. If omitted, MAPTSF will use the 
module name that appears in the second line of the MAP file. Note, the MAP file excludes the module extension. 
TRCUST will assume an extension of .DLL if not specified. 

/MAXDATALENGTH 

specifies the MAXDATALENGTH= statement of the TSF. If omitted, TRCUST will assume the default of 512 when 
compiling the TSF. 

/MINORSTART 

specifies the first minor code. Subsequent tracepoints have incremental minor codes. If omitted, the MINOR= 
statement is not generated. TRCUST will assume an initial minor code of 1 and increment for each tracepoint. 

/INCLUDE 

specifies a comma delimited list of case insensitive strings used as inclusion criteria for public symbols. An optional 
trailing * signifies a generic match. If both /INCLUDE and /EXCLUDE are specified then the logical OR of their criteria 
is used for selection. For example: 

/l=dos*,strupr inludes all public symbols beginning 'dos' or equal to ’strupr’. 

/E=s* /l=strupr excludes all public symbols beginning 's' except for 'strupr' and includes everything else. 

/EXCLUDE 

specifies a comma delimited list of case insensitive strings used as exclusion criteria for public symbols. An optional 
trailing * signifies a generic match. If both /INCLUDE and /EXCLUDE are specified then the logical OR of their criteria 
is used for selection. For example: 

/E=_*,dos* excludes all public symbols beginning or 'dos'. 

/E=s* /l=strupr excludes all public symbols beginning 's' except for 'strupr' and includes everything else. 

/CASESENSITIVE 

switch applies to /INCLUDE and /EXCLUDE. If specified then the inculde and exclude strings will be match on a 
case-sensitve basis. 

/LOGSTACK=n 

specifies the number of bytes of stack to log for entry tracepoints. This causes the following TSF statements to be 
generated for each entry tracepoint: 

for 16-bit code - 


REGS= (SP, SS) , 

FMT="Stack pointer SS:SP=%A->", 
MEM= (RSS+SP, D, n) , 

FMT= " %R%W" 


for 32-bit code - 



REGS= (ESP) , 

FMT="Stack pointer ESP=%F->", 
MEM32= (FESP , D, n) 

FMT=" %R%F" 


If /LOGSTACK is specified without a value then 16 bytes is assumed. 

/LOGRETURN 

specifies that for each return tracepoint, the return value in AX/EAX should be logged. This causes the following TSF 
statements to be generated: 

for 16-bit code: 


REGS= (AX) 

FMT="Returns (ax) %W" 


for 32-bit code: 


REGS= (EAX) 

FMT="Returns (eax) %F 


/REGISTERS 

specifies one or more processor registers to be logged, each separated by a comma. The following register 
mnemonics are supported: 


AX, BX, CX, DX, CS, DS, ES, FS, GS, IP , S I , DI , SP , BP , FLAGS , 
EAX, EBX, ECX, EDX, EIP , ES I , EDI , ESP , EBP , EFLAGS 


/REGS may be used as a synonym for /REGISTERS. 

/RETEP 

specifies that for each public entry-point in the MAP file, a return tracepoint should be generated using the RETEP 
parameter of the TRACE statement in the TSF. 

/TYPES 

specifies that generated tracepoints are to be assigned one or more of the following pre-defined types: 

PUB Public routines - names the begin upper case (ignoring leading underscores) 

PRIV Private routines - names the begin lower case (ignoring leading underscores) 

PRE Entry tracepoint. 

POST Exit tracepoint. 

/GROUPS 

Requests that each of the strings listed be used to define a group. Tracepoints are assigned to a group according to 
whether a group name matches the beginning of the tracepoint name, ignoring case and leading underscore 
characters 

/TEMPLATE 

specifies a file where up to four template tracepoint definitions may be specified, one for each of the following 
categories: 

16-bit entry points 
16-bit return points 
32-bit entry points 


32-bit return points 



The definitions are in a shortened form of the TRCUST TRACE statement syntax. They are appended to each 
tracepoint of the category to which they apply. All parameters other than MINOR and DESC are permissible. TP and 
RETEP are specified as follows: 


TP=@16 
TP=@16, RETEP 
TP=@32 
TP=@32, RETEP 


signifies a 16-bit 
signifies a 16-bit 
signifies a 32-bit 
signifies a 32-bit 


Only TP and RETEP may appear on the same line 
For example: 


entry-point 

return-point 

entry-point 

return-point 

as the TRACE keyword. 


TRACE TP=0 1 6 

MEM= (SS :BP+8, I, 0x10) 

FMT=" 1 6-bytes of parameter 1: %R%W" 


will append 


MEM= (SS :BP+8, I, 0x10) 

FMT=" 1 6-bytes of parameter 1: %R%W" 


to every 16-bit entry tracepoint definition. 


System Tracepoints Reference 


This chapter documents all static and dynamic tracepoints that are defined in the base OS/2 system code. 

Tracepoint definitions are listed in the section: Trace Event Major and Minor Code Assignments. Each tracepoint listing is divided into the 
following six fields: 

Event Description 

A description of the event that is being captured (for example, DosOpen Pre-invocation) 

Tracepoint 

The public symbol or relative location at which the tracepoint is defined. 

Minor Code 

The minor trace code that is associated with the event 

Type 

A qualifier that can be used within the Trace control utility to enable or disable sets of dynamic tracepoints with a 
single command. Type Qualifiers are discussed in more detail in a following section. 

Group 

A second type of qualifier that can be used within the Trace control utility to enable or disable sets of dynamic 
tracepoints with a single command. Group Qualifiers are discussed in more detail in a following section. 

Parameters 

The data that is logged by the tracepoint. Parameter Notation is discussed in more detail in a following section. 

For information on defining tracepoints consult the following: 

• The dynamic trace customiser utility TRCUST 


The DosSysTrace API. 


Type Qualifiers 


The following Type identifiers are currently defined. They are intended to simplify the identification of components and to aid in selecting 
events to be traced: 

PRE A pre-invocation event 

POST A post-invocation event 

API An external interface 

INT An internal interface 

Typically, pairs of Type identifiers are used (for example, PRE and API). 


Group Qualifiers 


The following Group identifiers are currently defined. They are intended to simplify the identification of components and to aid in selecting 
events to be traced: 

EXMG Exception Management 

FS File System 

10 Device I/O 

KBD Keyboard 

LDR Loader 

LNK Environment 

LOCK SMP Spink Locks 

MOU Mouse 

MSP Memory Suballocation 

NLS National Language Services 

PIP Pipes 

QUE Queues 

SEL Selector Management 

SEM Semaphores 

SIG Signals 

TIM Timers 

TK Tasking 

UT UnitThunk Processing 

VIO Video I/O 

VM Virtual Memory Management 


Parameter Format Notation 


The Parameter portion of a tracepoint listing typically includes both fixed descriptive ASCII strings and variable format descriptors. The 
following list enumerates the classes of format descriptors that are encountered in the tracepoint listings: 

%A Output a segmented (1 6:1 6) address (32 bits) 

%B Output a byte (8 bits) of data 

%D Output A double word (32 bits) of data 

%F Output a flat (0:32) address (32 bits) 

%Q Output a quad word (64 bits) of data 

%S Output an ASCIIZ string (which is "n" bytes terminated by OOh) 

%U Format the remainder of the trace record as a sequence of bytes 

%W Output a word (1 6 bits) of data 

%X Output the major event code 

%Y Output the minor event code 


A number preceding one of the above specifies a sequence of that type. 


DosXxxx API Pre-invocation Tracepoints. 


From OS/2 Warp V3.0 fix pack 30 and OS/2 Warp V4.0 fix pack 10 all system API pre-invocation tracepoints have been updated to log the 
caller's return address. In most cases the meaning of this information is self-evident and the original tracepoint definition has been updated 
to include a line that displays as follows: 

32-bit API: 

Return address = %F 
16-bit API: 

Return address = %W:%W 

Special consideration needs to be given to APIs involving the KERNEL, SESMGR and QUECALLS. These are APIs the use the Dos prefix 
in their names and my indirect though DOSCALL1 . 

The following topics describe each of these cases: 

Tracing Kernel API Return Information 

Tracing Session Manager API return information 

Tracing Queue Calls API return information 


Tracing Kernel API Return Information 

Kernel APIs 

There three schemes that operate when kernel API is called: 


Direct call: 
APPL 

< 


> KERNEL 


Indirect call, direct return: 


APPL > DOSCALL1 

< 


> KERNEL 


Indirect call, indirect return: 


APPL > DOSCALL1 > KERNEL 

< DOSCALL1 < 


Direct Calls: 


Kernel APIs are entered directly from the application. Return information is logged in the following format: 


32-bit API: 


Return EIP=%F CS=%W 
16-bit API: 

Return IP=%W CS=%W 


CS, EIP and IP refer to the return address in the application. 

Use TRACE ON KERNEL(....) to trace these APIs. 

Indirect call, direct return: 

32-bit Kernel APIs are preprocessed by DOSCALL1 but are returned to directly from the KERNEL. Return 
information is logged in the following format: 

32-bit API: 

Return EIP=%F CS=%W, Thunk EIP=%F 


Thunk EIP refers to the return address in to the application. Return EIP and CS refer to the return back to 
DOSCALL1 . In most cases the pre-invocation tracepoint is recoded after the kernel has updated the Return EIP with 
the Thunk EIP value and they will have the same value. 

Use TRACE ON KERNEL(....) to trace these APIs. 

Indirect call, Indirect return: 


32-bit APIs are pre- and post-processed by DOSCALL1 . Parameters are logged by the kernel tracepoint, but the 
return address will only show the direct return back to DOSCALL1 . For each API of this form a pre-invocation API in 
DOSCALL1 has been defined that logs just the return address back to the application. For example, the following 
shows DosSleep entry to the Kernel, preceded by Dos32Sleep entry to DOSCALL1 : 


(OS) DosSleep Pre-Invocation 

Event [10] Major [5/0x0005] Minor [307/0x0133] PID [38/0x0026] Length [18] Time [18:07:32 
Return EIP=0000C361 CS=DFD7 
Timeout Interval = 0000 0000 

(OS) Dos32Sleep Pre-Invocation 

Event [11] Major [16/0x0010] Minor [267/0x010b] PID [38/0x0026] Length [7] Time [18:07:32 
Return address = 1BDFAA63 


For a list of kernel APIs indirected through DOSCALL1 see: Kernel API Tracepoints Indirected Via DOSCALL1 . 


Tracing Session Manager API return information 

SESMGR APIs 

SESMGR APIs are entered either directly or indirectly via a SESMGR thunking layer as shown below: 


Direct call: 


APPL 


> SESMGR 


Thunked call: 


APPL > SESMGR Thunk Layer > SESMGR 

< SESMGR Thunk Layer < 


Direct Calls: 


Used for 1 6-bit APIs. Use TRACE ON SESMGR(....) for tracing APIs and return information. 


Thunked Calls: 


Used for 32-bit SESMGR APIs. Trace the 16-bit SESMGR API with the 32-bit SESMGR API to record the return 
information to the original 32-bit caller. For example, to trace the return information and parameters to 
DosStartSession from a 32-bit caller use: TRACE ON SESMGR(20, 34, 32788). The following is an example of the 
traced output: 


(OS) DosStartSession Post-Invocation 

Event [8] Major [23/0x0017] Minor [32788/0x8014] PID [62/0x003e] Length [12] Time [10:44: 

New Process Id = 0000 

New Session = fOOOO 

Return Code = 0000 

(OS) DosStartSession Pre-Invocation 

Event [16] Major [23/0x0017] Minor [20/0x0014] PID [62/0x003e] Length [60] Time [10:44:22 

Return address = DFD7:BD0C 

Start Data = 0032 0000 0000 0000 62D4 004F 2B54 004F CA10 045F 0000 0000 00 

0000 0000 0000 0000 0000 0000 0000 0000 0000 

(OS) Dos32StartSession Pre-Invocation 

Event [17] Major [23/0x0017] Minor [34/0x0022] PID [62/0x003e] Length [7] Time [10:44:22. 

Return address = 0002E7E2 


In this example the return address to the 32-bit application is given in minor code 34. 
For a list of indirected SESMR APIs see: Indirected Session Manager API Tracepoints. 


Tracing Queue Calls API return information 

QUECALLS APIs 

QUECALLS APIs are entered indirectly via DOSCALL1 as shown below: 

APPL > DOSCALL1 > QUECALLS 

< DOSCALL1 < 

To trace QUECALLS API parameters and results use TRACE ON QUECALLS( ). To trace the API return addresses use TRACE ON 

DOSCALL1 ( ). 

Note: The QUECALLS entry points in DOSCALL1 have been grouped using group id QUE. All the API return addresses may be traced by 
specifying TRACE ON DOSCALL1 (QUE). 


The following is an example of QUECALLS traced output activated using 


TRACE ON DOSCALL1 (QUE) 
TRACE ON QUECALLS 


(OS) DosReadQueue Pre-Invocation 

Event [1] Major [22/0x0016] Minor [7/0x0007] PID [109/0x006d] Length [21] Time [10:58:14.97] 

Handle=0014 Element Code=0000 

Semaphore Handle=0027 75E4 No Wait Flag=00 

(OS) Dosl6ReadQueue Pre-Invocation 

Event [2] Major [16/0x0010] Minor [360/0x0168] PID [109/0x006d] Length [7] Time [10:58:14.97] 
Return address = 000F:47EC 


In this example the return address to the 16-bit caller is given in minor code 360 of DOSCALL1 . 

For a list of indirected QUECALLS tracepoits see: QUECALLS API Tracepoints Indirected Via DOSCALL1 . 


Trace Event Major and Minor Code Assignments 


This section lists the overall assignment of major codes for the kernel and related subsystems supported by the trace facility. 


Usage Major Code 


System Trace internally generated events 

00 


Dekko performance tracepoints 

01 


Reserved 

02 


Machine Exceptions 

03 


Hardware Interrupts 

04 


Kernel Services (KERNEL) 

05 


Device Helper Services 

06 


Miscellaneous Kernel Events 

07 


Resource Manager Events (RESOURCE . SYS) 

08 


Reserved 

09 - 

15 

Kernel Services (D0SCALL1.DLL) 

16 


Monitor Call Services (MONCALLS . DLL) 

16 


Reserved 

17 - 

21 

Queue Services (QUECALLS.DLL) 

22 


Session Manager Services (SESMGR.DLL) 

23 


Character I/O Services (OS2CHAR.DLL) 

24 


Reserved 

25 - 

108 

Multi-Media Extensions 

109 


Reserved 

110 ■ 

- 137 


DCAF (Distributed Console Access 
Facility) 

138 


Reserved 

139 - 

150 

IBM LAN Manager (RTP ) 

151 


EE LAN Requestor 

152 - 

159 

Communications Manager APPC 

160 


Communications Manager 3270 Emulator 

161 


Communications Manager Async 

162 


Communications Manager SRPI/DLC 

163 


Communications Manager 

164 - 

167 

Reserved 

168 


Communications Manager 

169 


Reserved 

170 - 

171 

Communications Manager 

172 - 

175 

DataBase Manager 

176 - 

191 

PM Shell API (PMSHAPI.DLL) 

192 


Reserved 

193 


PM Window Management (PMWIN.DLL) 

194 


PM Graphics Engine (PMGRE.DLL) 

195 


PM Picture Interchange (PMPIC.DLL) 

196 


PM Graphics Programming Interfaces 
(PMGPI.DLL) 

197 


PM Print Spooler (PMSPL.DLL) 

198 


199 - 212 

Reserved 

Transmission Network Manager 

212 


Reserved 

213 


DBM Archival Logging 

222 - 

225 

DBM Query Manager 

226 - 

235 

User Profile Management 

236 - 

237 

238 - 241 

Reserved 

LAN Station Manager 

242 


Reserved 

243 


TCP/IP 

244 


Available for Temporary Application Use 

245 - 

255 

Kernel Device Manager Internal 
Tracepoints 

256 


Kernel File System Manager Internal 
Tracepoints 

257 


Kernel Virtual DOS Machine Manager 
Internal Tracepoints 

258 



Kernel Module Loader and Manager 
Internal Tracepoints 


259 


Kernel Page Manager Internal Tracepoints 260 


Kernel Scheduler and Task Manager 
Internal Tracepoints 

261 


Kernel Swap File Manager Internal 
Tracepoints 

262 


Kernel Selector Manager Internal 
Tracepoints 

263 


Kernel Virtual Memory Manager Internal 
Tracepoints 

264 


Kernel Semaphore Manager Internal 
Tracepoints 

265 


Kernel Timer Manager Internal 
Tracepoints 

266 


Reserved 

247 - 

279 

HPFS Internal Tracepoints 

280 


CDFS Internal Tracepoints 

281 


Reserved 

282 - 

299 

PMVDMP Interfaces 

300 


PMVIOP Interfaces 

301 


PMWP Interfaces 

302 


JFS Internal Tracepoints 

303 


TRCUST Internal Tracepoints 

304 


Reserved 

305 - 

385 

HPFS386 Internal Tracepoints 

386 


Reserved 

387 - 
0x7 f f f 


Available for User and Vendor Use 

0x8000 

Oxffff 

- 


Trace Event Major Code Assignments 


Machine Exceptions Trace Events 


The tracepoints for the Machine Exceptions major code are identified in the following table. These tracepoints are static tracepoints. They 
are compiled with the code. 

Trace events for EXCEPT Major Code: 0X0003, sorted by minor code. 

Trace events for EXCEPT Major Code: 0X0003 .sorted by tracepoint. 


Trace Events for EXCEPT Major Code: 0X0003, Sorted by 
Minor Code 


00001 

00002 

00003 

00004 

00005 

00006 

00007 

00008 

00009 

00010 
00011 
00012 

00013 

00014 

00015 


(0X0001) (OS) Machine Exception 
(0X0002) (OS) Machine Exception 
(0X0003) (OS) Machine Exception 
(0X0004) (OS) Machine Exception 
(0X0005) (OS) Machine Exception 
(0X0006) (OS) Machine Exception 
(0X0007) (OS) Machine Exception 
(0X0008) (OS) Machine Exception 
(0X0009) (OS) Machine Exception 
(0X000A) (OS) Machine Exception 
(0X000B) (OS) Machine Exception 
(0X000C) (OS) Machine Exception 
(0X000D) (OS) Machine Exception 
(0X000E) (OS) Machine Exception 
(0X000F) (OS) Machine Exception 


00 - Divide by 0 

01 - Single Step 

02 - NMI 

03 - Breakpoint 

04 - Overflow 

05 - Bounds Check 

06 - Invalid Opcode 

07 - Coprocessor Not Available 

08 - Double Fault 

09 - Reserved 
0a - Invalid TSS 

0b - Segment Not Present 
0c - Stack Exception 
Od - General Protection 
Oe - Page Fault 


Trace Events for EXCEPT Major Code: 0X0003, Sorted by 
Tracepoint 


(OS) Machine Exception 00 
(OS) Machine Exception 01 
(OS) Machine Exception 02 
(OS) Machine Exception 03 
(OS) Machine Exception 04 
(OS) Machine Exception 05 
(OS) Machine Exception 06 
(OS) Machine Exception 07 
(OS) Machine Exception 08 
(OS) Machine Exception 09 
(OS) Machine Exception 0a 
(OS) Machine Exception 0b 
(OS) Machine Exception 0c 
(OS) Machine Exception Od 
(OS) Machine Exception Oe 


Divide by 0 00001 (0X0001) 

Single Step 00002 (0X0002) 

NMI 00003 (0X0003) 

Breakpoint 00004 (0X0004) 

Overflow 00005 (0X0005) 

Bounds Check 00006 (0X0006) 

Invalid Opcode 00007 (0X0007) 
Coprocessor Not Available 00008 (0X0008) 
Double Fault 00009 (0X0009) 

Reserved 00010 (0X000A) 

Invalid TSS 0001 1 (0X000B) 

Segment Not Present 00012 (0X000C) 
Stack Exception 00013 (0X000D) 

General Protection 00014 (0X000E) 

Page Fault 00015 (0X000F) 


EXCEPT Major Code: 0X0003 Minor code: 1 (0X0001) 


Description 

(OS) Machine Exception 00 - Divide by 0 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 2 (0X0002) 


Description 

(OS) Machine Exception 01 - Single Step 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 3 (0X0003) 


Description 

(OS) Machine Exception 02 - NMI 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

3 (0X0003) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 4 (0X0004) 


Description 

(OS) Machine Exception 03 - Breakpoint 

Tracepoint 


Static tracepoint in EXCEPT. 



Minor code 


4 (0X0004) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 5 (0X0005) 


Description 

(OS) Machine Exception 04 - Overflow 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 6 (0X0006) 


Description 

(OS) Machine Exception 05 - Bounds Check 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 



EXCEPT Major Code: 0X0003 Minor code: 7 (0X0007) 


Description 

(OS) Machine Exception 06 - Invalid Opcode 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

7 (0X0007) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 8 (0X0008) 


Description 

(OS) Machine Exception 07 - Coprocessor Not Available 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

8 (0X0008) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 9 (0X0009) 


Description 

(OS) Machine Exception 08 - Double Fault 

Tracepoint 


Static tracepoint in EXCEPT. 



Minor code 


9 (0X0009) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 10 (0X000A) 


Description 

(OS) Machine Exception 09 - Reserved 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

10 (0X0O0A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 1 1 (0X000B) 


Description 

(OS) Machine Exception 0a - Invalid TSS 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

11 (0X000B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 



EXCEPT Major Code: 0X0003 Minor code: 12 (0X000C) 


Description 

(OS) Machine Exception Ob - Segment Not Present 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

12 (OXOOOC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 13 (0X000D) 


Description 

(OS) Machine Exception Oc - Stack Exception 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

13 (OXOOOD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 14 (0X000E) 


Description 

(OS) Machine Exception Od - General Protection 

Tracepoint 


Static tracepoint in EXCEPT. 



Minor code 


14 (0X000E) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 


EXCEPT Major Code: 0X0003 Minor code: 15 (0X000F) 


Description 

(OS) Machine Exception Oe - Page Fault 

Tracepoint 

Static tracepoint in EXCEPT. 

Minor code 

15 (0X000F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Error Code = %D, CS:EIP = %Q, EFIags = %D 
Page Fault Linear Address (CR2) = %F 


Hardware Interrupts Trace Events 

The tracepoints for the Flardware Interrupts major code are identified in the following tables. These tracepoints are static tracepoints. They 
are compiled with the code. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for INT Major Code: 0X0004, sorted by minor code. 
Trace events for INT Major Code: 0X0004 , sorted by tracepoint. 


Trace Events for INT Major Code: 0X0004, Sorted by Minor 
Code 


00001 

00002 

00003 

00004 

00005 

00006 

00007 

00008 

00009 

00010 
00011 
00012 

00013 

00014 

00015 

00016 

00017 

00018 

00019 

00020 
00021 
00022 

00023 

00024 

00025 

00026 

00027 

00028 

00029 

00030 

00031 

00032 

00129 

00130 

00131 

00132 

00133 

00134 

00135 

00136 

00137 

00138 

00139 

00140 

00141 

00142 

00143 

00144 

00145 

00146 

00147 

00148 

00149 

00150 

00151 

00152 

00153 

00154 

00155 

00156 

00157 

00158 

00159 

00160 


(0X0001) (OS) 
(0X0002) (OS) 
(0X0003) (OS) 
(0X0004) (OS) 
(0X0005) (OS) 
(0X0006) (OS) 
(0X0007) (OS) 
(0X0008) (OS) 
(0X0009) (OS) 
(0X000A) (OS) 
(0X000B) (OS) 
(0X000C) (OS) 
(0X000D) (OS) 
(0X000E) (OS) 
(0X000F) (OS) 
(0X0010) (OS) 
(0X0011) (OS) 
(0X0012) (OS) 
(0X0013) (OS) 
(0X0014) (OS) 
(0X0015) (OS) 
(0X0016) (OS) 
(0X0017) (OS) 
(0X0018) (OS) 
(0X0019) (OS) 
(0X001 A) (OS) 
(0X001 B) (OS) 
(0X001 C) (OS) 
(0X001 D) (OS) 
(0X001 E) (OS) 
(0X001 F) (OS) 
(0X0020) (OS) 
(0X0081) (OS) 
(0X0082) (OS) 
(0X0083) (OS) 
(0X0084) (OS) 
(0X0085) (OS) 
(0X0086) (OS) 
(0X0087) (OS) 
(0X0088) (OS) 
(0X0089) (OS) 
(OX008A) (OS) 
(0X008B) (OS) 
(0X008C) (OS) 
(0X008D) (OS) 
(0X008E) (OS) 
(0X008F) (OS) 
(0X0090) (OS) 
(0X0091) (OS) 
(0X0092) (OS) 
(0X0093) (OS) 
(0X0094) (OS) 
(0X0095) (OS) 
(0X0096) (OS) 
(0X0097) (OS) 
(0X0098) (OS) 
(0X0099) (OS) 
(0X009A) (OS) 
(0X009B) (OS) 
(0X009C) (OS) 
(0X009D) (OS) 
(0X009E) (OS) 
(0X009F) (OS) 
(0XO0A0) (OS) 


Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 
Flardware Interrupt 


Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Pre-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 

Post-Invocation 


Trace Events for INT Major Code: 0X0004, Sorted by 


Tracepoint 


(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 
(OS) Hardware 


Interrupt Post-Invocation 00129 (0X0081) 
Interrupt Post-Invocation 00130 (0X0082) 
Interrupt Post-Invocation 00131 (0X0083) 
Interrupt Post-Invocation 00132 (0X0084) 
Interrupt Post-Invocation 00133 (0X0085) 
Interrupt Post-Invocation 00134 (0X0086) 
Interrupt Post-Invocation 00135 (0X0087) 
Interrupt Post-Invocation 00136 (0X0088) 
Interrupt Post-Invocation 00137 (0X0089) 
Interrupt Post-Invocation 00138 (0X008A) 
Interrupt Post-Invocation 00139 (0X008B) 
Interrupt Post-Invocation 00140 (0X008C) 
Interrupt Post-Invocation 00141 (0X008D) 
Interrupt Post-Invocation 00142 (0X008E) 
Interrupt Post-Invocation 00143 (0X008F) 
Interrupt Post-Invocation 00144 (0X0090) 
Interrupt Post-Invocation 00145 (0X0091) 
Interrupt Post-Invocation 00146 (0X0092) 
Interrupt Post-Invocation 00147 (0X0093) 
Interrupt Post-Invocation 00148 (0X0094) 
Interrupt Post-Invocation 00149 (0X0095) 
Interrupt Post-Invocation 00150 (0X0096) 
Interrupt Post-Invocation 00151 (0X0097) 
Interrupt Post-Invocation 00152 (0X0098) 
Interrupt Post-Invocation 00153 (0X0099) 
Interrupt Post-Invocation 00154 (0X009A) 
Interrupt Post-Invocation 00155 (0X009B) 
Interrupt Post-Invocation 00156 (0X009C) 
Interrupt Post-Invocation 00157 (0X009D) 
Interrupt Post-Invocation 00158 (0X009E) 
Interrupt Post-Invocation 00159 (0X009F) 
Interrupt Post-Invocation 00160 (0X00A0) 
Interrupt Pre-Invocation 00001 (0X0001) 
Interrupt Pre-Invocation 00002 (0X0002) 
Interrupt Pre-Invocation 00003 (0X0003) 
Interrupt Pre-Invocation 00004 (0X0004) 
Interrupt Pre-Invocation 00005 (0X0005) 
Interrupt Pre-Invocation 00006 (0X0006) 
Interrupt Pre-Invocation 00007 (0X0007) 
Interrupt Pre-Invocation 00008 (0X0008) 
Interrupt Pre-Invocation 00009 (0X0009) 
Interrupt Pre-Invocation 00010 (0X000A) 
Interrupt Pre-Invocation 0001 1 (0X000B) 
Interrupt Pre-Invocation 00012 (0X000C) 
Interrupt Pre-Invocation 00013 (0X000D) 
Interrupt Pre-Invocation 00014 (0X000E) 
Interrupt Pre-Invocation 00015 (0X000F) 
Interrupt Pre-Invocation 00016 (0X0010) 
Interrupt Pre-Invocation 00017 (0X0011) 
Interrupt Pre-Invocation 00018 (0X0012) 
Interrupt Pre-Invocation 00019 (0X0013) 
Interrupt Pre-Invocation 00020 (0X0014) 
Interrupt Pre-Invocation 00021 (0X0015) 
Interrupt Pre-Invocation 00022 (0X0016) 
Interrupt Pre-Invocation 00023 (0X0017) 
Interrupt Pre-Invocation 00024 (0X0018) 
Interrupt Pre-Invocation 00025 (0X0019) 
Interrupt Pre-Invocation 00026 (0X001 A) 
Interrupt Pre-Invocation 00027 (0X001 B) 
Interrupt Pre-Invocation 00028 (0X001 C) 
Interrupt Pre-Invocation 00029 (0X001 D) 
Interrupt Pre-Invocation 00030 (0X001 E) 
Interrupt Pre-Invocation 00031 (0X001 F) 
Interrupt Pre-Invocation 00032 (0X0020) 


INT Major Code: 0X0004 Minor Code: 1 (0X0001) 

(OS) Hardware Interrupt Pre-Invocation 
Static tracepoint in INT. 

1 (0X0001) 

No groups assigned. 

PRE 

Interrupt Level=0 (Timer) 


INT Major Code: 0X0004 Minor Code: 2 (0X0002) 

(OS) Hardware Interrupt Pre-Invocation 
Static tracepoint in INT. 

2 (0X0002) 

No groups assigned. 

PRE 

Interrupt Level=1 (Keyboard) 


INT Major Code: 0X0004 Minor Code: 3 (0X0003) 

(OS) Hardware Interrupt Pre-Invocation 
Static tracepoint in INT. 





Minor Code 



3 (0X0003) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=2 (NMI) 


INT Major Code: 0X0004 Minor Code: 4 (0X0004) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

4 (0X0004) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=3 (Serial Port 2) 


INT Major Code: 0X0004 Minor Code: 5 (0X0005) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=4 (Serial Port 1) 



INT Major Code: 0X0004 Minor Code: 6 (0X0006) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=5 (Parallel Port 2) 


INT Major Code: 0X0004 Minor Code: 7 (0X0007) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

7 (0X0007) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=6 (Diskette Controller) 


INT Major Code: 0X0004 Minor Code: 8 (0X0008) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


8 (0X0008) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=7 (Parallel Port 1) 


INT Major Code: 0X0004 Minor Code: 9 (0X0009) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=8 (Realtime Clock) 


INT Major Code: 0X0004 Minor Code: 10 (0X000A) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

10 (0X0O0A) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=9 



INT Major 

Code: 0X0004 Minor Code: 1 1 (0X000B) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

11 (0X0O0B) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 

Interrupt Level=A 

INT Major 

Code: 0X0004 Minor Code: 12 (0X000C) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

12 (OXOOOC) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 



Interrupt Level=B 


INT Major Code: 0X0004 Minor Code: 13 (0X000D) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


13 (0X000D) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=C 


INT Major Code: 0X0004 Minor Code: 14 (0X000E) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

14 (OXOOOE) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=D (Coprocessor) 


INT Major Code: 0X0004 Minor Code: 15 (0X000F) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

15 (OXOOOF) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=E (Fixed Disk Controller) 



INT Major 

Code: 0X0004 Minor Code: 16 (0X0010) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

16 (0X0010) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 

Interrupt Level=F 

INT Major 

Code: 0X0004 Minor Code: 1 7 (0X001 1 ) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

17 (0X0011) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 



Interrupt Level=10 


INT Major Code: 0X0004 Minor Code: 18 (0X0012) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


18 (0X0012) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=1 1 


INT Major Code: 0X0004 Minor Code: 19 (0X0013) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

19 (0X0013) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=12 


INT Major Code: 0X0004 Minor Code: 20 (0X0014) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

20 (0X0014) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=13 



INT Major 

Code: 0X0004 Minor Code: 21 (0X0015) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

21 (0X0015) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 

Interrupt Level=14 

INT Major 

Code: 0X0004 Minor Code: 22 (0X0016) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

22 (0X0016) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 



Interrupt Level=15 


INT Major Code: 0X0004 Minor Code: 23 (0X0017) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


23 (0X0017) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=16 


INT Major Code: 0X0004 Minor Code: 24 (0X0018) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

24 (0X0018) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=17 


INT Major Code: 0X0004 Minor Code: 25 (0X0019) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

25 (0X0019) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=18 



INT Major 

Code: 0X0004 Minor Code: 26 (0X001 A) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

26 (0X001 A) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 

Interrupt Level=19 

INT Major 

Code: 0X0004 Minor Code: 27 (0X001 B) 

Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

27 (0X001 B) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 



Interrupt Level=1 A 


INT Major Code: 0X0004 Minor Code: 28 (0X001 C) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


28 (0X001 C) 


Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=1 B 


INT Major Code: 0X0004 Minor Code: 29 (0X001 D) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

29 (0X001 D) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=1C 


INT Major Code: 0X0004 Minor Code: 30 (0X001 E) 


Description 

(OS) Hardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

30 (0X001 E) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Interrupt Level=1 D 



INT Major 

Code: 0X0004 Minor Code: 31 (0X001 F) 

Description 

(OS) Flardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

31 (0X001 F) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 

Interrupt Level=1 E 

INT Major 

Code: 0X0004 Minor Code: 32 (0X0020) 

Description 

(OS) Flardware Interrupt Pre-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

32 (0X0020) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

PRE 

Traced Parameters 



Interrupt Level=1 F 


INT Major Code: 0X0004 Minor Code: 129 (0X0081) 


Description 

(OS) Flardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


129 (0X0081) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=0 (Timer) 


INT Major Code: 0X0004 Minor Code: 130 (0X0082) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

130 (0X0082) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1 (Keyboard) 


INT Major Code: 0X0004 Minor Code: 131 (0X0083) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

131 (0X0083) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=2 (NMI) 



INT Major Code: 0X0004 Minor Code: 132 (0X0084) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

132 (0X0084) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=3 (Serial Port 2) 


INT Major Code: 0X0004 Minor Code: 133 (0X0085) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

133 (0X0085) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=4 (Serial Port 1) 


INT Major Code: 0X0004 Minor Code: 134 (0X0086) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


134 (0X0086) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=5 (Parallel Port 2) 


INT Major Code: 0X0004 Minor Code: 135 (0X0087) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

135 (0X0087) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=6 (Diskette Controller) 


INT Major Code: 0X0004 Minor Code: 136 (0X0088) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

136 (0X0088) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=7 (Parallel Port 1) 



INT Major Code: 0X0004 Minor Code: 137 (0X0089) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

137 (0X0089) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=8 (Realtime Clock) 


INT Major Code: 0X0004 Minor Code: 138 (0X008A) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

138 (0X008A) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=9 


INT Major Code: 0X0004 Minor Code: 139 (0X008B) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


139 (0X008B) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=A 


INT Major Code: 0X0004 Minor Code: 140 (0X008C) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

140 (0X008C) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=B 


INT Major Code: 0X0004 Minor Code: 141 (0X008D) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

141 (0X008D) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=C 



INT Major Code: 0X0004 Minor Code: 142 (0X008E) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

142 (0X008E) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=D (Coprocessor) 


INT Major Code: 0X0004 Minor Code: 143 (0X008F) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

143 (0X008F) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=E (Fixed Disk Controller) 


INT Major Code: 0X0004 Minor Code: 144 (0X0090) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


144 (0X0090) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=F 


INT Major Code: 0X0004 Minor Code: 145 (0X0091) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

145 (0X0091) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=10 


INT Major Code: 0X0004 Minor Code: 146 (0X0092) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

146 (0X0092) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1 1 



INT Major Code: 0X0004 Minor Code: 147 (0X0093) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

147 (0X0093) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=12 


INT Major Code: 0X0004 Minor Code: 148 (0X0094) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

148 (0X0094) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=13 


INT Major Code: 0X0004 Minor Code: 149 (0X0095) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


149 (0X0095) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=14 


INT Major Code: 0X0004 Minor Code: 150 (0X0096) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

150 (0X0096) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=15 


INT Major Code: 0X0004 Minor Code: 151 (0X0097) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

151 (0X0097) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=16 



INT Major Code: 0X0004 Minor Code: 152 (0X0098) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

152 (0X0098) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=17 


INT Major Code: 0X0004 Minor Code: 153 (0X0099) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

153 (0X0099) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=18 


INT Major Code: 0X0004 Minor Code: 154 (0X009A) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


154 (0X009A) 


Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=19 


INT Major Code: 0X0004 Minor Code: 155 (0X009B) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

155 (0X009B) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1 A 


INT Major Code: 0X0004 Minor Code: 156 (0X009C) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

156 (0X009C) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1 B 



INT Major Code: 0X0004 Minor Code: 157 (0X009D) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

157 (0X009D) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1C 


INT Major Code: 0X0004 Minor Code: 158 (0X009E) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 

Static tracepoint in INT. 

Minor Code 

158 (0X009E) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Interrupt Level=1 D 


INT Major Code: 0X0004 Minor Code: 159 (0X009F) 


Description 

(OS) Hardware Interrupt Post-Invocation 

Tracepoint 


Static tracepoint in INT. 



Minor Code 


159 (0X009F) 


Trace GrouDS 

No groups assigned. 

Trace TvDes 
Traced Parameters 

POST 


Interrupt Level=1 E 


INT Major Code: 0X0004 Minor Code: 160 (0X00A0) 


Descriotion 

(OS) Hardware Interrupt Post-Invocation 

TraceDoint 

Static tracepoint in INT. 

Minor Code 

160 (0X00A0) 

Trace GrouDS 

No groups assigned. 

Trace TvDes 
Traced Parameters 

POST 


Interrupt Level=1 F 


KERNEL Services Trace Events 

The external API tracepoints for the KERNEL major code are identified in the following tables. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for OS2KRNL Major Code: 0X0005, sorted by minor code. 

Trace events for OS2KRNL Major Code: 0X0005 .sorted by tracepoint. 

Kernel API Tracepoints Indirected Via DOSCALL1 . 


Trace Events for OS2KRNL Major Code: 0X0005, Sorted by 
Minor Code 


00001 (0X0001) (OS) DosEnterCritSec Post-Invocation 

00002 (0X0002) (OS) DosExitCritSec Post-Invocation 

00003 (0X0003) (OS) DosHoldSignal Post-Invocation (2) 

00006 (0X0006) (OS) Dos32AliasMem Post-Invocation 

00007 (0X0007) (OS) Dos32AllocMem Post-Invocation 

00008 (0X0008) (OS) Dos32AllocProtectedMem Post-Invocation 

00009 (0X0009) (OS) Dos32AllocSharedMem Post-Invocation 

00010 (0X000A) (OS) Dos32CreateThread Post-Invocation 

0001 1 (0X000B) (OS) Dos32Debug Dos Post-Invocation 

00012 (0X000C) (OS) Dos32ExitList Dos Post- Invocation 

00013 (0X000D) (OS) Dos32FreeMem Post-Invocation 

00014 (0X000E) (OS) Dos32GetNamedSharedMem Post-Invocation 

00015 (0X000F) (OS) Dos32GetSharedMem Post-Invocation 

00016 (0X0010) (OS) Dos32GiveSharedMem Post-Invocation 

00017 (0X0011) (OS) Dos32QueryMem Post-Invocation 

00018 (0X0012) (OS) Dos32QueryMemState Post-Invocation 

00019 (0X0013) (OS) Dos32SetMem Post-Invocation 

00020 (0X0014) (OS) DosAllocFluge Post-Invocation 

00021 (0X0015) (OS) DosAllocProtFluge Post-Invocation 

00022 (0X0016) (OS) DosAllocProtSeg Post-Invocation 

00023 (0X0017) (OS) DosAllocSeg Post-Invocation 

00024 (0X0018) (OS) DosAllocShrProtSeg Post-Invocation 

00025 (0X0019) (OS) DosAllocShrSeg Post-Invocation 

00026 (0X001 A) (OS) DosBeep Post-Invocation 

00027 (0X001 B) (OS) DosBufReset Post-Invocation 

00028 (0X001 C) (OS) DosCalINmPipe Post-Invocation 

00029 (0X001 D) (OS) DosChDir Post-Invocation 

00030 (0X001 E) (OS) DosChgFilePtr Post-Invocation 

00031 (0X001 F) (OS) DosCliAccess Post-Invocation 

00032 (0X0020) (OS) DosClose Post-Invocation 

00033 (0X0021) (OS) DosCloseSem Post-Invocation 

00034 (0X0022) (OS) DosConnectNmPipe Post-Invocation 

00035 (0X0023) (OS) DosCreateCSAIias Post-Invocation 

00036 (0X0024) (OS) DosCreateSem Post-Invocation 

00037 (0X0025) (OS) DosCreateThread Post-Invocation 

00038 (0X0026) (OS) DosCWait Post-Invocation 

00039 (0X0027) (OS) DosDelete Post-Invocation 

00040 (0X0028) (OS) DosDevConfig Post-Invocation 

00041 (0X0029) (OS) DosDevloctl2 Post-Invocation 

00042 (0X002A) (OS) DosDevloctl Post-Invocation 

00043 (0X002B) (OS) DosDisConnectMmPipe Post-Invocation 

00044 (0X002C) (OS) DosDupHandle Post-Invocation 

00045 (0X002D) (OS) DosEditName Post-Invocation 
00047 (0X002F) (OS) DosError Pre-Invocation 
00049 (0X0031) (OS) Dos32Exit Dos Post-Invocation 

00051 (0X0033) (OS) Dos32ExitList Dos Post-Invocation 

00052 (0X0034) (OS) DosFilelO Post-Invocation 

00053 (0X0035) (OS) DosFileLocks Post-Invocation 

00054 (0X0036) (OS) DosFindClose Post-Invocation 

00055 (0X0037) (OS) DosFindFirst2 Post-Invocation 

00056 (0X0038) (OS) DosFindFirst Post-Invocation 

00057 (0X0039) (OS) DosFindFromName Post-Invocation 

00058 (0X003A) (OS) DosFindNext Post-Invocation 

00059 (0X003B) (OS) DosFindNotifyClose Post-Invocation 

00060 (0X003C) (OS) DosFindNotifyFirst Post-Invocation 

00061 (0X003D) (OS) DosFindNotifyNext Post-Invocation 

00062 (0X003E) (OS) DosFlagProcess Post-Invocation 

00063 (0X003F) (OS) DosFreeModule Post-Invocation 

00064 (0X0040) (OS) DosFreeSeg Post-Invocation 

00065 (0X0041) (OS) DosFSAttach Post-Invocation 

00066 (0X0042) (OS) DosFSCtl Post-Invocation 

00067 (0X0043) (OS) DosGetDateTime Post-Invocation 

00068 (0X0044) (OS) DosGetModHandle Post-Invocation 

00069 (0X0045) (OS) DosGetModName Post-Invocation 

00070 (0X0046) (OS) DosGetPid Post-Invocation 

00071 (0X0047) (OS) DosGetProcAddr Post-Invocation 

00072 (0X0048) (OS) DosGetPrty Post-Invocation 

00073 (0X0049) (OS) DosGetResource Post-Invocation 

00074 (OX004A) (OS) DosGetSeg Post-Invocation 

00075 (0X004B) (OS) DosGetShrSeg Post-Invocation 

00076 (0X004C) (OS) DosGetVersion Post-Invocation 

00077 (0X004D) (OS) DosGiveSeg Post-Invocation 

00078 (0X004E) (OS) DosHoldSignal Post-Invocation 


00079 (0X004F) (OS) DosICopy Post-Invocation 

00080 (0X0050) (OS) DoslExecPgm Post-Invocation 

00083 (0X0053) (OS) DosISetCP Post-Invocation 

00084 (0X0054) (OS) DosKillProcess Post-Invocation 

00085 (0X0055) (OS) DosLoadModule Post-Invocation 

00086 (0X0056) (OS) DosMakeNmPipe Post-Invocation 

00087 ( 0X0057) (OS) DosMakePipe Post-Invocation 

00088 (0X0058) (OS) DosMkDir2 Post-Invocation 

00089 (0X0059) (OS) DosMkDir Post-Invocation 

00095 (0X005F) (OS) DosMove Post-Invocation 

00096 (0X0060) (OS) DosMuxSemWait Post-Invocation (Waited) 

00097 (0X0061) (OS) DosNewSize Post-Invocation 

00098 (0X0062) (OS) DosOpen2 Post-Invocation 

00099 (0X0063) (OS) DosOpen Post-Invocation 

00100 (0X0064) (OS) DosOpenSem Post-Invocation 

00101 (0X0065) (OS) DosOpLockRelease Post-Invocation 

00102 (0X0066) (OS) DosOpLockWait Post-Invocation 

00103 (0X0067) (OS) DosPeekNmPipe Post-Invocation 

00104 (0X0068) (OS) DosPhysicalDisk Post-Invocation 

00105 (0X0069) (OS) DosQNmPipeState Post-Invocation 

00106 (0X006A) (OS) DosPortAccess Post-Invocation 

00108 (0X006C) (OS) DosQCurDir Post-Invocation 

00109 (0X006D) (OS) DosQCurDisk Post-Invocation 

00110 (0X006E) (OS) DosQFFIandState Post-Invocation 

00111 (0X006F) (OS) DosQFilelnfo Post-Invocation 

00112 (0X0070) (OS) DosQFileMode Post-Invocation 

00113 (0X0071) (OS) DosQFSAttach Post-Invocation 

00114 (0X0072) (OS) DosQFSInto Post-Invocation 

00115 (0X0073) (OS) DosQFIandType Post-Invocation 

00116 (0X0074) (OS) DosQNmPFIandState Post-Invocation 

00117 (0X0075) (OS) DosQNmPipelnfo Post-Invocation 

00118 (0X0076) (OS) DosQPathlnfo Post-Invocation 

00119 (0X0077) (OS) DosQSysInfo Post-Invocation 

00120 (0X0078) (OS) DosQVerify Post-Invocation 

00121 (0X0079) (OS) DosRawReadNmPipe Post-Invocation 

00122 (0X007A) (OS) DosRawWriteNmPipe Post-Invocation 

00123 (0X007B) (OS) DosIRead Post-Invocation 

00125 (0X007D) (OS) DosReallocFluge Post-Invocation 

00126 (0X007E) (OS) DosReallocSeg Post-Invocation 

00127 (0X007F) (OS) Dos32ResumeThread Dos Post-Invocation 

00128 (0X0080) (OS) DosRmDir Post-Invocation 

00129 (0X0081) (OS) DosSelectDisk Post-Invocation 
00133 (0X0085) (OS) DosSemSetWait Post-Invocation 
00135 (0X0087) (OS) DosSendSignal Post-Invocation 

00137 (0X0089) (OS) DosSetDateTime Post-Invocation 

00138 (0X008A) (OS) DosSetFFIandState Post-Invocation 

00139 (0X008B) (OS) DosSetFilelnfo Post-Invocation 

00140 (0X008C) (OS) DosSetFileMode Post-Invocation 

00141 (0X008D) (OS) DosSetFSInfo Post-Invocation 

00142 (0X008E) (OS) DosSetMaxFH Post-Invocation 

00143 (0X008F) (OS) DosSetNmPFIandState Post-Invocation 

00144 (0X0090) (OS) DosSetNmPipeSem Post-Invocation 

00145 (0X0091) (OS) DosSetPathlnfo Post-Invocation 

00146 (0X0092) (OS) DosSetPrty Post-Invocation 

00147 (0X0093) (OS) DosSetSigFlandler Post-Invocation 

00148 (0X0094) (OS) DosSetVec Post-Invocation 

00149 (0X0095) (OS) DosSetVerify Post-Invocation 

00150 (0X0096) (OS) DosSleep Post-Invocation 

00151 (0X0097) (OS) Dos32SuspendThread Dos Post-Invocation 

00152 (0X0098) (OS) DosSystemService Post-Invocation 

00153 (0X0099) (OS) DosTimerAsync Post-Invocation 

00154 (0X009A) (OS) DosTimerStart Post-Invocation 

00155 (0X009B) (OS) Dos32StopTimer Post-Invocation 

00156 (0X009C) (OS) DosTransactNmPipe Post-Invocation 

00157 (0X009D) (OS) DosWaitNmPipe Post-Invocation 

00158 (0X009E) (OS) DoslWrite Post-Invocation 

00163 (0X00A3) (OS) Dos32AliasMem Pre-Invocation 

00164 (0X00A4) (OS) Dos32AllocMem Pre-Invocation 

00165 (0X00A5) (OS) Dos32AllocProtectedMem Pre-Invocation 

00166 (0X00A6) (OS) Dos32AllocSharedMem Pre-Invocation 

00167 (0X00A7) (OS) Dos32CreateThread Pre-Invocation 

00168 (0X00A8) (OS) Dos32Debug Dos Pre-Invocation 

00169 (0X00A9) (OS) Dos32ExitList Dos Pre-Invocation 


00170 (0X00AA) (OS) Dos32FreeMem Pre-Invocation 

00171 (0X00AB) (OS) Dos32GetNamedSharedMem Pre-Invocation 

00172 (0X00AC) (OS) Dos32GetSharedMem Pre-Invocation 

00173 (0X00AD) (OS) Dos32GiveSharedMem Pre-Invocation 

00174 (0X00AE) (OS) Dos32QueryMem Pre-Invocation 

00175 (0X00AF) (OS) Dos32QueryMemState Pre-Invocation 

00176 (0X00B0) (OS) Dos32SetMem Pre-Invocation 

00177 (0X00B1) (OS) DosAllocFluge Pre-Invocation 

00178 (0X00B2) (OS) DosAllocProtFluge Pre-Invocation 

00179 (0X00B3) (OS) DosAllocProtSeg Pre-Invocation 

00180 (0X00B4) (OS) DosAllocSeg Pre-Invocation 

00181 (0X00B5) (OS) DosAllocShrProtSeg Pre-Invocation 

00182 (0X00B6) (OS) DosAllocShrSeg Pre-Invocation 

00183 (0X00B7) (OS) DosBeep Pre-Invocation 

00184 (0X00B8) (OS) DosBufReset Pre-Invocation 

00185 (0X00B9) (OS) DosCalINmPipe Pre-Invocation 

00186 (0X00BA) (OS) DosChDir Pre-Invocation 

00187 (0X00BB) (OS) DosChgFilePtr Pre-Invocation 

00188 (0X00BC) (OS) DosCliAccess Pre-Invocation 

00189 (0X00BD) (OS) DosClose Pre-Invocation 

00190 (0X00BE) (OS) DosCloseSem Pre-Invocation 

00191 (0X00BF) (OS) DosConnectNmPipe Pre-Invocation 

00192 (0X00C0) (OS) DosCreateCSAIias Pre-Invocation 

00193 (0X00C1) (OS) DosCreateSem Pre-Invocation 

00194 (0X00C2) (OS) DosCreateThread Pre-Invocation 

00195 (0X00C3) (OS) DosCWait Pre-Invocation 

00196 (0X00C4) (OS) DosDelete Pre-Invocation 

00197 (0X00C5) (OS) DosDevConfig Pre-Invocation 

00198 (0X00C6) (OS) DosDevloctl2 Pre-Invocation 

00199 (0X00C7) (OS) DosDevloctl Pre-Invocation 

00200 (0X00C8) (OS) DosDisConnectMmPipe Pre-Invocation 

00201 (0X00C9) (OS) DosDupHandle Pre-Invocation 

00202 (0X00CA) (OS) DosEditName Pre-Invocation 

00203 (0X00CB) (OS) DosEnterCritSec Pre-Invocation 

00204 (0X00CC) (OS) DosError Pre-Invocation 

00206 (0X00CE) (OS) DosExit Dos Pre-Invocation 

00207 (0X00CF) (OS) DosExitCritSec Pre-Invocation 

00208 (0X00D0) (OS) DosExitList Dos Pre-Invocation 

00209 (0X00D1) (OS) DosFilelO Pre-Invocation 

00210 (0X00D2) (OS) DosFileLocks Pre-Invocation 

00211 (0X00D3) (OS) DosFindClose Pre-Invocation 

00212 (0X00D4) (OS) DosFindFirst2 Pre-Invocation 

00213 (0X00D5) (OS) DosFindFirst Pre-Invocation 

00214 (0X00D6) (OS) DosFindFromName Pre-Invocation 

00215 (0X00D7) (OS) DosFindNext Pre-Invocation 

00216 (0X00D8) (OS) DosFindNotifyClose Pre-Invocation 

00217 (0X00D9) (OS) DosFindNotifyFirst Pre-Invocation 

00218 (0X00DA) (OS) DosFindNotifyNext Pre-Invocation 

00219 (0X00DB) (OS) DosFlag Process Pre-Invocation 

00220 (0X00DC) (OS) DosFreeModule Pre-Invocation 

00221 (0X00DD) (OS) DosFreeSeg Pre-Invocation 

00222 (0X00DE) (OS) DosFSAttach Pre-Invocation 

00223 (0X00DF) (OS) DosFSCtl Pre-Invocation 

00224 (0X00E0) (OS) DosGetDateTime Pre-Invocation 

00225 (0X00E1) (OS) DosGetModPlandle Pre-Invocation 

00226 (0X00E2) (OS) DosGetModName Pre-Invocation 

00227 (0X00E3) (OS) DosGetPid Pre-Invocation 

00228 (0X00E4) (OS) DosGetProcAddr Pre-Invocation 

00229 (0X00E5) (OS) DosGetPrty Pre-Invocation 

00230 (0X00E6) (OS) DosGetResource Pre-Invocation 

00231 (0X00E7) (OS) DosGetSeg Pre-Invocation 

00232 (0X00E8) (OS) DosGetShrSeg Pre-Invocation 

00233 (0X00E9) (OS) DosGetVersion Pre-Invocation 

00234 (0X00EA) (OS) DosGiveSeg Pre-Invocation 

00235 (0X00EB) (OS) DosHoldSignal Pre-Invocation 

00236 (0X00EC) (OS) DosICopy Pre-Invocation 

00237 (0X00ED) (OS) DoslExecPgm Pre-Invocation 

00240 (0X00F0) (OS) DosISetCP Pre-Invocation 

00241 (0X00F1) (OS) DosKillProcess Pre-Invocation 

00242 (0X00F2) (OS) DosLoadModule Pre-Invocation 

00243 (0X00F3) (OS) DosMakeNmPipe Pre-Invocation 

00244 (0X00F4) (OS) DosMakePipe Pre-Invocation 

00245 (0X00F5) (OS) DosMkDir2 Pre-Invocation 


00246 (0X00F6) (OS) DosMkDir Pre-Invocation 

00252 (0X00FC) (OS) DosMove Pre-Invocation 

00253 (0X00FD) (OS) DosMuxSemWait Pre-Invocation 

00254 (0X00FE) (OS) DosNewSize Pre-Invocation 

00255 (0X00FF) (OS) DosOpen2 Pre-Invocation 

00256 (0X0100) (OS) DosOpen Pre-Invocation 

00257 (0X0101) (OS) DosOpenSem Pre-Invocation 

00258 (0X0102) (OS) DosOpLockRelease Pre-Invocation 

00259 (0X0103) (OS) DosOpLockWait Pre-Invocation 

00260 (0X0104) (OS) DosPeekNmPipe Pre-Invocation 

00261 (0X0105) (OS) DosPhysicalDisk Pre-Invocation 

00262 (0X0106) (OS) DosQNmPipeState Pre-Invocation 

00263 (0X0107) (OS) DosPortAccess Pre-Invocation 

00265 (0X0109) (OS) DosQCurDir Pre-Invocation 

00266 (0X01 0A) (OS) DosQCurDisk Pre-Invocation 

00267 (0X01 0B) (OS) DosQFFIandState Pre-Invocation 

00268 (0X01 0C) (OS) DosQFilelnfo Pre-Invocation 

00269 (0X01 0D) (OS) DosQFileMode Pre-Invocation 

00270 ( 0X01 0E) (OS) DosQFSAttach Pre-Invocation 

00271 (0X01 OF) (OS) DosQFSInfo Pre-Invocation 

00272 (0X0110) (OS) DosQFIandType Pre-Invocation 

00273 (0X0111) (OS) DosQNmPFIandState Pre-Invocation 

00274 (0X0112) (OS) DosQNmPipelnfo Pre-Invocation 

00275 (0X0113) (OS) DosQPathlnfo Pre-Invocation 

00276 (0X0114) (OS) DosQSysInfo Pre-Invocation 

00277 (0X0115) (OS) DosQVerify Pre-Invocation 

00278 (0X0116) (OS) DosRawReadNmPipe Pre-Invocation 

00279 (0X0117) (OS) DosRawWriteNmPipe Pre-Invocation 

00280 (0X0118) (OS) DosIRead Pre-Invocation 

00282 (0X011 A) (OS) DosReallocHuge Pre-Invocation 

00283 (0X01 IB) (OS) DosReallocSeg Pre-Invocation 

00284 (0X01 1C) (OS) DosResumeThread Dos Pre-Invocation 

00285 (0X01 ID) (OS) DosRmDir Pre-Invocation 

00286 (0X01 1 E) (OS) DosSelectDisk Pre-Invocation 
00290 (0X0122) (OS) DosSemSetWait Pre-Invocation 
00292 (0X0124) (OS) DosSendSignal Pre-Invocation 

00294 (0X0126) (OS) DosSetDateTime Pre-Invocation 

00295 (0X0127) (OS) DosSetFFIandState Pre-Invocation 

00296 (0X0128) (OS) DosSetFilelnfo Pre-Invocation 

00297 (0X0129) (OS) DosSetFileMode Pre-Invocation 

00298 (0X01 2A) (OS) DosSetFSInfo Pre-Invocation 

00299 (0X01 2B) (OS) DosSetMaxFFI Pre-Invocation 

00300 (0X01 2C) (OS) DosSetNmPFIandState Pre-Invocation 

00301 (0X01 2D) (OS) DosSetNmPipeSem Pre-Invocation 

00302 (0X01 2E) (OS) DosSetPathlnfo Pre-Invocation 

00303 (0X01 2F) (OS) DosSetPrty Pre-Invocation 

00304 (0X0130) (OS) DosSetSigFlandler Pre-Invocation 

00305 (0X0131) (OS) DosSetVec Pre-Invocation 

00306 (0X0132) (OS) DosSetVerify Pre-Invocation 

00307 (0X0133) (OS) DosSleep Pre-Invocation 

00308 (0X0134) (OS) DosSuspendThread Dos Pre-Invocation 

00309 (0X0135) (OS) DosSystemService Pre-Invocation 

00310 (0X0136) (OS) DosTimerAsync Pre-Invocation 

00311 (0X0137) (OS) DosTimerStart Pre-Invocation 

00312 (0X0138) (OS) Dos32StopTimer Pre-Invocation 

00313 (0X0139) (OS) DosTransactNmPipe Pre-Invocation 

00314 (0X01 3A) (OS) DosWaitNmPipe Pre-Invocation 

00315 (0X01 3B) (OS) DoslWrite Pre-Invocation 

00323 (0X0143) (OS) DosGetResource2 Pre-Invocation 

00324 (0X0144) (OS) DosGetResource2 Post-Invocation 

00325 (0X0145) (OS) DosFreeResource Pre-Invocation 

00326 (0X0146) (OS) DosFreeResource Post-Invocation 

00327 (0X0147) (OS) Dos32GetResource Pre-Invocation 

00328 (0X0148) (OS) Dos32GetResource Post-Invocation 

00331 (0X01 4B) (OS) Dos32FreeRsource Pre-Invocation 

00332 (0X01 4C) (OS) Dos32FreeResource Post-Invocation 

00333 (0X01 4D) (OS) Dos32QueryProcAddr Pre-Invocation 

00334 (0X01 4E) (OS) Dos32QueryProcAddr Post-Invocation 

00335 (0X01 4F) (OS) Dos32CreateEventSem Pre-Invocation 

00336 (0X0150) (OS) Post-Invocation 

00337 (0X0151) (OS) Dos320penEventSem Pre-Invocation 

00338 (0X0152) (OS) Post-Invocation 

00339 (0X0153) (OS) Dos320penEventSem Pre-Invocation 


00340 (0X0154) (OS) Dos32CloseEventSem Post-Invocation 

00341 (0X0155) (OS) Dos32ResetEventSem Pre-Invocation 

00342 (0X0156) (OS) Dos32ResetEventSem Post-Invocation 

00343 (0X0157) (OS) Dos32PostEventSem Pre-Invocation 

00344 (0X0158) (OS) Dos32PostEventSem Post-Invocation 

00345 (0X0159) (OS) Dos32WaitEvenSem Pre-Invocation 

00346 (0X01 5A) (OS) Dos32WaitEventSem Post-Invocation 

00347 (0X01 5B) (OS) Dos32QueryEventSem Pre-Invocation 

00348 (0X01 5C) (OS) Dos32QueryEventSem Post-Invocation 

00349 (0X01 5D) (OS) Dos32CreateMutexSem Pre-Invocation 

00350 (0X01 5E) (OS) Dos32CreateMutexSem Post-Invocation 

00351 (0X01 5F) (OS) Dos320penMutexSem Pre-Invocation 

00352 (0X0160) (OS) Dos320penMutexSem Post-Invocation 

00353 (0X0161) (OS) Dos32CloseMutexSem Pre-Invocation 

00354 (0X0162) (OS) Dos32CloseMutexSem Post- Invocation 

00355 (0X0163) (OS) Dos32RequestMutexSem Pre-Invocation 

00356 (0X0164) (OS) Dos32RequestMutexSem Post-Invocation 

00357 (0X0165) (OS) Dos32ReleaseMutexSem Pre-Invocation 

00358 (0X0166) (OS) Dos32ReleaseMutexSem Post-Invocation 

00359 (0X0167) (OS) Dos32QueryMutexSem Pre-Invocation 

00360 (0X0168) (OS) Dos32QueryMutexSem Post-Invocation 

00361 (0X0169) (OS) Dos32CreateMuxWaitSem Pre-Invocation 

00362 (0X01 6A) (OS) Dos32CreateMuxWaitSem Post-Invocation 

00363 (0X01 6B) (OS) Dos320penMuxWaitSem Pre-Invocation 

00364 (0X01 6C) (OS) Dos320penMuxWaitSem Post-Invocation 

00365 (0X01 6D) (OS) Dos32CloseMuxWaitSem Pre-Invocation 

00366 (0X01 6E) (OS) Dos32CloseMuxWaitSem Post-Invocation 

00367 (0X01 6F) (OS) Dos32WaitMuxWaitSem Pre-Invocation 

00368 (0X0170) (OS) Dos32WaitMuxWaitSem Post-Invocation 

00369 (0X0171) (OS) Dos32AddMuxWaitSem Pre-Invocation 

00370 (0X0172) (OS) Dos32AddMuxWaitSem Post-Invocation 

00371 ( 0X0173) (OS) Dos32DeieteMuxWaitSem Pre-Invocation 

00372 (0X0174) (OS) Dos32DeleteMuxWaitSem Post- Invocation 

00373 (0X0175) (OS) Dos32QueryMuxWaitSem Pre-Invocation 

00374 (0X0176) (OS) Dos32QueryMuxWaitSem Post-Invocation 

00375 (0X0177) (OS) DosGetCP Pre-Invocation 

00376 (0X0178) (OS) DosGetCP Post-Invocation 

00377 (0X0179) (OS) Dos32AsyncTimer Pre-Invocation 

00378 (0X01 7A) (OS) Dos32AsyncTimer Post-Invocation 

00379 (0X01 7B) (OS) Dos32StartTimer Pre-Invocation 

00380 (0X01 7C) (OS) Dos32StartTimer Post-Invocation 

00391 (0X0187) (OS) Dos32WaitThread Pre-Invocation 

00392 (0X0188) (OS) Dos32WaitThread Post-Invocation 

00393 (0X0189) (OS) Cluster Allocate Pre-Invocation 

00394 (0X01 8A) (OS) Cluster Allocate Post-Invocation 

00395 (0X01 8B) (OS) Cluster Release Pre-Invocation 
00397 (0X01 8D) (OS) File Lock/Unlock Pre-Invocation 
00401 (0X0191) (OS) Thread Reschedule Post-Invocation 

00403 (0X0193) (OS) DosMuxSemWait Post-Invocation (No Wait) 

00404 (0X0194) (OS) DosEnumAttribute Pre-Invocation 

00405 (0X0195) (OS) DosEnumAttribute Post-Invocation 

00406 (0X0196) (OS) DosISetFilelnfo Pre-Invocation 

00407 (0X0197) (OS) DosISetFilelnfo Post-Invocation 

00408 (0X0198) (OS) DosISetPathlnfo Pre-Invocation 

00409 (0X0199) (OS) DosISetPathlnfo Post-Invocation 

00410 (0X01 9A) (OS) Dos32QueryResource Pre-Invocation 

00411 (0X01 9B) (OS) Dos32QueryResourceSize Post-Invocation 

00412 (0X01 9C) (OS) DosIDevloctl Pre-Invocation 

00413 (0X01 9D) (OS) DosIDevloctl Post-Invocation 

00414 (0X01 9E) (OS) DosISetRelMaxFH Pre-Invocation 

00415 (0X01 9F) (OS) DosISetRelMaxFH Post-Invocation 

00416 (0X01 A0) (OS) Dos32lnitializePorthole Pre-Invocation 

00417 (0X01 A1) (OS) Dos32lnitializePorthole Post-Invocation 

00418 (0X01 A2) (OS) Dos32QueryHeaderlnfo Pre-Invocation 

00419 (0X01 A3) (OS) Dos32QueryHeaderlnfo Post-Invocation 

00420 (0X01 A4) (OS) Dos32QueryProcType Pre-Invocation 

00421 (0X01 A5) (OS) Dos32QueryProcType Post-Invocation 

00424 (0X01 A8) (OS) DosOpen2Compt Pre-Invocation 

00425 (0X01 A9) (OS) DosOpen2Compt Post-Invocation 

00428 (0X01 AC) (OS) Dos32ISetFHState Pre-Invocation 

00429 (0X01 AD) (OS) Dos32ISetFHState Post-Invocation 

00430 (0X01 AE) (OS) Dos32IQUERYFHSTATE Pre-Invocation 

00431 (0X01 AF) (OS) Dos32IQUERYFHSTATE Post-Invocation 


00432 (0X01 BO) (OS) Dos32IRead Pre-Invocation 

00433 (0X01 B1) (OS) Dos32IRead Post-Invocation 

00434 (0X01 B2) (OS) Dos32IWrite Pre-Invocation 

00435 (0X01 B3) (OS) Dos32IWrite Post-Invocation 

00436 (0X01 B4) (OS) Dos32DumpProcess Pre-Invocation 

00437 (0X01 B5) (OS) Dos32DumpProcess Post-Invocation 

00438 (0X01 B6) (OS) Dos32SuppressPopUps Pre-Invocation 

00439 (0X01 B7) (OS) Dos32SuppressPopUps Post-Invocation 

00440 (0X01 B8) (OS) Dos32KillThread Pre-Invocation 

00441 (0X01 B9) (OS) Dos32KillThread Post-Invocation 

00442 (0X01 BA) (OS) Dos32IProtectSetFHState Pre-Invocation 

00443 (0X01 BB) (OS) Dos32IProtectSetFHState Post-Invocation 

00444 (0X01 BC) (OS) Dos32IPROTECTQUERYFHSTATE Pre-Invocation 

00445 (0X01 BD) (OS) Dos32IPROTECTQUERYFHSTATE Post-Invocation 

00446 (0X01 BE) (OS) DosProtectChgFilePtr Pre-Invocation 

00447 (0X01 BF) (OS) DosProtectChgFilePtr Post-Invocation 

00448 (0X01 CO) (OS) DosProtectClose Pre-Invocation 

00449 (0X01 Cl) (OS) DosProtectClose Post-Invocation 

00450 (0X01 C2) (OS) DosCloseChangeNotify Pre-Invocation 

00451 (0X01 C3) (OS) DosCloseChangeNotify Post-Invocation 

00452 (0X01 C4) (OS) DosProtectEnumAttribute Pre-Invocation 

00453 (0X01 C5) (OS) DosProtectEnumAttribute Post-Invocation 

00454 (0X01 C6) (OS) DosProtectFilelO Pre-Invocation 

00455 (0X01 C7) (OS) DosProtectFilelO Post-Invocation 

00456 (0X01 C8) (OS) DosProtectFileLocks Pre-Invocation 

00457 (0X01 C9) (OS) DosProtectFileLocks Post-Invocation 

00458 (0X01 CA) (OS) DosForceDelete Pre-Invocation 

00459 (0X01 CB) (OS) DosForceDelete Post-Invocation 

00460 (0X01 CC) (OS) DosIProtectRead Pre-Invocation 

00461 (0X01 CD) (OS) DosIProtectRead Post-Invocation 

00462 (0X01 CE) (OS) DosIProtectSetFilelnfo Pre-Invocation 

00463 (0X01 CF) (OS) DosIProtectSetFilelnfo Post-Invocation 

00464 (0X01 DO) (OS) DosIPROTECTWrite Pre-Invocation 

00465 (0X01 D1) (OS) DosIProtectWrite Post-Invocation 

00466 (0X01 D2) (OS) DosProtectNewSize Pre-Invocation 

00467 (0X01 D3) (OS) DosProtectNewSize Post-Invocation 

00468 (0X01 D4) (OS) DOSPROTECTOPEN Pre-Invocation 

00469 (0X01 D5) (OS) DosProtectOpen Post-Invocation 

00470 (0X01 D6) (OS) DosOpenChangeNotify Pre-Invocation 

00471 (0X01 D7) (OS) DosOpenChangeNotify Post-Invocation 

00472 (0X01 D8) (OS) DosProtectQFFIandState Pre-Invocation 

00473 (0X01 D9) (OS) DosProtectQFFIandState Post-Invocation 

00474 (0X01 DA) (OS) DosProtectQFilelnfo Pre-Invocation 

00475 (0X01 DB) (OS) DosProtectQFilelnfo Post-Invocation 

00476 (0X01 DC) (OS) DosResetChangeNotify Pre-Invocation 

00477 (0X01 DD) (OS) DosResetChangeNotify Post-Invocation 

00478 (0X01 DE) (OS) DosProtectSetFFIandState Pre-Invocation 

00479 (0X01 DF) (OS) DosProtectSetFFIandState Post-Invocation 

00480 (0X01 E0) (OS) DosProtectSetFilelnfo Pre-Invocation 

00481 (0X01 El) (OS) DosProtectSetFilelnfo Post-Invocation 

00482 (0X01 E2) (OS) Dos32PMPostEventSem Pre-Invocation 

00483 (0X01 E3) (OS) Dos32PMPostEventSem Post-Invocation 

00484 (0X01 E4) (OS) Dos32PMWaitEventSem Post-Invocation 

00485 (0X01 E5) (OS) Dos32PMWaitMuxWaitSem Pre-Invocation 

00486 (0X01 E6) (OS) Dos32PMWaitMuxWaitSem Post-Invocation 

00487 (0X01 E7) (OS) Dos32QueryExtLIBPATH Pre-Invocation 

00488 (0X01 E8) (OS) Dos32QueryExtLIBPATH Post-Invocation 

00489 (0X01 E9) (OS) Dos32SetExtLIBPATH Pre-Invocation 

00490 (0X01 EA) (OS) Dos32SetExtLIBPATH Post-Invocation 

00491 (0X01 EB) (OS) Dos32VERIFYPIDTID Pre-Invocation 

00492 (0X01 EC) (OS) Dos32VERIFYPIDTID Post-Invocation 

00493 (0X01 ED) (OS) Dos32PMWaitEventSem Pre-Invocation 

00494 (0X01 EE) (OS) Dos32CancelLockRequest Pre-Invocation 

00495 (0X01 EF) (OS) Dos32CancelLockRequest Post-Invocation 

00496 (0X01 F0) (OS) Dos32SetFileLocks Pre-Invocation 

00497 (0X01 FI) (OS) Dos32SetFileLocks Post-Invocation 

00498 (0X01 F2) (OS) Dos32ProtectSetFileLocks Pre-Invocation 

00499 (0X01 F3) (OS) Dos32ProtectSetFileLocks Post-Invocation 

00500 (0X01 F4) (OS) DosCreateSpinLock Pre-Invocation 

00501 (0X01 F5) (OS) DosCreateSpinLock Post-Invocation 

00502 (0X01 F6) (OS) DosAcquireSpinLock Pre-Invocation 

00503 (0X01 F7) (OS) DosAcquireSpinLock Post-Invocation 

00504 (0X01 F8) (OS) DosReleaseSpinLock Pre-Invocation 


00505 (0X01 F9) (OS) DosReleaseSpinLock Post-Invocation 

00506 (0X01 FA) (OS) DosFreeSpinLock Pre-Invocation 

00507 (0X01 FB) (OS) DosFreeSpinLock Post-Invocation 

00508 (0X01 FC) (OS) Dos32IProtectRead Pre-Invocation 

00509 (0X01 FD) (OS) Dos32IProtectRead Post-Invocation 

00510 (0X01 FE) (OS) Dos32IProtectWrite Pre-Invocation 

00511 (0X01 FF) (OS) Dos32IProtectWrite Post-Invocation 
32768 (0X8000) (OS) DosSetTracelnfo Pre-Invocation 
65521 (0XFFF1) (OS) DosSetTracelnfo Post-Invocation 


Trace Events for OS2KRNL Major Code: 0X0005, Sorted by 
Tracepoint 


Allocate 00393 (0X0189) 

DOSMUXSEMWAIT 00253 (0X00FD) 
post2DOSENTERCRITSEC 00001 (0X0001) 
post2DOSEXITCRITSEC 00002 (0X0002) 
post2DOSHOLDSIGNAL 00003 (0X0003) 
postAllocate 00394 (0X01 8A) 
postDOS32ADDMUXWAITSEM 00370 (0X0172) 
postDOS32ALIASMEM 00006 (0X0006) 
postDOS32ALLOCM EM 00007 (0X0007) 
postDOS32ALLOCPROTECTEDMEM 00008 (0X0008) 
postDOS32ALLOCSHAREDMEM 00009 (0X0009) 
postDOS32ASYNCTIMER 00378 (0X01 7A) 
postDOS32CANCELLOCKREQUEST 00495 (0X01 EF) 
postDOS32CLOSEEVENTSEM 00340 (0X0154) 
postDOS32CLOSEMUTEXSEM 00354 (0X0162) 
postDOS32CLOSEMUXWAITSEM 00366 (0X01 6E) 
postDOS32CREATEEVENTSEM 00336 (0X0150) 
postDOS32CREATEMUTEXSEM 00350 (0X01 5E) 
postDOS32CREATEMUXWAITSEM 00362 (0X01 6A) 
postDOS32CREATETHREAD 0001 0 (0X000A) 
postDOS32DEBUG 0001 1 (0X000B) 
postDOS32DELETEMUXWAITSEM 00372 (0X0174) 
postDOS32DUMPPROCESS 00437 (0X01 B5) 
postDOS32EXITLIST 00012 (0X000C) 
postDOS32FREEMEM 00013 (0X000D) 
postDOS32FREERESOURCE 00332 (0X01 4C) 
postDOS32GETNAMEDSHAREDMEM 00014 (0X000E) 
postDOS32GETRESOURCE 00328 (0X0148) 
postDOS32GETSHAREDMEM 0001 5 (0X000F) 
postDOS32GIVESHAREDMEM 00016 (0X0010) 
postDOS32IASYNCTIMER 00153 (0X0099) 
postDOS32INITIALIZEPORTHOLE 00417 (0X01 A1) 
postDOS32IPROTECTQUERYFHSTATE 00445 (0X01 BD) 
postDOS32IPROTECTREAD 00509 (0X01 FD) 
postDOS32IPROTECTSETFHSTATE 00443 (0X01 BB) 
postDOS32IPROTECTWRITE 00511 (0X01 FF) 
postDOS32IQUERYFHSTATE 00431 (0X01 AF) 
postDOS32IREAD 00433 (0X01 B1) 
postDOS32ISETFHSTATE 00429 (0X01 AD) 
postDOS32ISTARTTIMER 00154 (0X009A) 
postDOS32l WRITE 00435 (0X01 B3) 
postDOS32KILLTHREAD 00441 (0X01 B9) 
postDOS320PENEVENTSEM 00338 (0X0152) 
postDOS320PENMUTEXSEM 00352 (0X0160) 
postDOS320PENMUXWAITSEM 00364 (0X01 6C) 
postDOS32PMPOSTEVENTSEM 00483 (0X01 E3) 
postDOS32PMWAITEVENTSEM 00484 (0X01 E4) 
postDOS32PMWAITMUXWAITSEM 00486 (0X01 E6) 
postDOS32POSTEVENTSEM 00344 (0X0158) 
postDOS32PROTECTSETFILELOCKS 00499 (0X01 F3) 
postDOS32QUERYEVENTSEM 00348 (0X015C) 


postDOS32QUERYEXTLIBPATH 00488 (0X01 E8) 
postDOS32QUERYHEADERINFO 00419 (0X01 A3) 
postDOS32QUERYMEM 0001 7 (0X001 1 ) 
postDOS32QUERYMEMSTATE 00018 (0X0012) 
postDOS32QUERYMUTEXSEM 00360 (0X0168) 
postDOS32QUERYMUXWAITSEM 00374 (0X0176) 
postDOS32QUERYPROCADDR 00334 (0X01 4E) 
postDOS32QUERYPROCTYPE 00421 (0X01 A5) 
postDOS32QUERYRESOURCESIZE 00411 (0X019B) 
postDOS32RELEASEMUTEXSEM 00358 (0X0166) 
postDOS32REQUESTMUTEXSEM 00356 (0X0164) 
postDOS32RESETEVENTSEM 00342 (0X0156) 
postDOS32SETEXTLIBPATH 00490 (0X01 EA) 
postDOS32SETFILELOCKS 00497 (0X01 FI) 
postDOS32SETMEM 00019 (0X0013) 
postDOS32STARTTIMER 00380 (0X01 7C) 
postDOS32STOPTIMER 00155 (0X009B) 
postDOS32SUPPRESSPOPUPS 00439 (0X01 B7) 
postDOS32VERIFYPIDTID 00492 (0X01 EC) 
postDOS32WAITEVENTSEM 00346 (0X01 5A) 
postDOS32WAITMUXWAITSEM 00368 (0X0170) 
postDOS32WAITTHREAD 00392 (0X0188) 
postDOSACQUIRESPINLOCK 00503 (0X01 F7) 
postDOSALLOCHUGE 00020 (0X0014) 
postDOSALLOCPROTHUGE 00021 (0X0015) 
postDOSALLOCPROTSEG 00022 (0X0016) 
postDOSALLOCSEG 00023 (0X0017) 
postDOSALLOCSHRPROTSEG 00024 (0X0018) 
postDOSALLOCSHRSEG 00025 (0X0019) 
postDOSBEEP 00026 (0X001 A) 
postDOSBUFRESET 00027 (0X001 B) 
postDOSCALLNMPIPE 00028 (0X001 C) 
postDOSCHDIR 00029 (0X001 D) 
postDOSCHGFILEPTR 00030 (0X001 E) 
postDOSCLIACCESS 00031 (0X001 F) 
postDOSCLOSE 00032 (0X0020) 
postDOSCLOSECHANGENOTIFY 00451 (0X01 C3) 
postDOSCLOSESEM 00033 (0X0021) 
postDOSCONNECTNMPIPE 00034 (0X0022) 
postDOSCREATECSALIAS 00035 (0X0023) 
postDOSCREATESEM 00036 (0X0024) 
postDOSCREATESPINLOCK 00501 (0X01 F5) 
postDOSCREATETHREAD 00037 (0X0025) 
postDOSCWAIT 00038 (0X0026) 
postDOSDELETE 00039 (0X0027) 
postDOSDEVCONFIG 00040 (0X0028) 
postDOSDEVIOCTL 00042 (0X0O2A) 
postDOSDEVIOCTL2 00041 (0X0029) 
postDOSDISCONNECTNMPIPE 00043 (0X002B) 
postDOSDUPHANDLE 00044 (0X002C) 
postDOSEDITNAME 00045 (0X002D) 
postDOSENUMATTRIBUTE 00405 (0X0195) 
postDOSERROR 00047 (0X002F) 
postDOSEXIT 00049 (0X0031) 
postDOSEXITLIST 00051 (0X0033) 
postDOSFILElO 00052 (0X0034) 
postDOSFILELOCKS 00053 (0X0035) 
postDOSFINDCLOSE 00054 (0X0036) 
postDOSFINDFIRST 00056 (0X0038) 
postDOSFINDFIRST2 00055 (0X0037) 
postDOSFINDFROMNAME 00057 (0X0039) 
postDOSFINDNEXT 00058 (0X003A) 
postDOSFINDNOTIFYCLOSE 00059 (0X003B) 
postDOSFINDNOTIFYFIRST 00060 (0X003C) 
postDOSFINDNOTIFYNEXT 00061 (0X003D) 
postDOSFLAGPROCESS 00062 (0X003E) 
postDOSFORCEDELETE 00459 (0X01 CB) 
postDOSFREEMODULE 00063 (0X003F) 
postDOSFREERESOURCE 00326 (0X0146) 
postDOSFREESEG 00064 (0X0040) 
postDOSFREESPINLOCK 00507 (0X01 FB) 
postDOSFSATTACH 00065 (0X0041) 
postDOSFSCTL 00066 (0X0042) 


postDOSGETCP 00376 (0X0178) 
postDOSGETDATETIME 00067 (0X0043) 
postDOSGETMODHANDLE 00068 (0X0044) 
postDOSGETMODNAME 00069 (0X0045) 
postDOSGETPID 00070 (0X0046) 
postDOSGETPROCADDR 00071 (0X0047) 
postDOSGETPRTY 00072 (0X0048) 
postDOSGETRESOURCE 00073 (0X0049) 
postDOSGETRESOURCE2 00324 (0X0144) 
postDOSGETSEG 00074 (0X004A) 
postDOSGETSHRSEG 00075 (0X004B) 
postDOSGETVERSION 00076 (0X004C) 
postDOSGIVESEG 00077 (0X004D) 
postDOSHOLDSIGNAL 00078 (OX004E) 
postDOSICOPY 00079 (0X004F) 
postDOSIDEVIOCTL 00413 (0X01 9D) 
postDOSlEXECPGM 00080 (0X0050) 
postDOSIPROTECTREAD 00461 (0X01 CD) 
postDOSIPROTECTSETFILEINFO 00463 (0X01 CF) 
postDOSIPROTECTWRITE 00465 (0X01 D1) 
postDOSIREAD 00123 (0X007B) 
postDOSISETCP 00083 (0X0053) 
postDOSISETFILEINFO 00407 (0X0197) 
postDOSISETPATHINFO 00409 (0X0199) 
postDOSISETRELMAXFH 00415 (0X01 9F) 
postDOSlWRITE 00158 (0X009E) 
postDOSKILLPROCESS 00084 (0X0054) 
postDOSLOADMODULE 00085 (0X0055) 
postDOSMAKENMPIPE 00086 (0X0056) 
postDOSMAKEPIPE 00087 (0X0057) 
postDOSMKDIR 00089 (0X0059) 
postDOSMKDIR2 00088 (0X0058) 
postDOSMOVE 00095 (0X005F) 
postDOSMUXSEMWAIT 00096 (0X0060) 
postDOSMUXSEMWAIT2 00403 (0X0193) 
postDOSNEWSIZE 00097 (0X0061) 
postDOSOPEN 00099 (0X0063) 
postDOSOPEN2 00098 (0X0062) 
postDOSOPEN2COMPT 00425 (0X01 A9) 
postDOSOPENCHANGENOTIFY 00471 (0X01 D7) 
postDOSOPENSEM 00100 (0X0064) 
postDOSOPLOCKRELEASE 00101 (0X0065) 
postDOSOPLOCKWAIT 00102 (0X0066) 
postDOSPEEKNMPIPE 00103 (0X0067) 
postDOSPHYSICALDISK 00104 (0X0068) 
postDOSPORT ACCESS 00106 (0X006A) 
postDOSPROTECTCHGFILEPTR 00447 (0X01 BF) 
postDOSPROTECTCLOSE 00449 (0X01 Cl) 
postDOSPROTECTENUMATTRIBUTE 00453 (0X01 C5) 
postDOSPROTECTFILElO 00455 (0X01 C7) 
postDOSPROTECTFILELOCKS 00457 (0X01 C9) 
postDOSPROTECTNEWSIZE 00467 (0X01 D3) 
postDOSPROTECTOPEN 00469 (0X01 D5) 
postDOSPROTECTQFHANDSTATE 00473 (0X01 D9) 
postDOSPROTECTQFILEINFO 00475 (0X01 DB) 
postDOSPROTECTSETFHANDSTATE 00479 (0X01 DF) 
postDOSPROTECTSETFILEINFO 00481 (0X01 El) 
postDOSQCURDIR 00108 (0X006C) 
postDOSQCURDISK 00109 (0X006D) 
postDOSQFHANDSTATE 001 1 0 (0X006E) 
postDOSQFILEINFO 001 1 1 (0X006F) 
postDOSQFILEMODE 00112 (0X0070) 
postDOSQFSATTACH 00113 (0X0071) 
postDOSQFSINFO 00114 (0X0072) 
postDOSQHANDTYPE 00115 (0X0073) 
postDOSQNMPHANDSTATE 00116 (0X0074) 
postDOSQNMPIPEINFO 001 1 7 (0X0075) 
postDOSQNMPIPESEMSTATE 00105 (0X0069) 
postDOSQPATHINFO 00118 (0X0076) 
postDOSQSYSINFO 00119 (0X0077) 
postDOSQVERIFY 00120 (0X0078) 
postDOSRAWREADNMPIPE 00121 (0X0079) 
postDOSRAWWRITENMPIPE 00122 (0X007A) 


postDOSREALLOCHUGE 00125 (0X007D) 
postDOSREALLOCSEG 00126 (0X007E) 
postDOSRELEASESPINLOCK 00505 (0X01 F9) 
postDOSRESETCHANGENOTIFY 00477 (0X01 DD) 
postDOSRESUMETHREAD 00127 (0X007F) 
postDOSRMDIR 00128 (0X0080) 
postDOSSELECTDISK 00129 (0X0081) 
postDOSSEMSETWAIT 00133 (0X0085) 
postDOSSENDSIGNAL 00135 (0X0087) 
postDOSSETDATETIME 00137 (0X0089) 
postDOSSETFHANDSTATE 00138 (0X008A) 
postDOSSETFILEINFO 00139 (0X0O8B) 
postDOSSETFILEMODE 00140 (0X008C) 
postDOSSETFSINFO 00141 (0X008D) 
postDOSSETMAXFH 00142 (0X008E) 
postDOSSETNMPHANDSTATE 00143 (0X008F) 
postDOSSETNMPIPESEM 00144 (0X0090) 
postDOSSETPATHINFO 00145 (0X0091) 
postDOSSETPRTY 00146 (0X0092) 
postDOSSETSIGHANDLER 00147 (0X0093) 
postDOSSETTRACEINFO 65521 (0XFFF1) 
postDOSSETVEC 00148 (0X0094) 
postDOSSETVERIFY 00149 (0X0095) 
postDOSSLEEP 00150 (0X0096) 
postDOSSUSPENDTHREAD 00151 (0X0097) 
postDOSSYSTEMSERVICE 00152 (0X0098) 
postDOSTRANSACTNMPIPE 00156 (0X009C) 
postDOSWAITNMPIPE 00157 (0X009D) 
postSchedNext 00401 (0X0191) 
preDOS32ADDMUXWAITSEM 00369 (0X0171) 
preDOS32ALIASMEM 00163 (0X00A3) 
preDOS32ALLOCMEM 00164 (0X00A4) 
preDOS32ALLOCPROTECTEDMEM 00165 (OXOOA5) 
preDOS32ALLOCSHAREDMEM 00166 (0X00A6) 
preDOS32ASYNCTIMER 00377 (0X0179) 
preDOS32CLOSEEVENTSEM 00339 (0X0153) 
preDOS32CLOSEMUTEXSEM 00353 (0X0161) 
preDOS32CLOSEMUXWAITSEM 00365 (0X01 6D) 
preEDOS32CANCELLOCKREQUEST 00494 (0X01 EE) 
preDOS32CREATEEVENTSEM 00335 (0X01 4F) 
preDOS32CREATEMUTEXSEM 00349 (0X01 5D) 
preDOS32CREATEMUXWAITSEM 00361 (0X0169) 
preDOS32CREATETHREAD 00167 (0X00A7) 
preDOS32DEBUG 00168 (0X00A8) 
preDOS32DELETEMUXWAITSEM 00371 (0X0173) 
preDOS32DUMPPROCESS 00436 (0X01 B4) 
preDOS32EXITLIST 00169 (OXOOA9) 
preDOS32FREEMEM 00170 (0X00AA) 
preDOS32FREERESOURCE 00331 (0X014B) 
preDOS32GETNAMEDSHAREDMEM 00171 (0X0OAB) 
preDOS32GETRESOURCE 00327 (0X0147) 
preDOS32GETSHAREDMEM 00172 (0X00AC) 
preDOS32GIVESHAREDMEM 00173 (0X00AD) 
preDOS32IASYNCTIMER 00310 (0X0136) 
preDOS32INITIALIZEPORTHOLE 00416 (0X01 A0) 
preDOS32l PROTECTQU ERYFFIST ATE 00444 (0X01 BC) 
preDOS32IPROTECTREAD 00508 (0X01 FC) 
preDOS32IPROTECTSETFHSTATE 00442 (0X01 BA) 
preDOS32IPROTECTWRITE 0051 0 (0X01 FE) 
preDOS32IQUERYFHSTATE 00430 (0X01 AE) 
preDOS32IREAD 00432 (0X01 B0) 
preDOS32ISETFHSTATE 00428 (0X01 AC) 
preDOS32ISTARTTIMER 00311 (0X0137) 
preDOS32IWRITE 00434 (0X01 B2) 
preDOS32KILLTHREAD 00440 (0X01 B8) 
preD0S320PENEVENTSEM 00337 (0X0151) 
preD0S320PENMUTEXSEM 00351 (0X01 5F) 
preD0S320PENMUXWAITSEM 00363 (0X01 6B) 
preDOS32PMPOSTEVENTSEM 00482 (0X01 E2) 
preDOS32PMWAITEVENTSEM 00493 (0X01 ED) 
preDOS32PMWAITMUXWAITSEM 00485 (0X01 E5) 
preDOS32POSTEVENTSEM 00343 (0X0157) 
preDOS32PROTECTSETFILELOCKS 00498 (0X01 F2) 


preDOS32QUERYEVENTSEM 00347 (0X01 5B) 
preDOS32QUERYEXTLIBPATH 00487 (0X01 E7) 
preDOS32QUERYHEADERINFO 00418 (0X01 A2) 
preDOS32QUERYMEM 00174 (0X00AE) 
preDOS32QUERYMEMSTATE 00175 (OXOOAF) 
preDOS32QUERYMUTEXSEM 00359 (0X0167) 
preDOS32QUERYMUXWAITSEM 00373 (0X0175) 
preDOS32QUERYPROCADDR 00333 (0X01 4D) 
preDOS32QUERYPROCTYPE 00420 (0X01 A4) 
preDOS32QUERYRESOURCESIZE 00410 (0X01 9A) 
preDOS32RELEASEMUTEXSEM 00357 (0X0165) 
preDOS32REQUESTMUTEXSEM 00355 (0X0163) 
preDOS32RESETEVENTSEM 00341 (0X0155) 
preDOS32SETEXTLIBPATH 00489 (0X01 E9) 
preDOS32SETFILELOCKS 00496 (0X01 FO) 
preDOS32SETMEM 00176 (OXOOBO) 
preDOS32STARTTIMER 00379 (0X01 7B) 
preDOS32STOPTIMER 00312 (0X0138) 
preDOS32SUPPRESSPOPUPS 00438 (0X01 B6) 
preDOS32VERIFYPIDTID 00491 (0X01 EB) 
preDOS32WAITEVENTSEM 00345 (0X0159) 
preDOS32WAITMUXWAITSEM 00367 (0X01 6F) 
preDOS32WAITTHREAD 00391 (0X0187) 
preDOSACQUIRESPINLOCK 00502 (0X01 F6) 
preDOSALLOCHUGE 00177 (0X00B1) 
preDOSALLOCPROTHUGE 00178 (0X00B2) 
preDOSALLOCPROTSEG 00179 (0X00B3) 
preDOSALLOCSEG 00180 (0X00B4) 
preDOSALLOCSHRPROTSEG 00181 (OXOOB5) 
preDOSALLOCSHRSEG 00182 (0X00B6) 
preDOSBEEP 00183 (0X00B7) 
preDOSBUFRESET 001 84 (0X00B8) 
preDOSCALLNMPIPE 00185 (0X00B9) 
preDOSCHDIR 00186 (0X0OBA) 
preDOSCHGFILEPTR 00187 (0X00BB) 
preDOSCLIACCESS 00188 (0X00BC) 
preDOSCLOSE 00189 (0X00BD) 
preDOSCLOSECHANGENOTIFY 00450 (0X01 C2) 
preDOSCLOSESEM 00190 (0X00BE) 
preDOSCONNECTNMPIPE 00191 (0X00BF) 
preDOSCREATECSALIAS 00192 (0X00C0) 
preDOSCREATESEM 00193 (0X00C1) 
preDOSCREATESPINLOCK 00500 (0X01 F4) 
preDOSCREATETHREAD 00194 (0X00C2) 
preDOSCWAIT 00195 (0X00C3) 
preDOSDELETE 00196 (0X00C4) 
preDOSDEVCONFIG 00197 (0X00C5) 
preDOSDEVIOCTL 00199 (0X00C7) 
preDOSDEVIOCTL2 00198 (0X00C6) 
preDOSDISCONNECTNMPIPE 00200 (0X00C8) 
preDOSDUPHANDLE 00201 (0X00C9) 
preDOSEDITNAME 00202 (0X00CA) 
preDOSENTERCRITSEC 00203 (0X00CB) 
preDOSENUMATTRIBUTE 00404 (0X0194) 
preDOSERROR 00204 (0X00CC) 
preDOSEXIT 00206 (0X00CE) 
preDOSEXITCRITSEC 00207 (0X00CF) 
preDOSEXITLIST 00208 (OXOODO) 
preDOSFILElO 00209 (OXOOD1) 
preDOSFILELOCKS 00210 (0X00D2) 
preDOSFINDCLOSE 00211 (0X00D3) 
preDOSFINDFIRST 00213 (0X00D5) 
preDOSFINDFIRST2 00212 (0X00D4) 
preDOSFINDFROMNAME 00214 (0X00D6) 
preDOSFINDNEXT 00215 (0X00D7) 
preDOSFINDNOTIFYCLOSE 00216 (0X00D8) 
preDOSFINDNOTIFYFIRST 0021 7 (0X00D9) 
preDOSFINDNOTIFYNEXT 00218 (0X00DA) 
preDOSFLAGPROCESS 00219 (0X00DB) 
preDOSFORCEDELETE 00458 (0X01 CA) 
preDOSFREEMODULE 00220 (OXOODC) 
preDOSFREERESOURCE 00325 (0X0145) 
preDOSFREESEG 00221 (0X00DD) 


preDOSFREESPINLOCK 00506 (0X01 FA) 
preDOSFSATTACH 00222 (0X00DE) 
preDOSFSCTL 00223 (OXOODF) 
preDOSGETCP 00375 (0X0177) 
preDOSGETDATETIME 00224 (0X00E0) 
preDOSGETMODHANDLE 00225 (OXOOE1) 
preDOSGETMODNAME 00226 (0X00E2) 
preDOSGETPID 00227 (0X00E3) 
preDOSGETPROCADDR 00228 (0X00E4) 
preDOSGETPRTY 00229 (OXOOE5) 
preDOSGETRESOURCE 00230 (0X00E6) 
preDOSGETRESOURCE2 00323 (0X0143) 
preDOSGETSEG 00231 (0X00E7) 
preDOSGETSHRSEG 00232 (0X00E8) 
preDOSGETVERSION 00233 (0X00E9) 
preDOSGIVESEG 00234 (0X00EA) 
preDOSHOLDSIGNAL 00235 (0X00EB) 
preDOSICOPY 00236 (0X00EC) 
preDOSIDEVIOCTL 00412 (0X01 9C) 
preDOSlEXECPGM 00237 (0X00ED) 
preDOSIPROTECTREAD 00460 (0X01 CC) 
preDOSIPROTECTSETFILEINFO 00462 (0X01 CE) 
preDOSIPROTECTWRITE 00464 (0X01 DO) 
preDOSIREAD 00280 (0X0118) 
preDOSISETCP 00240 (0X00F0) 
preDOSISETFILEINFO 00406 (0X0196) 
preDOSISETPATHINFO 00408 (0X0198) 
preDOSISETRELMAXFH 00414 (0X01 9E) 
preDOSlWRITE 00315 (0X01 3B) 
preDOSKILLPROCESS 00241 (0X0OF1) 
preDOSLOADMODULE 00242 (0X00F2) 
preDOSMAKENMPIPE 00243 (0X00F3) 
preDOSMAKEPIPE 00244 (0X00F4) 
preDOSMKDIR 00246 (0X00F6) 
preDOSMKDIR2 00245 (0X00F5) 
preDOSMOVE 00252 (0X00FC) 
preDOSNEWSIZE 00254 (0X00FE) 
preDOSOPEN 00256 (0X0100) 
preDOSOPEN2 00255 (0X00FF) 
preDOSOPEN2COMPT 00424 (0X01 A8) 
preDOSOPENCHANGENOTIFY 00470 (0X01 D6) 
preDOSOPENSEM 00257 (0X0101) 
preDOSOPLOCKRELEASE 00258 (0X0102) 
preDOSOPLOCKWAIT 00259 (0X0103) 
preDOSPEEKNMPIPE 00260 (0X0104) 
preDOSPHYSICALDISK 00261 (0X0105) 
preDOSPORT ACCESS 00263 (0X0107) 
preDOSPROTECTCHGFILEPTR 00446 (0X01 BE) 
preDOSPROTECTCLOSE 00448 (0X01 CO) 
preDOSPROTECTENUMATTRIBUTE 00452 (0X01 C4) 
preDOSPROTECTFILElO 00454 (0X01 C6) 
preDOSPROTECTFILELOCKS 00456 (0X01 C8) 
preDOSPROTECTNEWSIZE 00466 (0X01 D2) 
preDOSPROTECTOPEN 00468 (0X01 D4) 
preDOSPROTECTQFHANDSTATE 00472 (0X01 D8) 
preDOSPROTECTQFILEINFO 00474 (0X01 DA) 
preDOSPROTECTSETFHANDSTATE 00478 (0X01 DE) 
preDOSPROTECTSETFILEINFO 00480 (0X01 E0) 
preDOSQCURDIR 00265 (0X0109) 
preDOSQCURDISK 00266 (0X01 0A) 
preDOSQFHANDSTATE 00267 (0X01 0B) 
preDOSQFILEINFO 00268 (0X01 0C) 
preDOSQFILEMODE 00269 (0X01 0D) 
preDOSQFSATTACH 00270 (0X01 0E) 
preDOSQFSINFO 00271 (0X010F) 
preDOSQHANDTYPE 00272 (0X0110) 
preDOSQNMPHANDSTATE 00273 (0X0111) 
preDOSQNMPIPEINFO 00274 (0X0112) 
preDOSQNMPIPESEMSTATE 00262 (0X0106) 
preDOSQPATHINFO 00275 (0X0113) 
preDOSQSYSINFO 00276 (0X0114) 
preDOSQVERIFY 00277 (0X01 1 5) 
preDOSRAWREADNMPIPE 00278 (0X01 1 6) 


preDOSRAWWRITENMPIPE 00279 (0X01 1 7) 
preDOSREALLOCHUGE 00282 (0X011 A) 
preDOSREALLOCSEG 00283 (0X01 1 B) 
preDOSRELEASESPINLOCK 00504 (0X01 F8) 
preDOSRESETCHANGENOTIFY 00476 (0X01 DC) 
preDOSRESUMETHREAD 00284 (0X01 1C) 
preDOSRMDIR 00285 (0X01 ID) 
preDOSSELECTDISK 00286 (0X01 1 E) 
preDOSSEMSETWAIT 00290 (0X0122) 
preDOSSENDSIGNAL 00292 (0X0124) 
preDOSSETDATETIME 00294 (0X0126) 
preDOSSETFHANDSTATE 00295 (0X0127) 
preDOSSETFILEINFO 00296 (0X0128) 
preDOSSETFILEMODE 00297 (0X0129) 
preDOSSETFSINFO 00298 (0X01 2A) 
preDOSSETMAXFH 00299 (0X01 2B) 
preDOSSETNMPHANDSTATE 00300 (0X012C) 
preDOSSETNMPIPESEM 00301 (0X012D) 
preDOSSETPATHINFO 00302 (0X01 2E) 
preDOSSETPRTY 00303 (0X01 2F) 
preDOSSETSIGHANDLER 00304 (0X0130) 
preDOSSETTRACEINFO 32768 (0X8000) 
preDOSSETVEC 00305 (0X0131) 
preDOSSETVERIFY 00306 (0X0132) 
preDOSSLEEP 00307 (0X0133) 
preDOSSUSPENDTHREAD 00308 (0X0134) 
preDOSSYSTEMSERVICE 00309 (0X0135) 
preDOSTRANSACTNMPIPE 00313 (0X0139) 
preDOSWAITNMPIPE 00314 (0X01 3A) 
preRelease 00395 (0X01 8B) 
w_LockOper 00397 (0X01 8D) 


OS2KRNL Major Code: 0X0005 Minor Code: 1 (0X0001) 


Description 

(OS) DosEnterCritSec Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.post2DOSENTERCRITSEC 

Minor Code 

1 (0X0001) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 2 (0X0002) 


Description 


(OS) DosExitCritSec Post-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.post2DOSEXITCRITSEC 


Minor Code 

2 (0X0002) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 3 (0X0003) 


Description 

(OS) DosHoldSignal Post-Invocation (2) 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.post2DOSHOLDSIGNAL 

Minor Code 

3 (0X0003) 

Trace Groups 

SIG 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 6 (0X0006) 


Description 

(OS) Dos32AliasMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ALIASMEM 

Minor Code 

6 (0X0006) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 



Alias address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 7 (0X0007) 


Description 

(OS) Dos32AllocMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ALLOCMEM 

Minor Code 

7 (0X0007) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 8 (0X0008) 


Description 

(OS) Dos32AllocProtectedMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ALLOCPROTECTEDMEM 

Minor Code 

8 (0X0008) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 9 (0X0009) 


Description 



(OS) Dos32AllocSharedMem Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ALLOCSHAREDMEM 

Minor Code 

9 (0X0009) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 10 (0X000A) 


Description 

(OS) Dos32CreateThread Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CREATETHREAD 

Minor Code 

10 (0X0O0A) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Thread ID = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 1 1 (0X000B) 


Description 

(OS) Dos32Debug Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32DEBUG 

Minor Code 

11 (0X0O0B) 

Trace Groups 

TK 

Trace Types 


POST 



Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 12 (0X000C) 


Description 

(OS) Dos32ExitList Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32EXITLIST 

Minor Code 

12 (OXOOOC) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 13 (0X000D) 


Description 

(OS) Dos32FreeMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32FREEMEM 

Minor Code 

13 (0X000D) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 14 (0X000E) 



Description 


(OS) Dos32GetNamedSharedMem Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32GETNAMEDSHAREDMEM 

Minor Code 

14 (OXOOOE) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 15 (0X000F) 


Description 

(OS) Dos32GetSharedMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32GETSHAREDMEM 

Minor Code 

15 (OXOOOF) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 16 (0X0010) 


Description 

(OS) Dos32GiveSharedMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32GIVESHAREDMEM 

Minor Code 

16 (0X0010) 

Trace Groups 

VM 

Trace Types 


POST 



Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 17 (0X0011) 


Description 

(OS) Dos32QueryMem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYMEM 

Minor Code 

17 (0X0011) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Actual size = %D Flags = %D 
Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 18 (0X0012) 


Description 

(OS) Dos32QueryMemState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYMEMSTATE 

Minor Code 

18 (0X0012) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Actual size = %D Flags = %D 
Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 19 (0X0013) 



Description 


(OS) Dos32SetMem Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32SETMEM 

Minor Code 

19 (0X0013) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 20 (0X0014) 


Description 

(OS) DosAllocHuge Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCHUGE 

Minor Code 

20 (0X0014) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Base selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 21 (0X0015) 


Description 

(OS) DosAllocProtHuge Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCPROTHUGE 

Minor Code 

21 (0X0015) 

Trace Groups 

SEL 



Trace Types 
Traced Parameters 


POST 


Base selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 22 (0X0016) 


Description 

(OS) DosAllocProtSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCPROTSEG 

Minor Code 

22 (0X0016) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 23 (0X0017) 


Description 

(OS) DosAllocSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCSEG 

Minor Code 

23 (0X0017) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 24 (0X0018) 



Description 


(OS) DosAllocShrProtSeg Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCSHRPROTSEG 

Minor Code 

24 (0X0018) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 25 (0X0019) 


Description 

(OS) DosAllocShrSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSALLOCSHRSEG 

Minor Code 

25 (0X0019) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 26 (0X001 A) 


Description 

(OS) DosBeep Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSBEEP 

Minor Code 

26 (0X001 A) 

Trace Groups 


10 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 27 (0X001 B) 


Description 

(OS) DosBufReset Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSBUFRESET 

Minor Code 

27 (0X001 B) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 28 (0X001 C) 


Description 

(OS) DosCalINmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCALLNMPIPE 

Minor Code 

28 (0X001 C) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Bytes out = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 29 (0X001 D) 



Description 


(OS) DosChDir Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCHDIR 

Minor Code 

29 (0X001 D) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 30 (0X001 E) 


Description 

(OS) DosChgFilePtr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCHGFILEPTR 

Minor Code 

30 (0X001 E) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Location = %W%W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 31 (0X001 F) 


Description 

(OS) DosCliAccess Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCLIACCESS 

Minor Code 

31 (0X001 F) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 32 (0X0020) 


Description 

(OS) DosClose Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCLOSE 

Minor Code 

32 (0X0020) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 33 (0X0021) 


Description 

(OS) DosCloseSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCLOSESEM 

Minor Code 

33 (0X0021) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return value = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 34 (0X0022) 



Description 


(OS) DosConnectNmPipe Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCONNECTNMPIPE 

Minor Code 

34 (0X0022) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 35 (0X0023) 


Description 

(OS) DosCreateCSAIias Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCREATECSALIAS 

Minor Code 

35 (0X0023) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Code selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 36 (0X0024) 


Description 

(OS) DosCreateSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCREATESEM 

Minor Code 

36 (0X0024) 

Trace Groups 

SEL 



Trace Types 
Traced Parameters 


POST 


Handle = %W%W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 37 (0X0025) 


Description 

(OS) DosCreateThread Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCREATETHREAD 

Minor Code 

37 (0X0025) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Thread ID = %W Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 38 (0X0026) 


Description 

(OS) DosCWait Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCWAIT 

Minor Code 

38 (0X0026) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Pid = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 39 (0X0027) 



Description 


(OS) DosDelete Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDELETE 

Minor Code 

39 (0X0027) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 40 (0X0028) 


Description 

(OS) DosDevConfig Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDEVCONFIG 

Minor Code 

40 (0X0028) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 41 (0X0029) 


Description 

(OS) DosDevloctl2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDEVIOCTL2 

Minor Code 

41 (0X0029) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 42 (0X002A) 


Description 

(OS) DosDevloctl Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDEVIOCTL 

Minor Code 

42 (0X002A) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 43 (0X002B) 


Description 

(OS) DosDisConnectMmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDISCONNECTNMPIPE 

Minor Code 

43 (0X002B) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 44 (0X002C) 



Description 


(OS) DosDupHandle Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSDUPHANDLE 

Minor Code 

44 (0X0O2C) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


New handle = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 45 (0X002D) 


Description 

(OS) DosEditName Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSEDITNAME 

Minor Code 

45 (0X0O2D) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Resultant string = %S 
Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 47 (0X002F) 


Description 

(OS) DosError Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSERROR 

Minor Code 


47 (0X002F) 



Trace Groups 
Trace Types 
Traced Parameters 


TK 

POST 

Return value = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 49 (0X0031) 


Description 

(OS) Dos32Exit Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSEXIT 

Minor Code 

49 (0X0031) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 51 (0X0033) 


Description 

(OS) Dos32ExitList Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSEXITLIST 

Minor Code 

51 (0X0033) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 



0S2KRNL Major Code: 0X0005 Minor Code: 52 (0X0034) 

(OS) DosFilelO Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFILEIO 
52 (0X0034) 

FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 53 (0X0035) 

(OS) DosFileLocks Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFILELOCKS 
53 (0X0035) 

FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 54 (0X0036) 

(OS) DosFindClose Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDCLOSE 
54 (0X0036) 






Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 55 (0X0037) 


Description 

(OS) DosFindFirst2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDFIRST2 

Minor Code 

55 (0X0037) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Search handle = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 56 (0X0038) 


Description 

(OS) DosFindFirst Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDFIRST 

Minor Code 

56 (0X0038) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Search handle = %W Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 57 (0X0039) 

(OS) DosFindFromName Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDFROMNAME 
57 (0X0039) 

FS 

POST 

Search count = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 58 (0X003A) 

(OS) DosFindNext Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDNEXT 
58 (0X0O3A) 

FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 59 (0X003B) 

(OS) DosFindNotifyClose Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDNOTIFYCLOSE 





Minor Code 



59 (0X003B) 


Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 60 (0X003C) 


Description 

(OS) DosFindNotifyFirst Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDNOTIFYFIRST 

Minor Code 

60 (0X0O3C) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Search count = %W Handle = %W 
Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 61 (0X003D) 


Description 

(OS) DosFindNotifyNext Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFINDNOTIFYNEXT 

Minor Code 

61 (0X0O3D) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Change count = %W Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 62 (0X003E) 


Description 

(OS) DosFlagProcess Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFLAGPROCESS 

Minor Code 

62 (0X0O3E) 

Trace Groups 

SIG 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 63 (0X003F) 


Description 

(OS) DosFreeModule Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFREEMODULE 

Minor Code 

63 (0X0O3F) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 64 (0X0040) 


Description 


(OS) DosFreeSeg Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFREESEG 


Minor Code 

64 (0X0040) 

Trace Groups 

SEL 


Trace Types 

POST 


Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 65 (0X0041) 


Description 

(OS) DosFSAttach Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFSATTACH 

Minor Code 

65 (0X0041) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 66 (0X0042) 


Description 

(OS) DosFSCtl Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFSCTL 

Minor Code 

66 (0X0042) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 



Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 67 (0X0043) 


Description 

(OS) DosGetDateTime Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETDATETIME 

Minor Code 

67 (0X0043) 

Trace Groups 

TIM 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 68 (0X0044) 


Description 

(OS) DosGetModHandle Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETMODHANDLE 

Minor Code 

68 (0X0044) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Module handle = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 69 (0X0045) 


Description 


(OS) DosGetModName Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETMODNAME 


Minor Code 

69 (0X0045) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Module name = %S 
Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 70 (0X0046) 


Description 

(OS) DosGetPid Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETPID 

Minor Code 

70 (0X0046) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


PID = %W TID = %W PPID = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 71 (0X0047) 


Description 

(OS) DosGetProcAddr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETPROCADDR 

Minor Code 

71 (0X0047) 

Trace Groups 

LDR 

Trace Types 


POST 



Traced Parameters 


Proc addr = %W:%W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 72 (0X0048) 


Description 

(OS) DosGetPrty Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETPRTY 

Minor Code 

72 (0X0048) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Priority = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 73 (0X0049) 


Description 

(OS) DosGetResource Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETRESOURCE 

Minor Code 

73 (0X0049) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 74 (0X004A) 



Description 


(OS) DosGetSeg Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETSEG 

Minor Code 

74 (OX004A) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 75 (0X004B) 


Description 

(OS) DosGetShrSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETSHRSEG 

Minor Code 

75 (0X004B) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 76 (0X004C) 


Description 

(OS) DosGetVersion Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETVERSION 

Minor Code 

76 (0X0O4C) 

Trace Groups 

TK 

Trace Types 


POST 



Traced Parameters 


Major/minor version = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 77 (0X004D) 


Description 

(OS) DosGiveSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGIVESEG 

Minor Code 

77 (OX004D) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Selector = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 78 (0X004E) 


Description 

(OS) DosHoldSignal Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSHOLDSIGNAL 

Minor Code 

78 (OX004E) 

Trace Groups 

SIG 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 79 (0X004F) 



Description 


(OS) DosICopy Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSICOPY 

Minor Code 

79 (OX004F) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 80 (0X0050) 


Description 

(OS) DoslExecPgm Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIEXECPGM 

Minor Code 

80 (0X0050) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Pid/Term Code = %W Result Code = %W 
Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 83 (0X0053) 


Description 

(OS) DosISetCP Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSISETCP 

Minor Code 

83 (0X0053) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 84 (0X0054) 


Description 

(OS) DosKillProcess Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSKILLPROCESS 

Minor Code 

84 (0X0054) 

Trace Groups 

SIG 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 85 (0X0055) 


Description 

(OS) DosLoadModule Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSLOADMODULE 

Minor Code 

85 (0X0055) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Module handle = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 86 (0X0056) 



Description 


(OS) DosMakeNmPipe Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMAKENMPIPE 

Minor Code 

86 (0X0056) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Handle = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 87 (0X0057) 


Description 

(OS) DosMakePipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMAKEPIPE 

Minor Code 

87 (0X0057) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Read handle = %W Write handle = %W 
Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 88 (0X0058) 


Description 

(OS) DosMkDir2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMKDIR2 

Minor Code 


88 (0X0058) 



Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 89 (0X0059) 


Description 

(OS) DosMkDir Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMKDIR 

Minor Code 

89 (0X0059) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 95 (0X005F) 


Description 

(OS) DosMove Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMOVE 

Minor Code 

95 (0X0O5F) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 96 (0X0060) 

(OS) DosMuxSemWait Post-Invocation (Waited) 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMUXSEMWAIT 
96 (0X0060) 

SEM 
PRE 

Index = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 97 (0X0061) 

(OS) DosNewSize Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSNEWSIZE 
97 (0X0061) 

FS 

POST 

Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 98 (0X0062) 

(OS) DosOpen2 Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPEN2 
98 (0X0062) 






Trace Groups 


FS 


Trace Types 

POST 

Traced Parameters 

Action = %W Handle = %W 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 99 (0X0063) 


Description 

(OS) DosOpen Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPEN 

Minor Code 

99 (0X0063) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Action = %W Handle = %W 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 100 (0X0064) 


Description 

(OS) DosOpenSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPENSEM 

Minor Code 

100 (0X0064) 

Trace Groups 

SEM 

Trace Tvpes 

POST 

Traced Parameters 




Handle = %W%W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 101 (0X0065) 

(OS) DosOpLockRelease Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPLOCKRELEASE 
101 (0X0065) 

FS 

POST 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 102 (0X0066) 

(OS) DosOpLockWait Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPLOCKWAIT 
102 (0X0066) 

FS 

POST 

Server Key = %D Kernel Key = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 103 (0X0067) 

(OS) DosPeekNmPipe Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPEEKNMPIPE 






Minor Code 


103 (0X0067) 


Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Bytes read = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 104 (0X0068) 


Description 

(OS) DosPhysicalDisk Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPHYSICALDISK 

Minor Code 

104 (0X0068) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 105 (0X0069) 


Description 

(OS) DosQNmPipeState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQNMPIPESEMSTATE 

Minor Code 

105 (0X0069) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 106 (0X006A) 


Description 

(OS) DosPortAccess Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPORTACCESS 

Minor Code 

106 (0X006A) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 108 (0X006C) 


Description 

(OS) DosQCurDir Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQCURDIR 

Minor Code 

108 (0X006C) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Current Dir = %S 

Len = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 109 (0X006D) 


Description 


(OS) DosQCurDisk Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQCURDISK 


Minor Code 

109 (0X006D) 

Trace Groups 

FS 


Trace Types 

POST 


Traced Parameters 


Default Drive = %W Logical Map =%D 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 110 (0X006E) 


Description 

(OS) DosQFPIandState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQFPIANDSTATE 

Minor Code 

110 (0X006E) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Plandle State = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 1 1 1 (0X006F) 


Description 

(OS) DosQFilelnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQFILEINFO 

Minor Code 

1 1 1 (0X006F) 

Trace Groups 

FS 

Trace Types 


POST 



Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 112 (0X0070) 


Description 

(OS) DosQFileMode Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQFILEMODE 

Minor Code 

112 (0X0070) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


File Mode = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 1 1 3 (0X0071 ) 


Description 

(OS) DosQFSAttach Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQFSATTACH 

Minor Code 

113 (0X0071) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 114 (0X0072) 



Description 


(OS) DosQFSInfo Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQFSINFO 

Minor Code 

114(0X0072) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 115 (0X0073) 


Description 

(OS) DosQHandType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQPIANDTYPE 

Minor Code 

115 (0X0073) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Handle Type = %W Flags = %W 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 116 (0X0074) 


Description 

(OS) DosQNmPHandState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQNMPHANDSTATE 

Minor Code 

1 1 6 (0X0074) 

Trace Groups 


PIP 



Trace Types 
Traced Parameters 


POST 


Handle state = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 117 (0X0075) 


Description 

(OS) DosQNmPipelnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQNMPIPEINFO 

Minor Code 

1 1 7 (0X0075) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 118 (0X0076) 


Description 

(OS) DosQPathlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQPATHINFO 

Minor Code 

1 1 8 (0X0076) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 119 (0X0077) 



Description 


(OS) DosQSysinfo Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQSYSINFO 

Minor Code 

1 1 9 (0X0077) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 120 (0X0078) 


Description 

(OS) DosQVerify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSQVERIFY 

Minor Code 

120 (0X0078) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Verify Flag = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 121 (0X0079) 


Description 

(OS) DosRawReadNmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRAWREADNMPIPE 

Minor Code 

121 (0X0079) 

Trace Groups 


PIP 



Trace Types 
Traced Parameters 


POST 


Bytes read = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 122 (0X007A) 


Description 

(OS) DosRawWriteNmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRAWWRITENMPIPE 

Minor Code 

122 (0X007A) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Bytes written = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 123 (0X007B) 


Description 

(OS) DosIRead Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIREAD 

Minor Code 

123 (0X007B) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Bytes Read = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 125 (0X007D) 



Description 


(OS) DosReallocHuge Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSREALLOCHUGE 

Minor Code 

125 (OX007D) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 126 (0X007E) 


Description 

(OS) DosReallocSeg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSREALLOCSEG 

Minor Code 

126 (OX007E) 

Trace Groups 

SEL 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 127 (0X007F) 


Description 

(OS) Dos32ResumeThread Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRESUMETHREAD 

Minor Code 

127 (OX007F) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


POST 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 128 (0X0080) 


Description 

(OS) DosRmDir Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRMDIR 

Minor Code 

128 (0X0080) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 129 (0X0081) 


Description 

(OS) DosSelectDisk Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSELECTDISK 

Minor Code 

129 (0X0081) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 133 (0X0085) 



Description 


(OS) DosSemSetWait Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSEMSETWAIT 

Minor Code 

133 (0X0085) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 135 (0X0087) 


Description 

(OS) DosSendSignal Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSENDSIGNAL 

Minor Code 

135 (0X0087) 

Trace Groups 

SIG 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 137 (0X0089) 


Description 

(OS) DosSetDateTime Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETDATETIME 

Minor Code 

137 (0X0089) 

Trace Groups 


TIM 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 138 (0X008A) 


Description 

(OS) DosSetFHandState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETFHANDSTATE 

Minor Code 

138 (0X008A) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 139 (0X008B) 


Description 

(OS) DosSetFilelnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETFILEINFO 

Minor Code 

139 (0X008B) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 140 (0X008C) 



Description 


(OS) DosSetFileMode Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETFILEMODE 

Minor Code 

140 (0X008C) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 141 (0X008D) 


Description 

(OS) DosSetFSInfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETFSINFO 

Minor Code 

141 (0X008D) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 142 (0X008E) 


Description 

(OS) DosSetMaxFPI Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETMAXFPI 

Minor Code 

142 (0X008E) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


POST 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 143 (0X008F) 


Description 

(OS) DosSetNmPHandState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETNMPHANDSTATE 

Minor Code 

143 (0X008F) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 144 (0X0090) 


Description 

(OS) DosSetNmPipeSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETNMPIPESEM 

Minor Code 

144 (0X0090) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 145 (0X0091) 



Description 


(OS) DosSetPathlnfo Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETPATHINFO 

Minor Code 

145 (0X0091) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 146 (0X0092) 


Description 

(OS) DosSetPrty Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETPRTY 

Minor Code 

146 (0X0092) 

Trace Groups 

TK 

Trace Tvpes 

POST 

Traced Parameters 



Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 147 (0X0093) 


Description 

(OS) DosSetSigPlandler Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETSIGPIANDLER 

Minor Code 

147 (0X0093) 

Trace Groups 

SIG 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 148 (0X0094) 


DescriDtion 

(OS) DosSetVec Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETVEC 

Minor Code 

148 (0X0094) 

Trace GrouDS 

SIG 

Trace Tvoes 

POST 

Traced Parameters 



Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 149 (0X0095) 


DescriDtion 

(OS) DosSetVerify Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETVERIFY 

Minor Code 

149 (0X0095) 

Trace GrouDS 

FS 

Trace TvDes 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 150 (0X0096) 



Description 


(OS) DosSleep Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSLEEP 

Minor Code 

150 (0X0096) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 151 (0X0097) 


Description 

(OS) Dos32SuspendThread Dos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSUSPENDTHREAD 

Minor Code 

151 (0X0097) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 152 (0X0098) 


Description 

(OS) DosSystemService Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSYSTEMSERVICE 

Minor Code 

152 (0X0098) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


POST 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 153 (0X0099) 


Description 

(OS) DosTimerAsync Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IASYNCTIMER 

Minor Code 

153 (0X0099) 

Trace Groups 

TIM 

Trace Types 

POST 

Traced Parameters 


Return code = %W Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 154 (0X009A) 


Description 

(OS) DosTimerStart Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ISTARTTIMER 

Minor Code 

154 (0X009A) 

Trace Groups 

TIM 

Trace Types 

POST 

Traced Parameters 


Return code = %W Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 155 (0X009B) 



Description 


(OS) Dos32StopTimer Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32STOPTIMER 

Minor Code 

155 (0X009B) 

Trace Groups 

TIM 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 156 (0X009C) 


Description 

(OS) DosTransactNmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSTRANSACTNMPIPE 

Minor Code 

156 (0X0090) 

Trace Groups 

PIP 

Trace Types 

POST 

Traced Parameters 


Bytes out = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 157 (0X009D) 


Description 

(OS) DosWaitNmPipe Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSWAITNMPIPE 

Minor Code 

157 (0X009D) 

Trace Groups 


PIP 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 158 (0X009E) 


Description 

(OS) DoslWrite Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIWRITE 

Minor Code 

158 (0X009E) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Bytes Written = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 163 (0X00A3) 


Description 

(OS) Dos32AliasMem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ALIASMEM 

Minor Code 

163 (0X00A3) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Address = %F Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 164 (0X00A4) 



Description 


(OS) Dos32AllocMem Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ALLOCMEM 

Minor Code 

164 (0X00A4) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Address = %F Size = %D 
Flags = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 165 (0X00A5) 


Description 

(OS) Dos32AllocProtectedMem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ALLOCPROTECTEDMEM 

Minor Code 

165 (0X00A5) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Size = %D Flags = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 166 (0X00A6) 


Description 

(OS) Dos32AllocSharedMem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ALLOCSHAREDMEM 

Minor Code 


166 (0X00A6) 



Trace Groups 
Trace Types 
Traced Parameters 


VM 

PRE 

Size = %D Flags = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 167 (0X00A7) 


Description 

(OS) Dos32CreateThread Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CREATETHREAD 

Minor Code 

167 (0X00A7) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Stack size = %D Flags = %D 
Arg pointer = %F Starting EIP = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 168 (0X00A8) 


Description 

(OS) Dos32Debug Dos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32DEBUG 

Minor Code 

168 (0X00A8) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


No parameters traced. 



0S2KRNL Major Code: 0X0005 Minor Code: 169 (0X00A9) 

(OS) Dos32ExitList Dos Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32EXITLIST 
169 (0X00A9) 

TK 
PRE 

Function = %D Address = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 170 (0X00AA) 

(OS) Dos32FreeMem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32FREEMEM 
170 (0X00AA) 

VM 
PRE 

Address = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 171 (0X00AB) 

(OS) Dos32GetNamedSharedMem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32GETNAMEDSPIAREDMEIVI 
171 (0X00AB) 






Trace GrouDS 

VM 

Trace TvDes 

PRE 

Traced Parameters 

Name = %S 


Flags = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 172 (0X00AC) 

(OS) Dos32GetSharedMem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32GETSHAREDMEM 
172 (0X00AC) 

VM 
PRE 

Address = %F Flags = %D 



OS2KRNL Major Code: 0X0005 Minor Code: 173 (0X00AD) 



(OS) Dos32GiveSharedMem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32GIVESHAREDMEM 
173 (0X00AD) 

VM 

PRE 


Traced Parameters 


Address = %F Process ID = %D 



Flags = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 174 (0X00AE) 


Description 

(OS) Dos32QueryMem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYMEM 

Minor Code 

174 (0X00AE) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Address = %F Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 175 (0X00AF) 


Description 

(OS) Dos32QueryMemState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYMEMSTATE 

Minor Code 

175 (0X00AF) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Address = %F Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 176 (0X00B0) 


Description 


(OS) Dos32SetMem Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32SETMEM 


Minor Code 

176 (0X00B0) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Address = %F Size = %D 
Flags = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 177 (0X00B1) 


Description 

(OS) DosAllocFluge Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCPIUGE 

Minor Code 

177 (0X00B1) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Initial size=%W%W Max size = %W0000 


OS2KRNL Major Code: 0X0005 Minor Code: 178 (0X00B2) 


Description 

(OS) DosAllocProtFluge Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCPROTHUGE 

Minor Code 

178 (0X00B2) 

Trace Groups 

SEL 

Trace Types 


PRE 



Traced Parameters 


Initial size=%W%W Max size = %W0000 


0S2KRNL Major Code: 0X0005 Minor Code: 179 (0X00B3) 


Description 

(OS) DosAllocProtSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCPROTSEG 

Minor Code 

179 (0X00B3) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Flags=%W Size=%W 


OS2KRNL Major Code: 0X0005 Minor Code: 180 (0X00B4) 


Description 

(OS) DosAllocSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCSEG 

Minor Code 

180 (0X00B4) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Flags=%W Size=%W 


OS2KRNL Major Code: 0X0005 Minor Code: 181 (0X00B5) 



Description 


(OS) DosAllocShrProtSeg Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCSHRPROTSEG 

Minor Code 

181 (0X00B5) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Name = %S 
Size = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 182 (0X00B6) 


Description 

(OS) DosAllocShrSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSALLOCSHRSEG 

Minor Code 

182 (0X00B6) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Name = %S 
Size = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 183 (0X00B7) 


Description 

(OS) DosBeep Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSBEEP 

Minor Code 

183 (0X00B7) 


Trace Groups 
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Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


0S2KRNL Major Code: 0X0005 Minor Code: 184 (0X00B8) 


Description 

(OS) DosBufReset Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSBUFRESET 

Minor Code 

184 (0X00B8) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 185 (0X00B9) 


Description 

(OS) DosCalINmPipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCALLNMPIPE 

Minor Code 

185 (0X00B9) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 186 (0X00BA) 



Description 


(OS) DosChDir Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCHDIR 

Minor Code 

186 (0X00 BA) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 187 (0X00BB) 


Description 

(OS) DosChgFilePtr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCHGFILEPTR 

Minor Code 

187 (0X00BB) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Type = %W Distance = %W%W 
Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 188 (0X00BC) 


Description 

(OS) DosCliAccess Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCLIACCESS 

Minor Code 


188 (0X00BC) 



Trace Groups 


TK 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 189 (0X00BD) 


Description 

(OS) DosClose Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCLOSE 

Minor Code 

189 (0X00BD) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 190 (0X00BE) 


Description 

(OS) DosCloseSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCLOSESEM 

Minor Code 

190 (0X00BE) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Semaphore handle = %W%W 


OS2KRNL Major Code: 0X0005 Minor Code: 191 (0X00BF) 



Description 


(OS) DosConnectNmPipe Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCONNECTNMPIPE 

Minor Code 

191 (0X00BF) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 192 (0X00C0) 


Description 

(OS) DosCreateCSAIias Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCREATECSALIAS 

Minor Code 

192 (0X00C0) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Data selector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 193 (0X00C1) 


Description 

(OS) DosCreateSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCREATESEM 

Minor Code 

193 (0X00C1) 

Trace Groups 


SEM 



Trace Types 
Traced Parameters 


PRE 


Name = %S 


0S2KRNL Major Code: 0X0005 Minor Code: 194 (0X00C2) 


Description 

(OS) DosCreateThread Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCREATETHREAD 

Minor Code 

194 (0X00C2) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Transfer Address = %A Stack Address = %A 


OS2KRNL Major Code: 0X0005 Minor Code: 195 (0X00C3) 


Description 

(OS) DosCWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCWAIT 

Minor Code 

195 (0X00C3) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Pid = %W Wait = %W Action = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 196 (0X00C4) 



Description 


(OS) DosDelete Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDELETE 

Minor Code 

196 (0X00C4) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 197 (0X00C5) 


Description 

(OS) DosDevConfig Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDEVCONFIG 

Minor Code 

197 (0X00C5) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 



Parm = %W Item = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 198 (0X00C6) 


Description 

(OS) DosDevloctl2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDEVIOCTL2 

Minor Code 

198 (0X00C6) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


PRE 


Handle = %W Category = %W Function = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 199 (0X00C7) 


Description 

(OS) DosDevloctl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDEVIOCTL 

Minor Code 

199 (0X00C7) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W Category = %W Function = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 200 (0X00C8) 


Description 

(OS) DosDisConnectMmPipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDISCONNECTNMPIPE 

Minor Code 

200 (0X00C8) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 201 (0X00C9) 



Description 


(OS) DosDupHandle Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSDUPHANDLE 

Minor Code 

201 (0X00C9) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 202 (0X00CA) 


Description 

(OS) DosEditName Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSEDITNAME 

Minor Code 

202 (0X00CA) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Edit string = %S 
Source string = %S 
Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 203 (0X00CB) 


Description 

(OS) DosEnterCritSec Pre-Invocation 

Tracepoint 
Minor Code 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOSENTERCRITSEC 



203 (0X00CB) 


Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 204 (0X00CC) 


Description 

(OS) DosError Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSERROR 

Minor Code 

204 (0X00CC) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Error setting = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 206 (0X00CE) 


Description 

(OS) DosExit Dos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSEXIT 

Minor Code 

206 (0X00CE) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Function = %W ResultCode = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 207 (0X00CF) 


Description 

(OS) DosExitCritSec Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSEXITCRITSEC 

Minor Code 

207 (0X00CF) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 208 (0X00D0) 


Description 

(OS) DosExitList Dos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSEXITLIST 

Minor Code 

208 (0X00D0) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Function = %W Address = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 209 (0X00D1) 


Description 

(OS) DosFilelO Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFILEIO 

Minor Code 

209 (0X00D1) 


Trace Groups 



FS 


Trace Types 
Traced Parameters 


PRE 


Handle = %W 


0S2KRNL Major Code: 0X0005 Minor Code: 210 (0X00D2) 


Description 

(OS) DosFileLocks Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFILELOCKS 

Minor Code 

210 (0X00D2) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 21 1 (0X00D3) 


Description 

(OS) DosFindClose Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDCLOSE 

Minor Code 

21 1 (0X00D3) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 212 (0X00D4) 



Description 


(OS) DosFindFirst2 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDFIRST2 

Minor Code 

212 (0X00D4) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 213 (0X00D5) 


Description 

(OS) DosFindFirst Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDFIRST 

Minor Code 

213 (0X00D5) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 214 (0X00D6) 


Description 

(OS) DosFindFromName Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDFROMNAME 

Minor Code 

214 (0X00D6) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


PRE 


Name = %S 

Position = %F Directory Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 215 (0X00D7) 


Description 

(OS) DosFindNext Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDNEXT 

Minor Code 

215 (0X00D7) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 216 (0X00D8) 


Description 

(OS) DosFindNotifyClose Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDNOTIFYCLOSE 

Minor Code 

216 (0X00D8) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 217 (0X00D9) 


Description 

(OS) DosFindNotifyFirst Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDNOTIFYFIRST 

Minor Code 

21 7 (0X00D9) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Name = %S 

Attribute = %W Level = %W 
Timeout = %W%W 


OS2KRNL Major Code: 0X0005 Minor Code: 218 (0X00DA) 


Description 

(OS) DosFindNotifyNext Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFINDNOTIFYNEXT 

Minor Code 

218 (0X00DA) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Change count = %W Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 219 (0X00DB) 


Description 


(OS) DosFlagProcess Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFLAGPROCESS 


Minor Code 

219 (0X00DB) 

Trace Groups 

SIG 

Trace Types 

PRE 

Traced Parameters 


Pid = %W Action = %W 
Signal = %W Arg = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 220 (0X00DC) 


Description 

(OS) DosFreeModule Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFREEMODULE 

Minor Code 

220 (0X00DC) 

Trace Groups 

LDR 

Trace Tvpes 

PRE 

Traced Parameters 



Module Handle = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 221 (0X00DD) 


Description 

(OS) DosFreeSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFREESEG 

Minor Code 

221 (0X00DD) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 



Selector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 222 (0X00DE) 


Description 

(OS) DosFSAttach Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFSATTACH 

Minor Code 

222 (0X00DE) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 

Device = %S 


FSD = %S 


OpFlag = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 223 (0X00DF) 


Description 

(OS) DosFSCtl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFSCTL 

Minor Code 

223 (0X00DF) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


FSD = %S 

Handle = %W Route = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 224 (0X00E0) 



Description 


(OS) DosGetDateTime Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETDATETIME 

Minor Code 

224 (OXOOEO) 

Trace Groups 

TIM 

Trace Types 

PRE 

Traced Parameters 


DateTime structure at %W%W 


OS2KRNL Major Code: 0X0005 Minor Code: 225 (0X00E1) 


Description 

(OS) DosGetModHandle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETMODHANDLE 

Minor Code 

225 (0X00E1) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Module name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 226 (0X00E2) 


Description 

(OS) DosGetModName Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETMODNAME 

Minor Code 

226 (0X00E2) 

Trace Groups 


LDR 



Trace Types 
Traced Parameters 


PRE 


Module handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 227 (0X00E3) 


Description 

(OS) DosGetPid Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETPID 

Minor Code 

227 (0X00E3) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 228 (0X00E4) 


Description 

(OS) DosGetProcAddr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETPROCADDR 

Minor Code 

228 (0X00E4) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Module handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 229 (0X00E5) 



Description 


(OS) DosGetPrty Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETPRTY 

Minor Code 

229 (0X00E5) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


ID = %W Scope = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 230 (0X00E6) 


Description 

(OS) DosGetResource Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETRESOURCE 

Minor Code 

230 (0X00E6) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


NamelD = %W Type = %W 
Module handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 231 (0X00E7) 


Description 

(OS) DosGetSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETSEG 

Minor Code 

231 (0X00E7) 


Trace Groups 



SEL 


Trace Types 
Traced Parameters 


PRE 


Selector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 232 (0X00E8) 


Description 

(OS) DosGetShrSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETSHRSEG 

Minor Code 

232 (0X00E8) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 233 (0X00E9) 


Description 

(OS) DosGetVersion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETVERSION 

Minor Code 

233 (0X00E9) 

Trace Groups 

TK 

Trace Tvpes 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 234 (0X00EA) 



Description 


(OS) DosGiveSeg Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGIVESEG 

Minor Code 

234 (0X00EA) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Selector = %W Pid = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 235 (0X00EB) 


Description 

(OS) DosHoldSignal Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSHOLDSIGNAL 

Minor Code 

235 (0X00EB) 

Trace Groups 

SIG 

Trace Types 

PRE 

Traced Parameters 


Action = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 236 (0X00EC) 


Description 

(OS) DosICopy Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSICOPY 

Minor Code 

236 (0X00EC) 

Trace Groups 

FS 



Trace Types 

PRE 

Traced Parameters 

Source = %S 
Target = %S 
OpMode = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 237 (0X00ED) 


Description 

(OS) DoslExecPgm Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIEXECPGM 

Minor Code 

237 (0X00ED) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Program name = %S 
Exec flag = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 240 (0X00F0) 


Description 

(OS) DosISetCP Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSISETCP 

Minor Code 

240 (OXOOFO) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Codepage ID = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 241 (0X00F1) 


Description 

(OS) DosKillProcess Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSKILLPROCESS 

Minor Code 

241 (0X00F1) 

Trace Groups 

SIG 

Trace Types 

PRE 

Traced Parameters 


PID = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 242 (0X00F2) 


Description 

(OS) DosLoadModule Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSLOADMODULE 

Minor Code 

242 (0X00F2) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Module name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 243 (0X00F3) 


Description 

(OS) DosMakeNmPipe Pre-Invocation 

Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.preDOSMAKENMPIPE 


Minor Code 

243 (0X00F3) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 244 (0X00F4) 


Description 

(OS) DosMakePipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSMAKEPIPE 

Minor Code 

244 (0X00 F4) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Size of pipe = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 245 (0X00F5) 


Description 

(OS) DosMkDir2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSMKDIR2 

Minor Code 

245 (0X00F5) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 



Path = %S 


0S2KRNL Major Code: 0X0005 Minor Code: 246 (0X00F6) 


Description 

(OS) DosMkDir Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSMKDIR 

Minor Code 

246 (OXOOF6) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 252 (0X00FC) 


Description 

(OS) DosMove Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSMOVE 

Minor Code 

252 (OXOOFC) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 

New name = %S 


Old name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 253 (0X00FD) 


Description 



(OS) DosMuxSemWait Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL. DOSMUXSEMWAIT 

Minor Code 

253 (0X00FD) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Timeout=%D 


OS2KRNL Major Code: 0X0005 Minor Code: 254 (0X00FE) 


Description 

(OS) DosNewSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSNEWSIZE 

Minor Code 

254 (OXOOFE) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Filesize %W%W Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 255 (0X00FF) 


Description 

(OS) DosOpen2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPEN2 

Minor Code 

255 (0X00FF) 

Trace Groups 

FS 

Trace Types 


PRE 



Traced Parameters 


Filename = %S 

Mode = %W Control = %W 

Attrib = %W Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 256 (0X0100) 


Description 

(OS) DosOpen Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPEN 

Minor Code 

256 (0X0100) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Filename = %S 

Mode = %W Control = %W 

Attrib = %W Size = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 257 (0X0101) 


Description 

(OS) DosOpenSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPENSEM 

Minor Code 

257 (0X0101) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name = %S 



0S2KRNL Major Code: 0X0005 Minor Code: 258 (0X0102) 


Description 

(OS) DosOpLockRelease Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPLOCKREL.EASE 

Minor Code 

258 (0X0102) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Kernel key = %W:%W Flags = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 259 (0X0103) 


Description 

(OS) DosOpLockWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPLOCKWAIT 

Minor Code 

259 (0X0103) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 260 (0X0104) 


Description 

(OS) DosPeekNmPipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPEEKNMPIPE 

Minor Code 


260 (0X0104) 



Trace Groups 


PIP 


Trace Types 
Traced Parameters 


PRE 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 261 (0X0105) 


Description 

(OS) DosPhysicalDisk Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPHYSICALDISK 

Minor Code 

261 (0X0105) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Function = %W Data Len = %W 
Parm Len = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 262 (0X0106) 


Description 

(OS) DosQNmPipeState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQNMPIPESEMSTATE 

Minor Code 

262 (0X0106) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Semaphore handle = %W%W 



0S2KRNL Major Code: 0X0005 Minor Code: 263 (0X0107) 

(OS) DosPortAccess Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPORTACCESS 
263 (0X0107) 

TK 
PRE 

Last Port = %W First Port = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 265 (0X0109) 

(OS) DosQCurDir Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQCURDIR 
265 (0X0109) 

FS 
PRE 

Drive Number = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 266 (0X01 0A) 

(OS) DosQCurDisk Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQCURDISK 






Minor Code 


266 (0X0 10A) 


Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 267 (0X01 0B) 


Description 

(OS) DosQFHandState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQFHANDSTATE 

Minor Code 

267 (0X01 0B) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 268 (0X01 0C) 


Description 

(OS) DosQFilelnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQFILEINFO 

Minor Code 

268 (0X01 0C) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W Info Level = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 269 (0X01 0D) 

(OS) DosQFileMode Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQFILEMODE 
269 (0X01 0D) 

FS 
PRE 

File = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 270 (0X01 0E) 

(OS) DosQFSAttach Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQFSATTACH 
270 (0X01 0E) 

FS 
PRE 

Path = %S 
Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 271 (0X01 OF) 

(OS) DosQFSInfo Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQFSINFO 






Minor Code 


271 (0X01 OF) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


Drive = %W Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 272 (0X0110) 


Description 

(OS) DosQHandType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQHANDTYPE 

Minor Code 

272 (0X0110) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 



Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 273 (0X01 11) 


Description 

(OS) DosQNmPHandState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQNMPHANDSTATE 

Minor Code 

273 (0X0111) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 274 (0X0112) 


Description 

(OS) DosQNmPipelnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQNMPIPEINFO 

Minor Code 

274 (0X0112) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 275 (0X0113) 


Description 

(OS) DosQPathlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQPATHlNFO 

Minor Code 

275 (0X0113) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 
Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 276 (0X0114) 


Description 


(OS) DosQSysinfo Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQSYSINFO 


Minor Code 

276 (0X0114) 

Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


Index = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 277 (0X0115) 


Description 

(OS) DosQVerify Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSQVERIFY 

Minor Code 

277 (0X0115) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 278 (0X0116) 


Description 

(OS) DosRawReadNmPipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRAWREADNMPIPE 

Minor Code 

278 (0X0116) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 



Handle = %W 


0S2KRNL Major Code: 0X0005 Minor Code: 279 (0X0117) 


Description 

(OS) DosRawWriteNmPipe Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRAWWRITENMPIPE 

Minor Code 

279 (0X0117) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 280 (0X0118) 


Description 

(OS) DosIRead Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIREAD 

Minor Code 

280 (0X0118) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W Buffer = %W:%W 

Buffer Size = %W Pointer to bytes read = %W:%W 


OS2KRNL Major Code: 0X0005 Minor Code: 282 (0X01 1 A) 


Description 



(OS) DosReallocHuge Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSREALLOCHUGE 

Minor Code 

282 (0X011 A) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


New size = %W%W Selector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 283 (0X01 1 B) 


Description 

(OS) DosReallocSeg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSREALLOCSEG 

Minor Code 

283 (0X01 IB) 

Trace Groups 

SEL 


Trace Types 

PRE 

Traced Parameters 


Selector = %W New size = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 284 (0X01 1C) 


Description 

(OS) DosResumeThread Dos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRESUMETHREAD 

Minor Code 

284 (0X01 1C) 

Trace Groups 

TK 

Trace Types 


PRE 



Traced Parameters 


Function = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 285 (0X01 1 D) 


Description 

(OS) DosFtmDir Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRMDIFt 

Minor Code 

285 (0X01 ID) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Directory = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 286 (0X01 1 E) 


Description 

(OS) DosSelectDisk Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSELECTDISK 

Minor Code 

286 (0X01 1 E) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Drive Number = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 290 (0X0122) 



Description 


(OS) DosSemSetWait Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSEMSETWAIT 

Minor Code 

290 (0X0122) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %W%W 


OS2KRNL Major Code: 0X0005 Minor Code: 292 (0X0124) 


Description 

(OS) DosSendSignal Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSENDSIGNAL 

Minor Code 

292 (0X0124) 

Trace Groups 

SIG 

Trace Types 

PRE 

Traced Parameters 


Signal number = %W CSID = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 294 (0X0126) 


Description 

(OS) DosSetDateTime Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETDATETIME 

Minor Code 

294 (0X0126) 

Trace Groups 

TIM 

Trace Types 


PRE 



Traced Parameters 


DateTime structure at %W%W 


0S2KRNL Major Code: 0X0005 Minor Code: 295 (0X0127) 


Description 

(OS) DosSetFHandState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETFHANDSTATE 

Minor Code 

295 (0X0127) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W State = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 296 (0X0128) 


Description 

(OS) DosSetFilelnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETFILEINFO 

Minor Code 

296 (0X0128) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 



Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 297 (0X0129) 



Description 


(OS) DosSetFileMode Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETFILEMODE 

Minor Code 

297 (0X0129) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 298 (0X01 2A) 


Description 

(OS) DosSetFSInfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETFSINFO 

Minor Code 

298 (0X01 2A) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 299 (0X01 2B) 


Description 

(OS) DosSetMaxFPI Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETMAXFPI 

Minor Code 

299 (0X01 2B) 

Trace Groups 

FS 

Trace Types 


PRE 



Traced Parameters 


Handles = %W 


0S2KRNL Major Code: 0X0005 Minor Code: 300 (0X01 2C) 


Description 

(OS) DosSetNmPHandState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETNMPHANDSTATE 

Minor Code 

300 (0X01 2C) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 301 (0X01 2D) 


Description 

(OS) DosSetNmPipeSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETNMPIPESEM 

Minor Code 

301 (0X01 2D) 

Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Semaphore handle = %W%W Pipe handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 302 (0X01 2E) 



Description 


(OS) DosSetPathlnfo Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETPATHINFO 

Minor Code 

302 (0X01 2E) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path =%S 
Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 303 (0X01 2F) 


Description 

(OS) DosSetPrty Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETPRTY 

Minor Code 

303 (0X01 2F) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Scope = %W Priority Class, Delta = %W 
ID = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 304 (0X0130) 


Description 

(OS) DosSetSigPlandler Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETSIGPIANDLER 

Minor Code 

304 (0X0130) 


Trace Groups 



SIG 


Trace Types 
Traced Parameters 


PRE 


Signal number = %W Action = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 305 (0X0131) 


Description 

(OS) DosSetVec Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETVEC 

Minor Code 

305 (0X0131) 

Trace Groups 

SIG 

Trace Types 

PRE 

Traced Parameters 


Return address = %W%W Vector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 306 (0X0132) 


Description 

(OS) DosSetVerify Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETVERIFY 

Minor Code 

306 (0X0132) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 307 (0X0133) 



Description 


(OS) DosSleep Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSLEEP 

Minor Code 

307 (0X0133) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Timeout Interval = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 308 (0X0134) 


Description 

(OS) DosSuspendThread Dos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSUSPENDTHREAD 

Minor Code 

308 (0X0134) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Function = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 309 (0X0135) 


Description 

(OS) DosSystemService Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSYSTEMSERVICE 

Minor Code 

309 (0X0135) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


PRE 


Function = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 310 (0X0136) 


Description 

(OS) DosTimerAsync Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IASYNCTIMER 

Minor Code 

310 (0X0136) 

Trace Groups 

TIM 

Trace Types 

PRE 

Traced Parameters 


Interval = %D 
Semaphore at %D 


OS2KRNL Major Code: 0X0005 Minor Code: 31 1 (0X0137) 


Description 

(OS) DosTimerStart Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ISTARTTIMER 

Minor Code 

311 (0X0137) 

Trace Groups 

TIM 

Trace Tvpes 

PRE 

Traced Parameters 



Interval = %D 


Semaphore at %D 



0S2KRNL Major Code: 0X0005 Minor Code: 312 (0X0138) 

(OS) Dos32StopTimer Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32STOPTIMER 
312 (0X0138) 

TIM 
PRE 

Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 313 (0X0139) 

(OS) DosTransactNmPipe Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSTRANSACTNMPIPE 
313 (0X0139) 

PIP 
PRE 

Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 314 (0X01 3A) 

(OS) DosWaitNmPipe Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSWAITNMPIPE 






Minor Code 


314 (0X01 3A) 


Trace Groups 

PIP 

Trace Types 

PRE 

Traced Parameters 


Name = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 315 (0X01 3B) 


Description 

(OS) DoslWrite Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIWRITE 

Minor Code 

315 (0X01 3B) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W Buffer = %W:%W 

Buffer Size = %W Pointer to bytes written = %W:%W 


OS2KRNL Major Code: 0X0005 Minor Code: 323 (0X0143) 


Description 

(OS) DosGetResource2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETRESOURCE2 

Minor Code 

323 (0X0143) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 



NamelD = %W Type = %W 
Module handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 324 (0X0144) 


Description 

(OS) DosGetResource2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETRESOURCE2 

Minor Code 

324 (0X0144) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Address = %W:%W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 325 (0X0145) 


Description 

(OS) Dos Free Resource Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFREERESOURCE 

Minor Code 

325 (0X0145) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Selector = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 326 (0X0146) 


Description 



(OS) DosFreeResource Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFREERESOURCE 

Minor Code 

326 (0X0146) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 327 (0X0147) 


Description 

(OS) Dos32GetResource Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32GETRESOURCE 

Minor Code 

327 (0X0147) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


hMod = %D TypelD = %D 
NamelD = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 328 (0X0148) 


Description 

(OS) Dos32GetResource Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32GETRESOURCE 

Minor Code 

328 (0X0148) 

Trace Groups 

LDR 


Trace Types 



POST 


Traced Parameters 

Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 331 (0X01 4B) 


Description 

(OS) Dos32FreeRsource Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32FREERESOURCE 

Minor Code 

331 (0X01 4B) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Pointer = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 332 (0X01 4C) 


Description 

(OS) Dos32FreeResource Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32FREERESOURCE 

Minor Code 

332 (0X01 4C) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 333 (0X01 4D) 



Description 


(OS) Dos32QueryProcAddr Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYPROCADDR 

Minor Code 

333 (0X01 4D) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Name = %S 

hMod = %D Ord = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 334 (0X01 4E) 


Description 

(OS) Dos32QueryProcAddr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYPROCADDR 

Minor Code 

334 (0X01 4E) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Proc Addr = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 335 (0X01 4F) 


Description 

(OS) Dos32CreateEventSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CREATEEVENTSEM 

Minor Code 

335 (0X01 4F) 


Trace Groups 



SEM 


Trace Types 
Traced Parameters 


PRE 


Name ptr = %F Attribs = %D 
Initial State = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 336 (0X0150) 


Description 

(OS) Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CREATEEVENTSEM 

Minor Code 

336 (0X0150) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 337 (0X0151) 


Description 

(OS) Dos320penEventSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: 0S2KRNL.preD0S320PENEVENTSEM 

Minor Code 

337 (0X0151) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name Ptr = %F phev = %F 



0S2KRNL Major Code: 0X0005 Minor Code: 338 (0X0152) 

(OS) Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS320PENEVENTSEM 
338 (0X0152) 

SEM 
POST 

Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 339 (0X0153) 

(OS) Dos320penEventSem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CLOSEEVENTSEM 
339 (0X0153) 

SEM 
PRE 

Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 340 (0X0154) 

(OS) Dos32CloseEventSem Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CLOSEEVENTSEM 





Minor Code 



340 (0X0154) 


Trace Groups 
Trace Types 
Traced Parameters 


SEM 

POST 

Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 341 (0X0155) 


Description 

(OS) Dos32ResetEventSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32RESETEVENTSEM 

Minor Code 

341 (0X0155) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 342 (0X0156) 


Description 

(OS) Dos32ResetEventSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32RESETEVENTSEM 

Minor Code 

342 (0X0156) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 



0S2KRNL Major Code: 0X0005 Minor Code: 343 (0X0157) 

(OS) Dos32PostEventSem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32POSTEVENTSEM 
343 (0X0157) 

SEM 
PRE 

Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 344 (0X0158) 

(OS) Dos32PostEventSem Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32POSTEVENTSEM 
344 (0X0158) 

SEM 
POST 

Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 345 (0X0159) 

(OS) Dos32WaitEvenSem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32WAITEVENTSEM 






Minor Code 


345 (0X0159) 


Trace Groups 

SEM 


Trace Types 

PRE 


Traced Parameters 


Handle = %D Timeout = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 346 (0X01 5A) 


Description 

(OS) Dos32WaitEventSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32WAITEVENTSEM 

Minor Code 

346 (0X01 5A) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 347 (0X01 5B) 


Description 

(OS) Dos32QueryEventSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYEVENTSEM 

Minor Code 

347 (0X01 5B) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 



0S2KRNL Major Code: 0X0005 Minor Code: 348 (0X01 5C) 


Description 

(OS) Dos32QueryEventSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYEVENTSEI\/l 

Minor Code 

348 (0X01 5C) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


State = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 349 (0X01 5D) 


Description 

(OS) Dos32CreateMutexSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CREATEMUTEXSEM 

Minor Code 

349 (0X01 5D) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name ptr = %F Attribs = %D 
Initial State = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 350 (0X01 5E) 


Description 


(OS) Dos32CreateMutexSem Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CREATEMUTEXSEM 


Minor Code 

350 (0X01 5E) 

Trace Groups 

SEM 


Trace Types 

POST 


Traced Parameters 


Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 351 (0X01 5F) 


Description 

(OS) Dos320penMutexSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: 0S2KRNL.preD0S320PENMUTEXSEM 

Minor Code 

351 (0X01 5F) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name ptr = %F Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 352 (0X0160) 


Description 

(OS) Dos320penMutexSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS320PENMUTEXSEM 

Minor Code 

352 (0X0160) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 



Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 353 (0X0161) 


Description 

(OS) Dos32CloseMutexSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CLOSEMUTEXSEM 

Minor Code 

353 (0X0161) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 354 (0X0162) 


Description 

(OS) Dos32CloseMutexSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CLOSEMUTEXSEM 

Minor Code 

354 (0X0162) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 355 (0X0163) 


Description 


(OS) Dos32RequestMutexSem Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32REQUESTMUTEXSEM 


Minor Code 

355 (0X0163) 

Trace Groups 

SEM 


Trace Types 

PRE 


Traced Parameters 


Handle = %D Timeout = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 356 (0X0164) 


Description 

(OS) Dos32RequestMutexSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32REQUESTMUTEXSEM 

Minor Code 

356 (0X0164) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 357 (0X0165) 


Description 

(OS) Dos32ReleaseMutexSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32RELEASEMUTEXSEM 

Minor Code 

357 (0X0165) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 



Handle = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 358 (0X0166) 


Description 

(OS) Dos32ReleaseMutexSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32RELEASEMUTEXSEM 

Minor Code 

358 (0X0166) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 359 (0X0167) 


Description 

(OS) Dos32QueryMutexSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYMUTEXSEM 

Minor Code 

359 (0X0167) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 360 (0X0168) 


Description 


(OS) Dos32QueryMutexSem Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYMUTEXSEM 


Minor Code 

360 (0X0168) 

Trace Groups 

SEM 


Trace Types 

POST 


Traced Parameters 


PID Owner = %D TID Owner = %D 
Count = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 361 (0X0169) 


Description 

(OS) Dos32CreateMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CREATEMUXWAITSEM 

Minor Code 

361 (0X0169) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name ptr = %F cSemRec = %D 
SemRec ptr = %F Attribs = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 362 (0X01 6A) 


Description 

(OS) Dos32CreateMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CREATEMUXWAITSEM 

Minor Code 

362 (0X01 6A) 

Trace Groups 


SEM 



Trace Types 
Traced Parameters 


POST 


Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 363 (0X01 6B) 


Description 

(OS) Dos320penMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: 0S2KRNL.preD0S320PENMUXWAITSEM 

Minor Code 

363 (0X01 6B) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Name Ptr = %F phmux = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 364 (0X01 6C) 


Description 

(OS) Dos320penMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS320PENMUXWAITSEM 

Minor Code 

364 (0X01 6C) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Handle = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 365 (0X01 6D) 



Description 


(OS) Dos32CloseMuxWaitSem Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CLOSEMUXWAITSEIVI 

Minor Code 

365 (0X01 6D) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 366 (0X01 6E) 


Description 

(OS) Dos32CloseMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CLOSEMUXWAITSEM 

Minor Code 

366 (0X01 6E) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 367 (0X01 6F) 


Description 

(OS) Dos32WaitMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32WAITMUXWAITSEM 

Minor Code 

367 (0X01 6F) 

Trace Groups 


SEM 



Trace Types 
Traced Parameters 


PRE 


Handle = %D Timeout = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 368 (0X0170) 


Description 

(OS) Dos32WaitMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32WAITMUXWAITSEI\/l 

Minor Code 

368 (0X0170) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 369 (0X0171) 


Description 

(OS) Dos32AddMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ADDMUXWAITSEM 

Minor Code 

369 (0X0171) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D SemRec = %Q 


OS2KRNL Major Code: 0X0005 Minor Code: 370 (0X0172) 



Description 


(OS) Dos32AddMuxWaitSem Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ADDMUXWAITSEI\/i 

Minor Code 

370 (0X0172) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 371 (0X0173) 


Description 

(OS) Dos32DeleteMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32DELETEMUXWAITSEM 

Minor Code 

371 (0X0173) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Mux Handle = %D Sem Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 372 (0X0174) 


Description 

(OS) Dos32DeleteMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32DELETEMUXWAITSEM 

Minor Code 

372 (0X0174) 

Trace Groups 


SEM 



Trace Types 
Traced Parameters 


POST 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 373 (0X0175) 


Description 

(OS) Dos32QueryMuxWaitSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYMUXWAITSEM 

Minor Code 

373 (0X0175) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Handle = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 374 (0X0176) 


Description 

(OS) Dos32QueryMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYMUXWAITSEM 

Minor Code 

374 (0X0176) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


cSemRec = %D pSemRec = %F 


Attribs = %D Return code = %D 



0S2KRNL Major Code: 0X0005 Minor Code: 375 (0X0177) 


Description 

(OS) DosGetCP Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSGETCP 

Minor Code 

375 (0X0177) 

Trace Groups 

NLS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 376 (0X0178) 


Description 

(OS) DosGetCP Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSGETCP 

Minor Code 

376 (0X0178) 

Trace Groups 

NLS 


Trace Types 

POST 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 377 (0X0179) 


Description 

(OS) Dos32AsyncTimer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ASYNCTIMER 

Minor Code 

377 (0X0179) 

Trace Groups 


TIM 



Trace Types 

PRE 

Traced Parameters 

Interval = %D 
Semaphore at %D 


OS2KRNL Major Code: 0X0005 Minor Code: 378 (0X01 7A) 


Description 

(OS) Dos32AsyncTimer Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ASYNCTIMER 

Minor Code 

378 (0X01 7A) 

Trace Groups 

TIM 

Trace Types 

POST 

Traced Parameters 


Return code = %D Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 379 (0X01 7B) 


Description 

(OS) Dos32StartTimer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32STARTTIMER 

Minor Code 

379 (0X01 7B) 

Trace Groups 

TIM 

Trace Types 

PRE 

Traced Parameters 


Interval = %D 


Semaphore at %D 



0S2KRNL Major Code: 0X0005 Minor Code: 380 (0X01 7C) 

(OS) Dos32StartTimer Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32STARTTIMER 
380 (0X01 7C) 

TIM 
POST 

Return code = %D Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 391 (0X0187) 

(OS) Dos32WaitThread Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32WAITTHREAD 
391 (0X0187) 

SEM 
PRE 

ThreadID = %D WaitOption = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 392 (0X0188) 

(OS) Dos32WaitThread Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32WAITTHREAD 





Minor Code 



392 (0X0188) 


Trace Groups 

SEM 


Trace Types 

POST 


Traced Parameters 


ThreadID = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 393 (0X0189) 


Description 

(OS) Cluster Allocate Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL. Allocate 

Minor Code 

393 (0X0189) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Cluster Count Wanted = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 394 (0X01 8A) 


Description 

(OS) Cluster Allocate Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postAllocate 

Minor Code 

394 (0X01 8A) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Cluster Count Obtained = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 395 (0X01 8B) 


Description 

(OS) Cluster Release Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preRelease 

Minor Code 

395 (0X01 8B) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Cluster Release = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 397 (0X01 8D) 


Description 

(OS) File Lock/Unlock Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.w_LockOper 

Minor Code 

397 (0X01 8D) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Unlock Flag = %W Handle = %W 
Region Offset = %D Length = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 401 (0X0191) 


Description 


(OS) Thread Reschedule Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.postSchedNext 


Minor Code 

401 (0X0191) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Switched to PID = %W TID = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 403 (0X0193) 


Description 

(OS) DosMuxSemWait Post-Invocation (No Wait) 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSMUXSEMWAIT2 

Minor Code 

403 (0X0193) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Index = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 404 (0X0194) 


Description 

(OS) DosEnumAttribute Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSENUMATTRIBUTE 

Minor Code 

404 (0X0194) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


No parameters traced. 



0S2KRNL Major Code: 0X0005 Minor Code: 405 (0X0195) 

(OS) DosEnumAttribute Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSENUMATTRIBUTE 
405 (0X0195) 

FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 406 (0X0196) 

(OS) DosISetFileinfo Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSISETFILEINFO 
406 (0X0196) 

FS 
PRE 

Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 407 (0X0197) 

(OS) DosISetFileinfo Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSISETFILEINFO 






Minor Code 


407 (0X0197) 


Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 408 (0X0198) 


Description 

(OS) DosISetPathlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSISETPATFIINFO 

Minor Code 

408 (0X0198) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path =%S 
Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 409 (0X0199) 


Description 

(OS) DosISetPathlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSISETPATFIINFO 

Minor Code 

409 (0X0199) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 



Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 410 (0X01 9A) 


Description 

(OS) Dos32QueryResource Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYRESOURCESIZE 

Minor Code 

410 (0X01 9A) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


hMod = %D TypelD = %D 
NamelD = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 41 1 (0X01 9B) 


Description 

(OS) Dos32QueryResourceSize Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYRESOURCESIZE 

Minor Code 

411 (0X01 9B) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Address = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 412 (0X01 9C) 


Description 



(OS) DosIDevloctl Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIDEVIOCTL 

Minor Code 

412 (0X01 9C) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 413 (0X01 9D) 


Description 

(OS) DosIDevloctl Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIDEVIOCTL 

Minor Code 

413 (0X01 9D) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 414 (0X01 9E) 


Description 

(OS) DosISetRelMaxFH Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSISETRELMAXFH 

Minor Code 

414 (0X01 9E) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


No parameters traced. 



0S2KRNL Major Code: 0X0005 Minor Code: 415 (0X01 9F) 


Description 

(OS) DosISetRelMaxFH Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSISETRELMAXFH 

Minor Code 

415 (0X01 9F) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 416 (0X01 A0) 


Description 

(OS) Dos32lnitializePorthole Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32INITIALIZEPORTHOLE 

Minor Code 

416 (0X01 A0) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Init Routine = %D entry type = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 417 (0X01 A1) 


Description 


(OS) Dos32lnitializePorthole Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32INITIALIZEPORTHOLE 


Minor Code 

417 (0X01 A1) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 418 (0X01 A2) 


Description 

(OS) Dos32QueryHeaderlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYHEADERINFO 

Minor Code 

418 (0X01 A2) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


hMod = %D index = %D 
phdr = %D cb = %D 
subfunc = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 419 (0X01 A3) 


Description 

(OS) Dos32QueryHeaderlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYHEADERINFO 

Minor Code 

419 (0X01 A3) 

Trace Groups 

LDR 

Trace Types 


POST 



Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 420 (0X01 A4) 


Description 

(OS) Dos32QueryProcType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYPROCTYPE 

Minor Code 

420 (0X01 A4) 

Trace Groups 

LDR 

Trace Types 

PRE 

Traced Parameters 


Name = %S 

hMod = %D Ord = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 421 (0X01 A5) 


Description 

(OS) Dos32QueryProcType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYPROCTYPE 

Minor Code 

421 (0X01 A5) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Proc Type = %F Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 424 (0X01 A8) 



Description 


(OS) DosOpen2Compt Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPEN2COMPT 

Minor Code 

424 (0X01 A8) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Filename = %S 

Mode = %W Control = %W 

Attrib = %W Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 425 (0X01 A9) 


Description 

(OS) DosOpen2Compt Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPEN2COMPT 

Minor Code 

425 (0X01 A9) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Action = %W Handle = %W 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 428 (0X01 AC) 


Description 


(OS) Dos32ISetFHState Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32ISETFHSTATE 



Minor Code 


428 (0X01 AC) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


File Handle = %W State = %W %W 


OS2KRNL Major Code: 0X0005 Minor Code: 429 (0X01 AD) 


Description 

(OS) Dos32ISetFHState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32ISETFHSTATE 

Minor Code 

429 (0X01 AD) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 430 (0X01 AE) 


Description 

(OS) Dos32IQUERYFHSTATE Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IQUERYFHSTATE 

Minor Code 

430 (0X01 AE) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 431 (0X01 AF) 


Description 

(OS) Dos32IQUERYFHSTATE Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IQUERYFHSTATE 

Minor Code 

431 (0X01 AF) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Plandle State = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 432 (0X01 B0) 


Description 

(OS) Dos32IRead Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IREAD 

Minor Code 

432 (0X01 B0) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Flandle = %D Buffer = %F 

Buffer Size = %D Pointer to Bytes Read = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 433 (0X01 B1) 


Description 


(OS) Dos32IRead Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IREAD 


Minor Code 

433 (0X01 B1) 

Trace Groups 

FS 


Trace Types 

POST 


Traced Parameters 


Bytes Read = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 434 (0X01 B2) 


Description 

(OS) Dos32IWrite Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IWRITE 

Minor Code 

434 (0X01 B2) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Flandle = %D Buffer = %F 

Buffer Size = %D Pointer to Bytes Written = %F 


OS2KRNL Major Code: 0X0005 Minor Code: 435 (0X01 B3) 


Description 

(OS) Dos32IWrite Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IWRITE 

Minor Code 

435 (0X01 B3) 

Trace Groups 

FS 

Trace Types 


POST 



Traced Parameters 


Bytes Written = %D Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 436 (0X01 B4) 


Description 

(OS) Dos32DumpProcess Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32DUI\/lPPROCESS 

Minor Code 

436 (0X01 B4) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Flag = %D Drive = %D 
PID = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 437 (0X01 B5) 


Description 

(OS) Dos32DumpProcess Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32DUMPPROCESS 

Minor Code 

437 (0X01 B5) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 438 (0X01 B6) 



Description 


(OS) Dos32SuppressPopUps Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32SUPPRESSPOPUPS 

Minor Code 

438 (0X01 B6) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Flag = %D Drive = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 439 (0X01 B7) 


Description 

(OS) Dos32SuppressPopUps Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32SUPPRESSPOPUPS 

Minor Code 

439 (0X01 B7) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 440 (0X01 B8) 


Description 

(OS) Dos32KillThread Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32KILLTPIREAD 

Minor Code 

440 (0X01 B8) 

Trace Groups 

TK 



Trace Types 
Traced Parameters 


PRE 


Tid = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 441 (0X01 B9) 


Description 

(OS) Dos32KillThread Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32KILLTHREAD 

Minor Code 

441 (0X01 B9) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 442 (0X01 BA) 


Description 

(OS) Dos32IProtectSetFHState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IPROTECTSETFHSTATE 

Minor Code 

442 (0X01 BA) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W State = %W %W 


OS2KRNL Major Code: 0X0005 Minor Code: 443 (0X01 BB) 



Description 


(OS) Dos32IProtectSetFHState Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IPROTECTSETFHSTATE 

Minor Code 

443 (0X01 BB) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 444 (0X01 BC) 


Description 

(OS) Dos32IPROTECTQUERYFHSTATE Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IPROTECTQUERYFHSTATE 

Minor Code 

444 (0X01 BC) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 445 (0X01 BD) 


Description 

(OS) Dos32IPROTECTQUERYFHSTATE Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IPROTECTQUERYFHSTATE 

Minor Code 

445 (0X01 BD) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


POST 


Handle State = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 446 (0X01 BE) 


Description 

(OS) DosProtectChgFilePtr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTCHGFILEPTR 

Minor Code 

446 (0X01 BE) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Type = %W Distance = %W%W 
Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 447 (0X01 BF) 


Description 

(OS) DosProtectChgFilePtr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTCHGFILEPTR 

Minor Code 

447 (0X01 BF) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Location = %W%W Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 448 (0X01 CO) 

(OS) DosProtectClose Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTCLOSE 
448 (0X01 CO) 

FS 
PRE 

Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 449 (0X01 Cl) 

(OS) DosProtectClose Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTCLOSE 
449 (0X01 Cl) 

FS 

POST 

Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 450 (0X01 C2) 

(OS) DosCloseChangeNotify Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCLOSECHANGENOTIFY 
450 (0X01 C2) 






Trace Groups 


FS 


Trace Types 
Traced Parameters 


PRE 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 451 (0X01 C3) 


Description 

(OS) DosCloseChangeNotify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCLOSECHANGENOTIFY 

Minor Code 

451 (0X01 C3) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 452 (0X01 C4) 


Description 

(OS) DosProtectEnumAttribute Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTENUMATTRIBUTE 

Minor Code 

452 (0X01 C4) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 453 (0X01 C5) 



Description 


(OS) DosProtectEnumAttribute Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTENUMATTRIBUTE 

Minor Code 

453 (0X01 C5) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 454 (0X01 C6) 


Description 

(OS) DosProtectFilelO Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTFILEIO 

Minor Code 

454 (0X01 C6) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 455 (0X01 Cl) 


Description 

(OS) DosProtectFilelO Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTFILEIO 

Minor Code 

455 (0X01 C7) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


POST 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 456 (0X01 C8) 


Description 

(OS) DosProtectFileLocks Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTFILELOCKS 

Minor Code 

456 (0X01 C8) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 457 (0X01 C9) 


Description 

(OS) DosProtectFileLocks Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTFILELOCKS 

Minor Code 

457 (0X01 C9) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 458 (0X01 CA) 



Description 


(OS) DosForceDelete Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFORCEDELETE 

Minor Code 

458 (0X01 CA) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Path = %S 


OS2KRNL Major Code: 0X0005 Minor Code: 459 (0X01 CB) 


Description 

(OS) DosForceDelete Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFORCEDELETE 

Minor Code 

459 (0X01 CB) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 460 (0X01 CC) 


Description 

(OS) DosIProtectRead Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIPROTECTREAD 

Minor Code 

460 (0X01 CC) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


PRE 


Handle = %W 


0S2KRNL Major Code: 0X0005 Minor Code: 461 (0X01 CD) 


Description 

(OS) DosIProtectRead Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIPROTECTREAD 

Minor Code 

461 (0X01 CD) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Bytes Read = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 462 (0X01 CE) 


Description 

(OS) DosIProtectSetFilelnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIPROTECTSETFILEINFO 

Minor Code 

462 (0X01 CE) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 463 (0X01 CF) 



Description 


(OS) DosIProtectSetFilelnfo Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIPROTECTSETFILEINFO 

Minor Code 

463 (0X01 CF) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 464 (0X01 DO) 


Description 

(OS) DosIPROTECTWrite Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSIPROTECTWRITE 

Minor Code 

464 (0X01 DO) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 465 (0X01 D1 ) 


Description 

(OS) DosIProtectWrite Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSIPROTECTWRITE 

Minor Code 

465 (0X01 D1) 

Trace Groups 

FS 



Trace Types 
Traced Parameters 


POST 


Bytes Written = %W Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 466 (0X01 D2) 


Description 

(OS) DosProtectNewSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTNEWSIZE 

Minor Code 

466 (0X01 D2) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Filesize %W%W Handle = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 467 (0X01 D3) 


Description 

(OS) DosProtectNewSize Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTNEWSIZE 

Minor Code 

467 (0X01 D3) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 468 (0X01 D4) 



Description 


(OS) DOSPROTECTOPEN Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTOPEN 

Minor Code 

468 (0X01 D4) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Filename = %S 

Mode = %W Control = %W 

Attrib = %W Size = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 469 (0X01 D5) 


Description 

(OS) DosProtectOpen Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTOPEN 

Minor Code 

469 (0X01 D5) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Action = %W Handle = %W 
Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 470 (0X01 D6) 


Description 


(OS) DosOpenChangeNotify Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOSOPENCHANGENOTIFY 



Minor Code 


470 (0X01 D6) 


Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 471 (0X01 D7) 


Description 

(OS) DosOpenChangeNotify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSOPENCPIANGENOTIFY 

Minor Code 

471 (0X01 D7) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 472 (0X01 D8) 


Description 

(OS) DosProtectQFFlandState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTQFFIANDSTATE 

Minor Code 

472 (0X01 D8) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


File Handle = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 473 (0X01 D9) 

(OS) DosProtectQFHandState Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTQFHANDSTATE 
473 (0X01 D9) 

FS 

POST 

Plandle State = %W Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 474 (0X01 DA) 

(OS) DosProtectQFilelnfo Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTQFILEINFO 
474 (0X01 DA) 

FS 
PRE 

File Handle = %W Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 475 (0X01 DB) 

(OS) DosProtectQFilelnfo Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTQFILEINFO 






Minor Code 


475 (0X01 DB) 


Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 476 (0X01 DC) 


Description 

(OS) DosResetChangeNotify Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRESETCPIANGENOTIFY 

Minor Code 

476 (0X01 DC) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


OS2KRNL Major Code: 0X0005 Minor Code: 477 (0X01 DD) 


Description 

(OS) DosResetChangeNotify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRESETCPIANGENOTIFY 

Minor Code 

477 (0X01 DD) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return code = %W 



0S2KRNL Major Code: 0X0005 Minor Code: 478 (0X01 DE) 

(OS) DosProtectSetFHandState Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTSETFHANDSTATE 
478 (0X01 DE) 

FS 
PRE 

File Handle = %W State = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 479 (0X01 DF) 

(OS) DosProtectSetFHandState Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTSETFHANDSTATE 
479 (0X01 DF) 

FS 

POST 

Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 480 (0X01 E0) 

(OS) DosProtectSetFilelnfo Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSPROTECTSETFILEINFO 





Minor Code 



480 (0X01 E0) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


Info Level = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 481 (0X01 El) 


Description 

(OS) DosProtectSetFilelnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSPROTECTSETFILEINFO 

Minor Code 

481 (0X01 El) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 482 (0X01 E2) 


Description 

(OS) Dos32PMPostEvenSem Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32PMPOSTEVENTSEM 

Minor Code 

482 (0X01 E2) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


PM Handle = %D Handle = %D 



0S2KRNL Major Code: 0X0005 Minor Code: 483 (0X01 E3) 

(OS) Dos32PMPostEventSem Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32PMPOSTEVENTSEM 
483 (0X01 E3) 

SEM 
POST 

Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 484 (0X01 E4) 

(OS) Dos32PMWaitEventSem Post-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32PMWAITEVENTSEM 
484 (0X01 E4) 

SEM 
POST 

Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 485 (0X01 E5) 

(OS) Dos32PMWaitMuxWaitSem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32PMWAITMUXWAITSEM 






Minor Code 


485 (0X01 E5) 


Trace Groups 

SEM 


Trace Types 

PRE 


Traced Parameters 


Handle = %D Handle = %D 
Timeout = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 486 (0X01 E6) 


Description 

(OS) Dos32PMWaitMuxWaitSem Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32PMWAITMUXWAITSEM 

Minor Code 

486 (0X01 E6) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 487 (0X01 E7) 


Description 

(OS) Dos32QueryExtLIBPATH Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32QUERYEXTLIBPATH 

Minor Code 

487 (0X01 E7) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 



Flags = %D 


0S2KRNL Major Code: 0X0005 Minor Code: 488 (0X01 E8) 


Description 

(OS) Dos32QueryExtLIBPATFI Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32QUERYEXTLlBPATPI 

Minor Code 

488 (0X01 E8) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Path = %S Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 489 (0X01 E9) 


Description 

(OS) Dos32SetExtLIBPATPI Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32SETEXTLIBPATH 

Minor Code 

489 (0X01 E9) 

Trace Groups 

VM 

Trace Types 

PRE 

Traced Parameters 


Path = %S Flags = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 490 (0X01 EA) 


Description 


(OS) Dos32SetExtLIBPATFI Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32SETEXTLIBPATH 


Minor Code 

490 (0X01 EA) 

Trace Groups 

VM 

Trace Types 

POST 

Traced Parameters 


Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 491 (0X01 EB) 


Description 

(OS) Dos32VERIFYPIDTID Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32VERIFYPIDTID 

Minor Code 

491 (0X01 EB) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 


Pid = %D Tid = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 492 (0X01 EC) 


Description 

(OS) Dos32VERIFYPIDTID Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32VERIFYPIDTID 

Minor Code 

492 (0X01 EC) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 



Return code = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 493 (0X01 ED) 

(OS) Dos32PMWaitEvenSem Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32PMWAITEVENTSEM 
493 (0X01 ED) 

SEM 
PRE 

PM Handle = %D Handle = %D 
Timeout = %D 


OS2KRNL Major Code: 0X0005 Minor Code: 00494 (0X01 EE) 

(OS) Dos32CancelLockRequest Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32CANCELLOCKREQUEST 
494 (0X01 EE) 

FS 

PRE, API 

Offset = %F Range = %F Handle = %D 
Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 




OS2KRNL Major Code: 0X0005 Minor Code: 00495 (0X01 EF) 



Description 


(OS) Dos32CancelLockRequest Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32CANCELLOCKREQUEST 

Minor Code 

495 (0X01 EF) 

Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00496 (0X01 F0) 


Description 

(OS) Dos32SetFileLocks Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32SETFILELOCKS 

Minor Code 

496 (0X01 F0) 

Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


Plandle = D% 

Unlock Offset = %F Range = %F" 

Lock Offset = %F Range = %F" 

Timeout = %D Flags = %D" 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00497 (0X01 FI) 



Description 


(OS) Dos32SetFileLocks Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32SETFILELOCKS 

Minor Code 

497 (0X01 FI) 

Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00498 (0X01 F2) 


Description 

(OS) Dos32ProtectSetFileLocks Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32PROTECTSETFILELOCKS 

Minor Code 

498 (0X01 F2) 

Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


Plandle = %D 

Unlock Offset = %F Range = %F" 

Lock Offset = %F Range = %F" 

Timeout = %D Flags = %D Lock Id = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00499 (0X01 F3) 


Description 


(OS) Dos32ProtectSetFileLocks Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32PROTECTSETFILELOCKS 


Minor Code 

499 (0X01 F3) 

Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00500 (0X01 F4) 


Description 

(OS) DosCreateSpinLock Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSCREATESPINLOCK 

Minor Code 

500 (0X01 F4) 

Trace Groups 

LOCK 

Trace Types 

PRE, API 

Traced Parameters 


pLockHandle = %W:%W" 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00501 (0X01 F5) 


Description 

(OS) DosCreateSpinLock Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSCREATESPINLOCK 

Minor Code 

501 (0X01 F5) 


Trace Groups 



LOCK 


Trace Types 

POST, API 

Traced Parameters 

Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00502 (0X01 F6) 


Description 

(OS) DosAcquireSpinLock Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSACQUIRESPINLOCK 

Minor Code 

502 (0X01 F6) 

Trace Groups 

LOCK 

Trace Types 

PRE, API 

Traced Parameters 


"Lock Handle = %W%W 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00503 (0X01 F7) 


Description 

(OS) DosAcquireSpinLock Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSACQUIRESPINLOCK 

Minor Code 

503 (0X01 F7) 

Trace Groups 

LOCK 

Trace Types 

POST, API 

Traced Parameters 


No parameters traced. 



Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00504 (0X01 F8) 


Description 

(OS) DosReleaseSpinLock Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSRELEASESPINLOCK 

Minor Code 

504 (0X01 F8) 

Trace Groups 

LOCK 

Trace Types 

PRE, API 

Traced Parameters 


"Lock Handle = %W%W 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00505 (0X01 F9) 


Description 

(OS) DosReleaseSpinLock Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSRELEASESPINLOCK 

Minor Code 

505 (0X01 F8) 

Trace Groups 

LOCK 

Trace Types 

POST, API 

Traced Parameters 

No parameters traced. 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00506 (0X01 FA) 



Description 


(OS) DosFreeSpinLock Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSFREESPINLOCK 

Minor Code 

506 (0X01 FA) 

Trace Groups 

LOCK 

Trace Types 

PRE, API 

Traced Parameters 


"Lock Handle = %W%W 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00507 (0X01 FB) 


Description 

(OS) DosFreeSpinLock Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSFREESPINLOCK 

Minor Code 

5071 (0X01 FB) 

Trace Groups 

LOCK 

Trace Types 

POST, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35. 


OS2KRNL Major Code: 0X0005 Minor Code: 00508 (0X01 FC) 


Description 


(OS) Dos32IProtectRead Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32PROTECTSETFILELOCKS 



Minor Code 


508 (0X01 FC) 


Trace Groups 

FS 


Trace Types 

PRE, API 

Traced Parameters 


File Flandle = %D Buffer = %F 
Buffer Size = %D Pointer to Bytes Read = %F 
Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 00509 (0X01 FD) 


Description 

(OS) Dos32IProtectRead Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IPROTECTREAD 

Minor Code 

509 (0X01 FD) 

Trace Groups 

FS 


Trace Types 

POST, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 0051 0 (0X01 FE) 


Description 

(OS) Dos32IProtectWrite Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOS32IPROTECTWRITE 

Minor Code 

510 (0X01 FE) 

Trace Groups 

FS 



Trace Types 


PRE, API 


Traced Parameters 


File Handle = %D Buffer = %F 
Buffer Size = %D Pointer to Bytes Written = %F 
Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 0051 1 (0X01 FF) 


Description 

(OS) Dos32IProtectWrite Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOS32IPROTECTWRITE 

Minor Code 

511 (0X01 FF) 

Trace Groups 

FS 


Trace Types 

POST, API 

Traced Parameters 


Return code = %D 

Note: Tracepoint added with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10. 


OS2KRNL Major Code: 0X0005 Minor Code: 32768 (0X8000) 


Description 

(OS) DosSetTracelnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.preDOSSETTRACEINFO 

Minor Code 

32768 (0X8000) 

Trace Groups 

TK 

Trace Types 

PRE 

Traced Parameters 



Request Code = %W PID = %W 
Count = %W 


OS2KRNL Major Code: 0X0005 Minor Code: 65521 (0XFFF1) 


Description 

(OS) DosSetTracelnfo Post- Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2KRNL.postDOSSETTRACEINFO 

Minor Code 

65521 (0XFFF1) 

Trace Groups 

TK 

Trace Types 

POST 

Traced Parameters 


Return code = %W 


DevHIp Services Trace Events 

The tracepoints for the Device FHelper Services major code are identified in the following tables. These tracepoints are static tracepoints. 
They are compiled with the code. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for DEVFIELP Major Code: 0X0006, sorted by minor code. 
Trace events for DEVFIELP Major Code: 0X0006 .sorted by tracepoint. 


Trace Events for DEVHELP Major Code: 0X0006, Sorted by 
Minor Code 

00001 (0X0001) (OS) DevHlp_ABIOSCall Pre-Invocation 

00002 (0X0002) (OS) DevPllp_ABIOSCommonEnt Pre-Invocation 

00003 (0X0003) (OS) DevPllp_ABIOSGetParms Pre-Invocation 

00004 (0X0004) (OS) DevPllp_AddTraceEvent Pre-Invocation 

00005 (0X0005) (OS) DevHlp_AllocGDTSel Pre-Invocation 

00006 (0X0006) (OS) DevPllp_AllocPhys Pre-Invocation 

00007 (0X0007) (OS) DevPllp_AllocReqPacket Pre-Invocation 

00008 (0X0008) (OS) DevPllp_AttachDD Pre-Invocation 

00009 (0X0009) (OS) DevPllp_Block Pre-Invocation 


00010 (0X000A) (OS) DevHlp_DeRegister Pre-Invocation 

0001 1 (0X000B) (OS) DevHlp_DevDone Pre-Invocation 

00012 (0X000C) (OS) DevHlp_EOI Pre-Invocation 

00013 (0X000D) (OS) DevHlp_FreeLIDEntry Pre-Invocation 

00014 (0X000E) (OS) DevHlp_FreePhys Pre-Invocation 

00015 (0X000F) (OS) DevFllp_FreeReqPacket Pre-Invocation 

00016 (0X0010) (OS) DevFllp_GetDeviceBlock Pre-Invocation 

00017 (0X0011) (OS) DevHlp_GetDOSVar Pre-Invocation 

00018 (0X0012) (OS) DevHlp_GetLIDEntry Pre-Invocation 

00019 (0X0013) (OS) DevFlIpJnternalError Pre-Invocation 

00020 (0X0014) (OS) DevFllp_Lock Pre-Invocation 

00021 (0X0015) (OS) DevFllp_LogEntry Pre-Invocation 

00022 (0X0016) (OS) DevFllp_MonCreate Pre-Invocation 

00023 (0X0017) (OS) DevHlp_MonFlush Pre-Invocation 

00024 (0X0018) (OS) DevFllp_MonWrite Pre-Invocation 

00025 (0X0019) (OS) DevFllp_PhysToGDTSelector Pre-Invocation 

00026 (0X001 A) (OS) DevHlp_PhysToUVirt Pre-Invocation 

00027 (0X001 B) (OS) DevHlp_PhysToVirt Pre-Invocation 

00028 (0X001 C) (OS) DevFHIp_Profiling Kernel Pre-Invocation 

00029 (0X001 D) (OS) DevFllp_ProtToReal Pre-Invocation 

00030 (0X001 E) (OS) DevFHIp_PullParticular Pre-Invocation 

00031 (0X001 F) (OS) DevFllp_PullReqPacket Pre-Invocation 

00032 (0X0020) (OS) DevPllp_PushReqPacket Pre-Invocation 

00033 (0X0021) (OS) DevPllp_QueueFlush Pre-Invocation 

00034 (0X0022) (OS) DevPllp_Queuelnit Pre-Invocation 

00035 (0X0023) (OS) DevPllp_QueueRead Pre-Invocation 

00036 (0X0024) (OS) DevPllp_QueueWrite Pre-Invocation 

00037 (0X0025) (OS) DevPllp_RealToProt Pre-Invocation 

00038 (0X0026) (OS) DevPllp_Register Pre-Invocation 

00039 (0X0027) (OS) DevPllp_RegStackUsage Pre-Invocation 

00040 (0X0028) (OS) DevPllp_ResetTimer Pre-Invocation 

00042 (0X002A) (OS) DevFllp_ROMCritSection Pre-Invocation 

00043 (0X002B) (OS) DevFllp_ProcRun Pre-Invocation 

00044 (0X002C) (OS) DevFllp_SchedClock Pre-Invocation 

00045 (0X002D) (OS) DevFllp_SemClear Pre-Invocation 

00046 (0X002E) (OS) DevFllp_SemPlandle Pre-Invocation 

00047 (0X002F) (OS) DevPllp_SemRequest Pre-Invocation 

00048 (0X0030) (OS) DevPllp_SendEvent Pre-Invocation 

00049 (0X0031) (OS) DevHlp_SetlRQ Pre-Invocation 

00050 (0X0032) (OS) DevPllp_SetROMVector Pre-Invocation 

00051 (0X0033) (OS) DevPllp_SetTimer Pre-Invocation 

00052 (0X0034) (OS) DevPllp_SortReqPacket Pre-Invocation 

00053 (0X0035) (OS) DevHlp_TCYield Pre-Invocation 

00054 (0X0036) (OS) DevPllp_TickCount Pre-Invocation 

00055 (0X0037) (OS) DevPllp_Unlock Pre-Invocation 

00056 (0X0038) (OS) DevPllp_UnPhysToVirt Pre-Invocation 

00057 (0X0039) (OS) DevHlp_UnSetlRQ Pre-Invocation 

00058 (0X003A) (OS) DevFllp_VerityAccess Pre-Invocation 

00060 (0X003C) (OS) DevFllp_VirtToPhys Pre-Invocation 

00061 (0X003D) (OS) DevHlp_VMAIIoc Pre-Invocation 

00062 (0X003E) (OS) DevHlp_VMFree Pre-Invocation 

00063 (0X003F) (OS) DevPllp_VMGIobalToProcess Pre-Invocation 

00065 (0X0041) (OS) DevHlp_VMLock Pre-Invocation 

00066 (0X0042) (OS) DevPllp_VMProcessToGlobal Pre-Invocation 

00067 (0X0043) (OS) DevHlp_VMUnlock Pre-Invocation 
00069 (0X0045) (OS) DevHlp_Yield Pre-Invocation 

00073 (0X0049) (OS) DevPllp_FreeGDTSelector Pre-Invocation 

00074 (0X004A) (OS) DevFllp_VirtToLin Pre-Invocation 

00075 (0X004B) (OS) DevPIlpJJnToGDTSelector Pre-Invocation 

00076 (0X004C) (OS) DevFHp_GetDesclnfo Pre-Invocation 

00077 (0X004D) (OS) DevPIlpJJnToPageList Pre-Invocation 

00078 (0X004E) (OS) DevFllp_PageListToLin Pre-Invocation 

00079 (0X004F) (OS) DevPllp_PageListToGDTSelector Pre-Invocation 
00081 (0X0051) (OS) DevHlp_PhysToGDTSel Pre-Invocation 

00083 (0X0053) (OS) DevPllp_AllocCtxPlook Pre-Invocation 

00084 (0X0054) (OS) DevPllp_ArmCtxPlook Pre-Invocation 

00085 (0X0055) (OS) DevPllp_FreeCtxPlook Pre-Invocation 

00087 (0X0057) (OS) DevPllp_OpenEventSem Pre-Invocation 

00088 (0X0058) (OS) DevPllp_CloseEventSem Pre-Invocation 

00089 (0X0059) (OS) DevPllp_PostEventSem Pre-Invocation 

00090 (0X005A) (OS) DevFllp_ResetEventSem Pre-Invocation 
00093 (0X005D) (OS) DevFllp_ProcRun2 Pre-Invocation 
00108 (0X006C) (OS) DevFllp_ModifyPriority Pre-Invocation 


00109 (0X006D) (OS) DevHlp_RegisterTmrDD Pre-Invocation 

00110 (0X006E) (OS) DevHlp_RegisterPerfCtrs Pre-Invocation 

00124 (0X007C) (OS) DevHlp_RegisterPDD Pre-Invocation 

00125 (0X007D) (OS) DevHlp_RegisterBeep Pre-Invocation 

00126 (0X007E) (OS) DevHlp_Beep Pre-Invocation 

00129 (0X0081) (OS) DevHlp_ABIOSCall Post-Invocation 

00130 (0X0082) (OS) DevHlp_ABIOSCommonEnt Post-Invocation 

00131 (0X0083) (OS) DevHlp_ABIOSGetParms Post-Invocation 

00132 (0X0084) (OS) DevHlp_AddTraceEvent Post-Invocation 

00133 (0X0085) (OS) DevHlp_AllocGDTSel Post-Invocation 

00134 (0X0086) (OS) DevHlp_AllocPhys Post-Invocation 

00135 (0X0087) (OS) DevHlp_AllocReqPacket Post-Invocation 

00136 (0X0088) (OS) DevHlp_AttachDD Post-Invocation 

00137 (0X0089) (OS) DevHlp_Block Post-Invocation 

00138 (0X008A) (OS) DevHlp_DeRegister Post-Invocation 

00139 (0X008B) (OS) DevHlp_DevDone Post-Invocation 

00140 (0X008C) (OS) DevHlp_EOI Post-Invocation 

00141 (0X008D) (OS) DevHlp_FreeLIDEntry Post-Invocation 

00142 (0X008E) (OS) DevHlp_FreePhys Post-Invocation 

00143 (0X008F) (OS) DevFllp_FreeReqPacket Post-Invocation 

00144 (0X0090) (OS) DevFllp_GetDeviceBlock Post-Invocation 

00145 (0X0091) (OS) DevHlp_GetDOSVar Post-Invocation 

00146 (0X0092) (OS) DevFllp_GetLIDEntry Post-Invocation 

00147 (0X0093) (OS) DevFlIpJnternalError Post-Invocation 

00148 (0X0094) (OS) DevFllp_Lock Post-Invocation 

00149 (0X0095) (OS) DevFllp_LogEntry Post-Invocation 

00150 (0X0096) (OS) DevFllp_MonCreate Post-Invocation 

00151 (0X0097) (OS) DevFllp_MonFlush Post-Invocation 

00152 (0X0098) (OS) DevFllp_MonWrite Post-Invocation 

00153 (0X0099) (OS) DevFllp_PhysToGDTSelector Post-Invocation 

00154 (0X009A) (OS) DevFllp_PhysToUVirt Post-Invocation 

00155 (0X009B) (OS) DevFllp_PhysToVirt Post-Invocation 

00156 (0X009C) (OS) DevFllp_Profiling Kernel Post-Invocation 

00157 (0X009D) (OS) DevFllp_ProtToReal Post-Invocation 

00158 (0X009E) (OS) DevFllp_PullParticular Post-Invocation 

00159 (0X009F) (OS) DevFllp_PullReqPacket Post-Invocation 

00160 (0X00A0) (OS) DevFllp_PushReqPacket Post-Invocation 

00161 (0X00A1) (OS) DevFllp_QueueFlush Post-Invocation 

00162 (0X00A2) (OS) DevFllp_Queuelnit Post-Invocation 

00163 (0X00A3) (OS) DevFllp_QueueRead Post-Invocation 

00164 (0X00A4) (OS) DevFHp_QueueWrite Post-Invocation 

00165 (0X00A5) (OS) DevFllp_RealToProt Post-Invocation 

00166 (0X00A6) (OS) DevFllp_Register Post-Invocation 

00167 (0X00A7) (OS) DevFllp_RegStackUsage Post-Invocation 

00168 (0X00A8) (OS) DevFllp_ResetTimer Post-Invocation 

00170 (0X00AA) (OS) DevFHp_ROMCritSection Post-Invocation 

00171 (0X00AB) (OS) DevFllp_ProcRun Post-Invocation 

00172 (0X00AC) (OS) DevFllp_SchedClock Post-Invocation 

00173 (0X00AD) (OS) DevFllp_SemClear Post-Invocation 

00174 (0X00AE) (OS) DevHlp_SemHandle Post-Invocation 

00175 (0X00AF) (OS) DevFllp_SemRequest Post-Invocation 

00176 (0X00B0) (OS) DevFllp_SendEvent Post-Invocation 

00177 (0X00B1) (OS) DevHlp_SetlRQ Post-Invocation 

00178 (0X00B2) (OS) DevFllp_SetROMVector Post-Invocation 

00179 (0X00B3) (OS) DevFllp_SetTimer Post-Invocation 

00180 (0X00B4) (OS) DevFllp_SortReqPacket Post-Invocation 

00181 (0X00B5) (OS) DevHlp_TCYield Post-Invocation 

00182 (0X00B6) (OS) DevFllp_TickCount Post-Invocation 

00183 (0X00B7) (OS) DevFllp_Unlock Post-Invocation 

00184 (0X00B8) (OS) DevFllp_UnPhysToVirt Post-Invocation 

00185 (0X00B9) (OS) DevFllp_UnSetlRQ Post-Invocation 

00186 (0X00BA) (OS) DevFllp_Verify Access Post-Invocation 

00188 (0X00BC) (OS) DevPllp_VirtToPhys Post-Invocation 

00189 (0X00BD) (OS) DevHlp_VMAIIoc Post-Invocation 

00190 (0X00BE) (OS) DevHlp_VMFree Post-Invocation 

00191 (0X00BF) (OS) DevFllp_VMGIobalToProcess Post-Invocation 

00193 (0X00C1) (OS) DevHlp_VMLock Post-Invocation 

00194 (0X00C2) (OS) DevFllp_VMProcessToGlobal Post-Invocation 

00195 (0X00C3) (OS) DevHlp_VMUnlock Post-Invocation 
00197 (0X00C5) (OS) DevHlp_Yield Post-Invocation 

00201 (0X00C9) (OS) DevFllp_FreeGDTSelector Post-Invocation 

00202 (0X00CA) (OS) DevPllp_VirtToLin Post-Invocation 

00203 (0X00CB) (OS) DevPllp_LinToGDTSelector Post-Invocation 


00204 (0X00CC) (OS) DevHlp_GetDesclnfo Post-Invocation 

00205 (0X00CD) (OS) DevHlp_LinToPageList Post-Invocation 

00206 (0X00CE) (OS) DevHlp_PageListToLin Post-Invocation 

00207 (0X00CF) (OS) DevHlp_PageListToGDTSelector Post-Invocation 
00209 (0X00D1) (OS) DevHlp_PhysToGDTSel Post-Invocation 

0021 1 (0X00D3) (OS) DevHlp_AllocCtxHook Post-Invocation 

00212 (0X00D4) (OS) DevHlp_ArmCtxHook Post-Invocation 

00213 (0X00D5) (OS) DevHlp_FreeCtxHook Post-Invocation 

00215 (0X00D7) (OS) DevFllp_OpenEventSem Post-Invocation 

00216 (0X00D8) (OS) DevFllp_CloseEventSem Post-Invocation 

00217 (0X00D9) (OS) DevFllp_PostEventSem Post-Invocation 

00218 (0X00DA) (OS) DevFllp_ResetEventSem Post-Invocation 
00221 (0X00DD) (OS) DevFllp_ProcRun2 Post-Invocation 

00236 (0X00EC) (OS) DevFHp_ModifyPriority Post-Invocation 

00237 (0X00ED) (OS) DevFllp_RegisterTmrDD Post-Invocation 

00238 (0X00EE) (OS) DevHlp_RegisterPerfCtrs Post-Invocation 

00252 (0X00FC) (OS) DevHlp_RegisterPDD Post-Invocation 

00253 (0X00FD) (OS) DevHlp_RegisterBeep Post-Invocation 

00254 (0X00FE) (OS) DevHlp_Beep Post-Invocation 


Trace Events for DEVHELP Major Code: 0X0006, Sorted by 
Tracepoint 


(OS) DevHlp_ABIOSCall Post-Invocation 00129 (0X0081) 

(OS) DevHlp_ABIOSCall Pre-Invocation 00001 (0X0001) 

(OS) DevPllp_ABIOSCommonEnt Post-Invocation 00130 (0X0082) 
(OS) DevPllp_ABIOSCommonEnt Pre-Invocation 00002 (0X0002) 
(OS) DevFllp_ABIOSGetParms Post-Invocation 00131 (0X0083) 
(OS) DevFllp_ABIOSGetParms Pre-Invocation 00003 (0X0003) 
(OS) DevFllp_AddTraceEvent Post-Invocation 00132 (0X0084) 
(OS) DevFllp_AddTraceEvent Pre-Invocation 00004 (0X0004) 

(OS) DevFllp_AllocCtxHook Post-Invocation 0021 1 (0X00D3) 

(OS) DevFllp_AllocCtxFlook Pre-Invocation 00083 (0X0053) 

(OS) DevHlp_AllocGDTSel Post-Invocation 00133 (0X0085) 

(OS) DevHlp_AllocGDTSel Pre-Invocation 00005 (0X0005) 

(OS) DevFllp_AllocPhys Post-Invocation 00134 (0X0086) 

(OS) DevFllp_AllocPhys Pre-Invocation 00006 (0X0006) 

(OS) DevFllp_AllocReqPacket Post-Invocation 00135 (0X0087) 
(OS) DevFllp_AllocReqPacket Pre-Invocation 00007 (0X0007) 

(OS) DevFllp_ArmCtxHook Post-Invocation 00212 (0X00D4) 

(OS) DevFllp_ArmCtxHook Pre-Invocation 00084 (0X0054) 

(OS) DevFllp_AttachDD Post-Invocation 00136 (0X0088) 

(OS) DevFllp_AttachDD Pre-Invocation 00008 (0X0008) 

(OS) DevFllp_Beep Post-Invocation 00254 (0X00FE) 

(OS) DevFllp_Beep Pre-Invocation 00126 (0X007E) 

(OS) DevFllp_Block Post-Invocation 00137 (0X0089) 

(OS) DevFllp_Block Pre-Invocation 00009 (0X0009) 

(OS) DevFllp_CloseEventSem Post-Invocation 00216 (0X00D8) 
(OS) DevFllp_CloseEventSem Pre-Invocation 00088 (0X0058) 
(OS) DevFllp_DeRegister Post-Invocation 00138 (0X008A) 

(OS) DevFllp_DeRegister Pre-Invocation 00010 (0X000A) 

(OS) DevFllp_DevDone Post-Invocation 00139 (0X008B) 

(OS) DevFllp_DevDone Pre-Invocation 0001 1 (0X000B) 

(OS) DevHlp_EOI Post-Invocation 00140 (0X008C) 

(OS) DevHlp_EOI Pre-Invocation 00012 (0X000C) 

(OS) DevFllp_FreeCtxHook Post-Invocation 00213 (0X00D5) 

(OS) DevFllp_FreeCtxHook Pre-Invocation 00085 (0X0055) 

(OS) DevFllp_FreeGDTSelector Post-Invocation 00201 (0X00C9) 
(OS) DevFllp_FreeGDTSelector Pre-Invocation 00073 (0X0049) 
(OS) DevFllp_FreeLIDEntry Post-Invocation 00141 (0X008D) 

(OS) DevFllp_FreeLIDEntry Pre-Invocation 00013 (0XO00D) 

(OS) DevFllp_FreePhys Post-Invocation 00142 (OX008E) 

(OS) DevFllp_FreePhys Pre-Invocation 00014 (0X000E) 

(OS) DevFllp_FreeReqPacket Post-Invocation 00143 (OX008F) 


(OS) DevHlp_FreeReqPacket Pre-Invocation 00015 (0X000F) 

(OS) DevHlp_GetDOSVar Post-Invocation 00145 (0X0091) 

(OS) DevHlp_GetDOSVar Pre-Invocation 00017 (0X001 1) 

(OS) DevFllp_GetDesclnfo Post-Invocation 00204 (OXOOCC) 

(OS) DevFllp_GetDesclnfo Pre-Invocation 00076 (0X004C) 

(OS) DevFllp_GetDeviceBlock Post-Invocation 00144 (0X0090) 

(OS) DevFllp_GetDevlceBlock Pre-Invocation 00016 (0X0010) 

(OS) DevFllp_GetLIDEntry Post-Invocation 00146 (0X0092) 

(OS) DevHlp_GetLIDEntry Pre-Invocation 00018 (0X0012) 

(OS) DevPIlpJnternalError Post-Invocation 00147 (0X0093) 

(OS) DevPIlpJnternalError Pre-Invocation 00019 (0X0013) 

(OS) DevPIlpJJnToGDTSelector Post-Invocation 00203 (0X00CB) 

(OS) DevPIlpJJnToGDTSelector Pre-Invocation 00075 (0X004B) 

(OS) DevPIlpJJnToPageList Post-Invocation 00205 (0X00CD) 

(OS) DevPIlpJJnToPageList Pre-Invocation 00077 (0X004D) 

(OS) DevPIlpJ-Ock Post-Invocation 00148 (0X0094) 

(OS) DevPIlpJ-Ock Pre-Invocation 00020 (0X0014) 

(OS) DevPIlpJ-ogEntry Post-Invocation 00149 (0X0095) 

(OS) DevPIlpJ-ogEntry Pre-Invocation 00021 (0X0015) 

(OS) DevHlp_ModifyPriority Post-Invocation 00236 (0X00EC) 

(OS) DevHlp_ModifyPriority Pre-Invocation 00108 (0X006C) 

(OS) DevPIlpJVIonCreate Post-Invocation 00150 (0X0096) 

(OS) DevPIlpJVIonCreate Pre-Invocation 00022 (0X0016) 

(OS) DevPIlpJVIonFlush Post-Invocation 00151 (0X0097) 

(OS) DevPIlpJVIonFlush Pre-Invocation 00023 (0X0017) 

(OS) DevPIlpJVIonWrite Post-Invocation 00152 (0X0098) 

(OS) DevPIlpJVIonWrite Pre-Invocation 00024 (0X0018) 

(OS) DevPIlpjDpenEventSem Post-Invocation 00215 (0X00D7) 

(OS) DevPIlpjDpenEventSem Pre-Invocation 00087 (0X0057) 

(OS) DevPllp_PageListToGDTSelector Post-Invocation 00207 (0X00CF) 
(OS) DevPllp_PageListToGDTSelector Pre-Invocation 00079 (0X004F) 
(OS) DevPllp_PageListToLin Post-Invocation 00206 (0X00CE) 

(OS) DevPllp_PageListToLin Pre-Invocation 00078 (0X004E) 

(OS) DevHlp_PhysToGDTSel Post-Invocation 00209 (0X0OD1) 

(OS) DevHlp_PhysToGDTSel Pre-Invocation 00081 (0X0051) 

(OS) DevPllp_PhysToGDTSelector Post-Invocation 00153 (0X0099) 
(OS) DevPllp_PhysToGDTSelector Pre-Invocation 00025 (0X0019) 

(OS) DevPllp_PhysToUVirt Post-Invocation 00154 (0X009A) 

(OS) DevHlp_PhysToUVirt Pre-Invocation 00026 (0X001A) 

(OS) DevPllp_PhysToVirt Post-Invocation 00155 (0X009B) 

(OS) DevHlp_PhysToVirt Pre-Invocation 00027 (0X001 B) 

(OS) DevPllp_PostEventSem Post-Invocation 00217 (0X00D9) 

(OS) DevPllp_PostEventSem Pre-Invocation 00089 (0X0059) 

(OS) DevPllp_ProcRun Post-Invocation 00171 (0X0OAB) 

(OS) DevPllp_ProcRun Pre-Invocation 00043 (0X002B) 

(OS) DevPllp_ProcRun2 Post-Invocation 00221 (0X00DD) 

(OS) DevPllp_ProcRun2 Pre-Invocation 00093 (0X005D) 

(OS) DevHlp_Profiling Kernel Post-Invocation 00156 (0X009C) 

(OS) DevHlp_Profiling Kernel Pre-Invocation 00028 (0X001 C) 

(OS) DevPllp_ProtToReal Post-Invocation 00157 (0X009D) 

(OS) DevPllp_ProtToReal Pre-Invocation 00029 (0X001 D) 

(OS) DevHlp_PullParticular Post-Invocation 00158 (0X009E) 

(OS) DevHlp_PullParticular Pre-Invocation 00030 (0X001 E) 

(OS) DevPllp_PullReqPacket Post-Invocation 00159 (0X009F) 

(OS) DevPllp_PullReqPacket Pre-Invocation 00031 (0X001 F) 

(OS) DevPllp_PushReqPacket Post-Invocation 00160 (0X00A0) 

(OS) DevPllp_PushReqPacket Pre-Invocation 00032 (0X0020) 

(OS) DevPIlpjDueueFlush Post-Invocation 00161 (0X0OA1) 

(OS) DevPIlpjDueueFlush Pre-Invocation 00033 (0X0021) 

(OS) DevPIlpjDueuelnit Post-Invocation 00162 (0X00A2) 

(OS) DevPIlpjDueuelnit Pre-Invocation 00034 (0X0022) 

(OS) DevPIlpjDueueRead Post-Invocation 00163 (0X00A3) 

(OS) DevPIlpjDueueRead Pre-Invocation 00035 (0X0023) 

(OS) DevPIlpjDueueWrite Post-Invocation 00164 (0X00A4) 

(OS) DevPIlpjDueueWrite Pre-Invocation 00036 (0X0024) 

(OS) DevPllp_ROMCritSection Post-Invocation 00170 (0X00AA) 

(OS) DevPllp_ROMCritSection Pre-Invocation 00042 (0X002A) 

(OS) DevPllp_RealToProt Post-Invocation 00165 (OXOOA5) 

(OS) DevPllp_RealToProt Pre-Invocation 00037 (0X0025) 

(OS) DevPllp_RegStackUsage Post-Invocation 00167 (0X00A7) 

(OS) DevPllp_RegStackUsage Pre-Invocation 00039 (0X0027) 

(OS) DevPllp_Register Post-Invocation 00166 (0X00A6) 

(OS) DevPllp_Register Pre-Invocation 00038 (0X0026) 


(OS) DevHlp_RegisterBeep Post-Invocation 00253 (0X00FD) 

(OS) DevHlp_RegisterBeep Pre-Invocation 00125 (0X007D) 

(OS) DevHlp_RegisterPDD Post-Invocation 00252 (0X00FC) 

(OS) DevFllp_RegisterPDD Pre-Invocation 00124 (0X007C) 

(OS) DevFllp_RegisterPerfCtrs Post-Invocation 00238 (0X00EE) 
(OS) DevFllp_RegisterPerfCtrs Pre-Invocation 00110 (0X006E) 

(OS) DevFllp_RegisterTmrDD Post-Invocation 00237 (0X0OED) 

(OS) DevFllp_RegisterTmrDD Pre-Invocation 00109 (0X006D) 

(OS) DevFllp_ResetEventSem Post-Invocation 00218 (0X00DA) 
(OS) DevFllp_ResetEventSem Pre-Invocation 00090 (0X005A) 

(OS) DevFllp_ResetTimer Post-Invocation 00168 (0X00A8) 

(OS) DevFllp_ResetTimer Pre-Invocation 00040 (0X0028) 

(OS) DevFllp_SchedClock Post-Invocation 00172 (0X00AC) 

(OS) DevFllp_SchedClock Pre-Invocation 00044 (0X002C) 

(OS) DevFllp_SemClear Post-Invocation 00173 (0X00AD) 

(OS) DevFllp_SemClear Pre-Invocation 00045 (0X002D) 

(OS) DevFllp_SemHandle Post-Invocation 00174 (0X00AE) 

(OS) DevFllp_SemHandle Pre-Invocation 00046 (0X002E) 

(OS) DevFllp_SemRequest Post-Invocation 00175 (0X0OAF) 

(OS) DevFllp_SemRequest Pre-Invocation 00047 (0X002F) 

(OS) DevFllp_SendEvent Post-Invocation 00176 (0X00B0) 

(OS) DevFllp_SendEvent Pre-Invocation 00048 (0X0030) 

(OS) DevHlp_SetlRQ Post- Invocation 00177 (0X00B1) 

(OS) DevHlp_SetlRQ Pre-Invocation 00049 (0X0031) 

(OS) DevFllp_SetROMVector Post-Invocation 00178 (0X00B2) 

(OS) DevFllp_SetROMVector Pre-Invocation 00050 (0X0032) 

(OS) DevFllp_SetTimer Post-Invocation 00179 (0X00B3) 

(OS) DevFllp_SetTimer Pre-Invocation 00051 (0X0033) 

(OS) DevFllp_SortReqPacket Post-Invocation 00180 (0X00B4) 

(OS) DevFllp_SortReqPacket Pre-Invocation 00052 (0X0034) 

(OS) DevHlp_TCYield Post-Invocation 00181 (0X00B5) 

(OS) DevHlp_TCYield Pre-Invocation 00053 (0X0035) 

(OS) DevFllp_TickCount Post-Invocation 00182 (0X00B6) 

(OS) DevFllp_TickCount Pre-Invocation 00054 (0X0036) 

(OS) DevFllp_UnPhysToVirt Post-Invocation 00184 (OXOOB8) 

(OS) DevFllp_UnPhysToVirt Pre-Invocation 00056 (0X0038) 

(OS) DevFllp_UnSetlRQ Post-Invocation 00185 (0X00B9) 

(OS) DevHlp_UnSetlRQ Pre-Invocation 00057 (0X0039) 

(OS) DevFllp_Unlock Post-Invocation 00183 (0X00B7) 

(OS) DevFllp_Unlock Pre-Invocation 00055 (0X0037) 

(OS) DevHlp_VMAIIoc Post-Invocation 00189 (OXOOBD) 

(OS) DevHlp_VMAIIoc Pre-Invocation 00061 (0X003D) 

(OS) DevHlp_VMFree Post-Invocation 00190 (0X00BE) 

(OS) DevHlp_VMFree Pre-Invocation 00062 (0X003E) 

(OS) DevFllp_VMGIobalToProcess Post-Invocation 00191 (0X0OBF) 
(OS) DevFllp_VMGIobalToProcess Pre-Invocation 00063 (0X003F) 
(OS) DevHlp_VMLock Post-Invocation 00193 (0X00C1) 

(OS) DevHlp_VMLock Pre-Invocation 00065 (0X0041) 

(OS) DevFllp_VMProcessToGlobal Post-Invocation 00194 (0X00C2) 
(OS) DevFllp_VMProcessToGlobal Pre-Invocation 00066 (0X0042) 
(OS) DevHlp_VMUnlock Post-Invocation 00195 (0X00C3) 

(OS) DevHlp_VMUnlock Pre-Invocation 00067 (0X0043) 

(OS) DevFllp_Verify Access Post-Invocation 00186 (0X00BA) 

(OS) DevFllp_VerifyAccess Pre-Invocation 00058 (0X003A) 

(OS) DevFllp_VirtToLin Post-Invocation 00202 (0X00CA) 

(OS) DevFllp_VirtToLin Pre-Invocation 00074 (0X004A) 

(OS) DevFllp_VirtToPhys Post-Invocation 00188 (0X00BC) 

(OS) DevFllp_VirtToPhys Pre-Invocation 00060 (0X003C) 

(OS) DevHlp_Yield Post-Invocation 00197 (0X00C5) 

(OS) DevHlp_Yield Pre-Invocation 00069 (0X0045) 


DEVHELP Major Code: 0X0006 Minor Code: 1 (0X0001) 


Description 


(OS) DevPllp_ABIOSCall Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 


Minor Code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


LID=%W Entry_Point=%W ABIOS Request Block=%A 


DEVHELP Major Code: 0X0006 Minor Code: 2 (0X0002) 


Description 

(OS) DevHlp_ABIOSCommonEnt Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Entry_Point=%W ABIOS Request Block=%A 


DEVHELP Major Code: 0X0006 Minor Code: 3 (0X0003) 


Description 

(OS) DevHlp_ABIOSGetParms Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

3 (0X0003) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



LID=%W Parm_Addr=%A 


DEVHELP Major Code: 0X0006 Minor Code: 4 (0X0004) 


Description 

(OS) DevHlp_AddTraceEvent Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

4 (0X0004) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 5 (0X0005) 


Description 

(OS) DevHlp_AllocGDTSel Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pSelectorArray=%A Number of GDT Selectors=%W 


DEVHELP Major Code: 0X0006 Minor Code: 6 (0X0006) 


Description 


(OS) DevHlp_AllocPhys Pre-Invocation 



Tracepoint 


Static tracepoint in DEVHELP. 


Minor Code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


size_low=%W size_high=%W relative position=%W 


DEVHELP Major Code: 0X0006 Minor Code: 7 (0X0007) 


Description 

(OS) DevHlp_AllocReqPacket Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

7 (0X0007) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 8 (0X0008) 


Description 

(OS) DevHlp_AttachDD Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

8 (0X0008) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



DEVHELP Major Code: 0X0006 Minor Code: 9 (0X0009) 


Description 

(OS) DevHlp_Block Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


event_id_low=%W event_id_high=%W 
timeout interval=%D interruptible_flag=%W 


DEVHELP Major Code: 0X0006 Minor Code: 10 (0X000A) 


Description 

(OS) DevHlp_DeRegister Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

10 (0X0O0A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


monitor_PID=%W monitor_handle=%W 


DEVHELP Major Code: 0X0006 Minor Code: 1 1 (0X000B) 


Description 


(OS) DevHlp_DevDone Pre-Invocation 


Tracepoint 



Static tracepoint in DEVHELP. 


Minor Code 

11 (0X000B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 12 (0X000C) 


Description 

(OS) DevHlp_EOI Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

12 (OXOOOC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


IRQNum=%W 


DEVHELP Major Code: 0X0006 Minor Code: 13 (0X000D) 


Description 

(OS) DevHlp_FreeLIDEntry Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

13 (OXOOOD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


LID=%W Device Driver DS=%W 



DEVHELP Major Code: 0X0006 Minor Code: 14 (0X000E) 


Description 

(OS) DevHlp_FreePhys Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

14 (OXOOOE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


address_low=%W address_high=%W 


DEVHELP Major Code: 0X0006 Minor Code: 15 (0X000F) 


Description 

(OS) DevHlp_FreeReqPacket Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

15 (OXOOOF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


request_packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 16 (0X0010) 


Description 


(OS) DevHlp_GetDeviceBlock Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


16 (0X0010) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Logical ID=%W Device Driver Data Seg=%W 


DEVHELP Major Code: 0X0006 Minor Code: 17 (0X0011) 


Description 

(OS) DevHlp_GetDOSVar Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

17 (0X0011) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


variable index=%W 


DEVHELP Major Code: 0X0006 Minor Code: 18 (0X0012) 


Description 

(OS) DevHlp_GetLIDEntry Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

18 (0X0012) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Deviceld=%W RelativelD#=%W 



Device Driver DS=%W Device State=%W 


DEVHELP Major Code: 0X0006 Minor Code: 19 (0X0013) 


Description 

(OS) DevHIpJnternalError Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

19 (0X0013) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 20 (0X0014) 


Description 

(OS) DevHlp_Lock Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

20 (0X0014) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


segment=%W duration=%B block flag=%B 


DEVHELP Major Code: 0X0006 Minor Code: 21 (0X0015) 


Description 


(OS) DevHlp_LogEntry Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


21 (0X0015) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 22 (0X0016) 


Description 

(OS) DevHlp_MonCreate Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

22 (0X0016) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


final_buffer=%A notify_rtn=%A Handle=%W 


DEVHELP Major Code: 0X0006 Minor Code: 23 (0X0017) 


Description 

(OS) DevHlp_MonFlush Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

23 (0X0017) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


monitor_handle=%W 



DEVHELP Major Code: 0X0006 Minor Code: 24 (0X0018) 


Description 

(OS) DevHlp_MonWrite Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

24 (0X0018) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


data_record=%A count=%W monitor_handle=%W wait_flag=%W 
timeout_high=%W timeout_low=%W 


DEVHELP Major Code: 0X0006 Minor Code: 25 (0X0019) 


Description 

(OS) DevHlp_PhysToGDTSelector Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

25 (0X0019) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Address=%D Size=%W Selector=%W 


DEVHELP Major Code: 0X0006 Minor Code: 26 (0X001 A) 


Description 


(OS) DevHlp_PhysToUVirt Pre-Invocation 


Tracepoint 



Static tracepoint in DEVHELP. 


Minor Code 

26 (0X001 A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


address_low=%W address_high=%W 
segment size=%W function code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 27 (0X001 B) 


Description 

(OS) DevHlp_PhysToVirt Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

27 (0X001 B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


address to convert=%D 


DEVHELP Major Code: 0X0006 Minor Code: 28 (0X001 C) 


Description 

(OS) DevHlp_Profiling Kernel Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

28 (0X001 C) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 




No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 29 (0X001 D) 


Description 

(OS) DevHlp_ProtToReal Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

29 (0X001 D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Device Header=%A 


DEVHELP Major Code: 0X0006 Minor Code: 30 (0X001 E) 


Description 

(OS) DevHlp_PullParticular Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

30 (0X001 E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A request_packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 31 (0X001 F) 


Description 


(OS) DevHlp_PullReqPacket Pre-Invocation 



Tracepoint 


Static tracepoint in DEVHELP. 


Minor Code 

31 (0X001 F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A 


DEVHELP Major Code: 0X0006 Minor Code: 32 (0X0020) 


Description 

(OS) DevFllp_PushReqPacket Pre-Invocation 

Tracepoint 

Static tracepoint in DEVFIELP. 

Minor Code 

32 (0X0020) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A request_packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 33 (0X0021) 


Description 

(OS) DevFllp_QueueFlush Pre-Invocation 

Tracepoint 

Static tracepoint in DEVFIELP. 

Minor Code 

33 (0X0021) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



Queue=%A 


DEVHELP Major Code: 0X0006 Minor Code: 34 (0X0022) 


Description 

(OS) DevHlp_Queuelnit Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

34 (0X0022) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A 


DEVHELP Major Code: 0X0006 Minor Code: 35 (0X0023) 


Description 

(OS) DevHlp_QueueRead Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

35 (0X0023) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A 


DEVHELP Major Code: 0X0006 Minor Code: 36 (0X0024) 


Description 


(OS) DevHlp_QueueWrite Pre-Invocation 



Tracepoint 


Static tracepoint in DEVHELP. 


Minor Code 

36 (0X0024) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A Character written=%B 


DEVHELP Major Code: 0X0006 Minor Code: 37 (0X0025) 


Description 

(OS) DevHlp_RealToProt Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

37 (0X0025) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Device Header=%A 


DEVHELP Major Code: 0X0006 Minor Code: 38 (0X0026) 


Description 

(OS) DevHlp_Register Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

38 (0X0026) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



monitor segment=%W input_buffer=%W output_buffer_offset=%W 
monitor_PID=%W monitor_handle=%W placement_flag=%W 


DEVHELP Major Code: 0X0006 Minor Code: 39 (0X0027) 


Description 

(OS) DevHlp_RegStackUsage Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

39 (0X0027) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 40 (0X0028) 


Description 

(OS) DevHlp_ResetTimer Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

40 (0X0028) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 42 (0X002A) 


Description 


(OS) DevHlp_ROMCritSection Pre-Invocation 



Tracepoint 


Static tracepoint in DEVHELP. 


Minor Code 

42 (0X0O2A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


enter_exit flag=%W 


DEVHELP Major Code: 0X0006 Minor Code: 43 (0X002B) 


Description 

(OS) DevHlp_ProcRun Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

43 (0X0O2B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


event_id_low=%W event_id_high=%W 


DEVHELP Major Code: 0X0006 Minor Code: 44 (0X002C) 


Description 

(OS) DevHlp_SchedClock Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

44 (0X002C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



DEVHELP Major Code: 0X0006 Minor Code: 45 (0X002D) 


Description 

(OS) DevHlp_SemClear Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

45 (0X002D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


sem_handle_low=%W sem_handle_high=%W 


DEVHELP Major Code: 0X0006 Minor Code: 46 (0X002E) 


Description 

(OS) DevHlp_SemHandle Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

46 (0X002E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


sem_key_low=%W sem_key_high=%W usage flag=%W 


DEVHELP Major Code: 0X0006 Minor Code: 47 (0X002F) 


Description 


(OS) DevHlp_SemRequest Pre-Invocation 


Tracepoint 



Static tracepoint in DEVHELP. 


Minor Code 

47 (OX002F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


sem_handle_low=%W sem_handle_high=%W timeout value=%D 


DEVHELP Major Code: 0X0006 Minor Code: 48 (0X0030) 


Description 

(OS) DevHlp_SendEvent Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

48 (0X0030) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Event=%W 


DEVHELP Major Code: 0X0006 Minor Code: 49 (0X0031) 


Description 

(OS) DevHlp_SetlRQ Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

49 (0X0031) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



IRQnum=%W 


DEVHELP Major Code: 0X0006 Minor Code: 50 (0X0032) 

(OS) DevHlp_SetROMVector Pre-Invocation 
Static tracepoint in DEVHELP. 

50 (0X0032) 

No groups assigned. 

No types assigned. 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 51 (0X0033) 

(OS) DevHlp_SetTimer Pre-Invocation 
Static tracepoint in DEVHELP. 

51 (0X0033) 

No groups assigned. 

No types assigned. 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 52 (0X0034) 

(OS) DevHlp_SortReqPacket Pre-Invocation 
Static tracepoint in DEVHELP. 





Minor Code 



52 (0X0034) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Queue=%A request_packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 53 (0X0035) 


Description 

(OS) DevHlp_TCYield Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

53 (0X0035) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 54 (0X0036) 


Description 

(OS) DevHlp_TickCount Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

54 (0X0036) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


tick counts=%W 



DEVHELP Major Code: 0X0006 Minor Code: 55 (0X0037) 


Description 

(OS) DevHIpJJnlock Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

55 (0X0037) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


lock_handle_low=%W lock_handle_high=%W 


DEVHELP Major Code: 0X0006 Minor Code: 56 (0X0038) 


Description 

(OS) DevHlp_UnPhysToVirt Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

56 (0X0038) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 57 (0X0039) 


Description 

(OS) DevHIpJJnSetIRQ Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

57 (0X0039) 


Trace Groups 



No groups assigned. 


Trace Types 
Traced Parameters 


No types assigned. 


IRQnum=%W 


DEVHELP Major Code: 0X0006 Minor Code: 58 (0X003A) 


Description 

(OS) DevHlp_VerifyAccess Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

58 (0X0O3A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Target Selector/Segment=%W Length=%W 
Offset=%W Type of Access=%W 


DEVHELP Major Code: 0X0006 Minor Code: 60 (0X003C) 


Description 

(OS) DevHlp_VirtToPhys Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

60 (0X0O3C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


address=%D 



DEVHELP Major Code: 0X0006 Minor Code: 61 (0X003D) 

(OS) DevHlp_VMAIIoc Pre-Invocation 
Static tracepoint in DEVHELP. 

61 (0X0O3D) 

No groups assigned. 

No types assigned. 

Flags=%D Size=%D PhysAddr=%F 


DEVHELP Major Code: 0X0006 Minor Code: 62 (0X003E) 

(OS) DevHlp_VMFree Pre-Invocation 
Static tracepoint in DEVHELP. 

62 (0X0O3E) 

No groups assigned. 

No types assigned. 

Linear addrress=%F 


DEVHELP Major Code: 0X0006 Minor Code: 63 (0X003F) 

(OS) DevHlp_VMGIobalToProcess Pre-Invocation 
Static tracepoint in DEVHELP. 





Minor Code 



63 (0X0O3F) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Action flags=%D Linear address=%F Length=%D 


DEVHELP Major Code: 0X0006 Minor Code: 65 (0X0041) 


Description 

(OS) DevFllp_VMLock Pre-Invocation 

Tracepoint 

Static tracepoint in DEVFIELP. 

Minor Code 

65 (0X0041) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Action flags=%D Linear address=%F Length=%D 
pPageList=%F pLockFlandle=%F 


DEVHELP Major Code: 0X0006 Minor Code: 66 (0X0042) 


Description 

(OS) DevFllp_VMProcessToGlobal Pre-Invocation 

Tracepoint 

Static tracepoint in DEVFIELP. 

Minor Code 

66 (0X0042) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Action flags=%D Linear address=%F Length=%D 



DEVHELP Major Code: 0X0006 Minor Code: 67 (0X0043) 


Description 

(OS) DevHlp_VMUnlock Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

67 (0X0043) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


LockHandle=%d%d%d 


DEVHELP Major Code: 0X0006 Minor Code: 69 (0X0045) 


Description 

(OS) DevHlp_Yield Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

69 (0X0045) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 73 (0X0049) 


Description 


(OS) DevHlp_FreeGDTSelector Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


73 (0X0049) 


Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

Selector=%W 


DEVHELP Major Code: 0X0006 Minor Code: 74 (0X004A) 


Description 

(OS) DevHlp_VirtToLin Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

74 (OX004A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Selector=%W Offset=%D 


DEVHELP Major Code: 0X0006 Minor Code: 75 (0X004B) 


Description 

(OS) DevHIpJJnToGDTSelector Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

75 (OX004B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Selector=%W Linear Address=%F Size=%D 



DEVHELP Major Code: 0X0006 Minor Code: 76 (0X004C) 


Description 

(OS) DevHlp_GetDesclnfo Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

76 (OX004C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Selector=%W 


DEVHELP Major Code: 0X0006 Minor Code: 77 (0X004D) 


Description 

(OS) DevHlp_LinToPageList Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

77 (0X004D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Linear Address=%F Size=%D pPageList=%F 


DEVHELP Major Code: 0X0006 Minor Code: 78 (0X004E) 


Description 


(OS) DevHlp_PageListToLin Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


78 (OX004E) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Size=%D pPageList=%F 


DEVHELP Major Code: 0X0006 Minor Code: 79 (0X004F) 


Description 

(OS) DevHlp_PageListToGDTSelector Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

79 (OX004F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Selector=%W Size=%D Access=%D pPageList=%F 


DEVHELP Major Code: 0X0006 Minor Code: 81 (0X0051) 


Description 

(OS) DevHlp_PhysToGDTSel Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

81 (0X0051) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Address=%D Size=%D Access=%W Selector=%W 



DEVHELP Major Code: 0X0006 Minor Code: 83 (0X0053) 


Description 

(OS) DevHlp_AllocCtxHook Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

83 (0X0053) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Hook Handler=%D Context=%D 


DEVHELP Major Code: 0X0006 Minor Code: 84 (0X0054) 


Description 

(OS) DevHlp_ArmCtxHook Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

84 (0X0054) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Hook Data=%D Hook Handle=%D Context=%D 


DEVHELP Major Code: 0X0006 Minor Code: 85 (0X0055) 


Description 


(OS) DevHlp_FreeCtxHook Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


85 (0X0055) 


Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

Hook Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 87 (0X0057) 


Description 

(OS) DevHlp_OpenEventSem Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

87 (0X0057) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Sem Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 88 (0X0058) 


Description 

(OS) DevHlp_CloseEventSem Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

88 (0X0058) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Sem Handle=%D 



DEVHELP Major Code: 0X0006 Minor Code: 89 (0X0059) 


Description 

(OS) DevHlp_PostEventSem Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

89 (0X0059) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Sem Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 90 (0X005A) 


Description 

(OS) DevHlp_ResetEventSem Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

90 (0X0O5A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Sem Handle=%D, Post Count=%D 


DEVHELP Major Code: 0X0006 Minor Code: 93 (0X005D) 


Description 


(OS) DevHlp_ProcRun2 Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


93 (0X0O5D) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


event_id_low=%W event_id_high=%W 


DEVHELP Major Code: 0X0006 Minor Code: 108 (0X006C) 


Description 

(OS) DevHlp_ModifyPriority Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

108 (0X006C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Thread number=%W Keyboard switch=%W 


DEVHELP Major Code: 0X0006 Minor Code: 109 (0X006D) 


Description 

(OS) DevHlp_RegisterTmrDD Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

109 (0X006D) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 



PTTimerO entry point=%A 



DEVHELP Major Code: 0X0006 Minor Code: 110 (0X006E) 


Description 

(OS) DevHlp_RegisterPerfCtrs Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

110 (0X006E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pCounterBlock=%A pTextBlock=%A Flags=%W 


DEVHELP Major Code: 0X0006 Minor Code: 124 (0X007C) 


Description 

(OS) DevHlp_RegisterPDD Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

124 (0X007C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Entry point=%A PDD name=%A 


DEVHELP Major Code: 0X0006 Minor Code: 125 (0X007D) 


Description 


(OS) DevHlp_RegisterBeep Pre-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


125 (0X007D) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


PTDBeep entry point=%A 


DEVHELP Major Code: 0X0006 Minor Code: 126 (0X007E) 


Description 

(OS) DevHlp_Beep Pre-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

126 (0X007E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Beep frequency=%W Beep duration=%W 


DEVHELP Major Code: 0X0006 Minor Code: 129 (0X0081) 


Description 

(OS) DevHlp_ABIOSCall Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

129 (0X0081) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


return code=%W 



DEVHELP Major Code: 0X0006 Minor Code: 130 (0X0082) 


Description 

(OS) DevHlp_ABIOSCommonEnt Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

130 (0X0082) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 131 (0X0083) 


Description 

(OS) DevHlp_ABIOSGetParms Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

131 (0X0083) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 132 (0X0084) 


Description 


(OS) DevHlp_AddTraceEvent Post-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


132 (0X0084) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 133 (0X0085) 


Description 

(OS) DevHlp_AllocGDTSel Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

133 (0X0085) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 134 (0X0086) 


Description 

(OS) DevHlp_AllocPhys Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

134 (0X0086) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return Code=%W Physical Address=%D 



DEVHELP Major Code: 0X0006 Minor Code: 135 (0X0087) 

(OS) DevHlp_AllocReqPacket Post-Invocation 
Static tracepoint in DEVHELP. 

135 (0X0087) 

No groups assigned. 

No types assigned. 

return code=%W request packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 136 (0X0088) 

(OS) DevHlp_AttachDD Post-Invocation 
Static tracepoint in DEVHELP. 

136 (0X0088) 

No groups assigned. 

No types assigned. 

Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 137 (0X0089) 

(OS) DevHlp_Block Post-Invocation 
Static tracepoint in DEVHELP. 





Minor Code 



137 (0X0089) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 138 (0X008A) 


Description 

(OS) DevHlp_DeRegister Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

138 (0X008A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W Number of monitors=%W 


DEVHELP Major Code: 0X0006 Minor Code: 139 (0X008B) 


Description 

(OS) DevHlp_DevDone Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

139 (0X008B) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 140 (0X008C) 



Description 


(OS) DevHlp_EOI Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

140 (0X008C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 141 (0X008D) 


Description 

(OS) DevHlp_FreeLIDEntry Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

141 (0X008D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 142 (0X008E) 


Description 

(OS) DevHlp_FreePhys Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

142 (0X008E) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 143 (0X008F) 


Description 

(OS) DevHlp_FreeReqPacket Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

143 (0X008F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 144 (0X0090) 


Description 

(OS) DevHlp_GetDeviceBlock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

144 (0X0090) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return Code=%W Real Mode Pointer=%A Protect Mode Pointer=%A 


DEVHELP Major Code: 0X0006 Minor Code: 145 (0X0091) 



Description 


(OS) DevHlp_GetDOSVar Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

145 (0X0091) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 146 (0X0092) 


Description 

(OS) DevHlp_GetLIDEntry Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

146 (0X0092) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W LID=%W 


DEVHELP Major Code: 0X0006 Minor Code: 147 (0X0093) 


Description 

(OS) DevHIpJnternalError Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

147 (0X0093) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 148 (0X0094) 


Description 

(OS) DevHlp_Lock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

148 (0X0094) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


return code=%W lock handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 149 (0X0095) 


Description 

(OS) DevHlp_LogEntry Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

149 (0X0095) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 150 (0X0096) 


Description 



(OS) DevHlp_MonCreate Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

150 (0X0096) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W Handle=%W 


DEVHELP Major Code: 0X0006 Minor Code: 151 (0X0097) 


Description 

(OS) DevHlp_MonFlush Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

151 (0X0097) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 152 (0X0098) 


Description 

(OS) DevHlp_MonWrite Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

152 (0X0098) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 153 (0X0099) 


Description 

(OS) DevHlp_PhysToGDTSelector Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

153 (0X0099) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 154 (0X009A) 


Description 

(OS) DevHlp_PhysToUVirt Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

154 (0X009A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


return code=%W selector=%W offset=%W 


DEVHELP Major Code: 0X0006 Minor Code: 155 (0X009B) 



Description 


(OS) DevHlp_PhysToVirt Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

155 (0X009B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 156 (0X009C) 


Description 

(OS) DevHlp_Profiling Kernel Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

156 (0X009C) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 157 (0X009D) 


Description 

(OS) DevHlp_ProtToReal Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

157 (0X009D) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 




Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 158 (0X009E) 


Description 

(OS) DevHlp_PullParticular Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

158 (0X009E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 159 (0X009F) 


Description 

(OS) DevHlp_PullReqPacket Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

159 (0X009F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


return code=%W request packet=%A 


DEVHELP Major Code: 0X0006 Minor Code: 160 (0X00A0) 


Description 



(OS) DevHlp_PushReqPacket Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

160 (0X00A0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 161 (0X00A1) 


Description 

(OS) DevHlp_QueueFlush Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

161 (0X00A1) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 162 (0X00A2) 


Description 

(OS) DevHlp_Queuelnit Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

162 (0X00A2) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 



No parameters traced. 



DEVHELP Major Code: 0X0006 Minor Code: 163 (0X00A3) 


Description 

(OS) DevHlp_QueueRead Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

163 (0X00A3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W Character read=%B 


DEVHELP Major Code: 0X0006 Minor Code: 164 (0X00A4) 


Description 

(OS) DevHlp_QueueWrite Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

164 (0X00A4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 165 (0X00A5) 


Description 


(OS) DevHlp_RealToProt Post-Invocation 


Tracepoint 


Static tracepoint in DEVHELP. 



Minor Code 


165 (0X00A5) 


Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 166 (0X00A6) 


Description 

(OS) DevHlp_Register Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

166 (0X00A6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 167 (0X00A7) 


Description 

(OS) DevHlp_RegStackUsage Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

167 (0X00A7) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 



Return code=%W 



DEVHELP Major Code: 0X0006 Minor Code: 168 (0X00A8) 

(OS) DevHlp_ResetTimer Post-Invocation 
Static tracepoint in DEVHELP. 

168 (0X00A8) 

No groups assigned. 

No types assigned. 

Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 170 (0X00AA) 

(OS) DevHlp_ROMCritSection Post-Invocation 
Static tracepoint in DEVHELP. 

170 (0X00AA) 

No groups assigned. 

No types assigned. 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 171 (0X00AB) 

(OS) DevHlp_ProcRun Post-Invocation 
Static tracepoint in DEVHELP. 

171 (0X00AB) 






Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 172 (0X00AC) 


Description 

(OS) DevHlp_SchedClock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

172 (0X00AC) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 173 (0X00AD) 


Description 

(OS) DevHlp_SemClear Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

173 (0X00AD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 174 (0X00AE) 



Description 


(OS) DevHlp_SemHandle Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

174 (0X00AE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W SemHandle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 175 (0X00AF) 


Description 

(OS) DevHlp_SemRequest Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

175 (0X00AF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 176 (0X00B0) 


Description 

(OS) DevHlp_SendEvent Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

176 (0X00B0) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 177 (0X00B1) 


Description 

(OS) DevHlp_SetlRQ Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

177 (0X00B1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 178 (0X00B2) 


Description 

(OS) DevHlp_SetROMVector Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

178 (0X00B2) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 179 (0X00B3) 



Description 


(OS) DevHlp_SetTimer Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

179 (0X00B3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 180 (0X00B4) 


Description 

(OS) DevHlp_SortReqPacket Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

180 (0X00B4) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 181 (0X00B5) 


Description 

(OS) DevHlp_TCYield Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

181 (0X00B5) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 182 (0X00B6) 


Description 

(OS) DevHlp_TickCount Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

182 (0X00B6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 183 (0X00B7) 


Description 

(OS) DevHIpJJnlock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

183 (0X00B7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 184 (0X00B8) 


Description 



(OS) DevHIpJJnPhysToVirt Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

184 (0X00B8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 185 (0X00B9) 


Description 

(OS) DevHIpJJnSetIRQ Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

185 (0X00B9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 186 (0X00BA) 


Description 

(OS) DevHlp_VerifyAccess Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

186 (0X00 BA) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 188 (0X00BC) 


Description 

(OS) DevHlp_VirtToPhys Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

188 (0X00BC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W Physical Address=%D 


DEVHELP Major Code: 0X0006 Minor Code: 189 (0X00BD) 


Description 

(OS) DevHlp_VMAIIoc Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

189 (0X00BD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 190 (0X00BE) 



Description 


(OS) DevHlp_VMFree Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

190 (0X00BE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 191 (0X00BF) 


Description 

(OS) DevHlp_VMGIobalToProcess Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

191 (0X00BF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D Linear address=%D 


DEVHELP Major Code: 0X0006 Minor Code: 193 (0X00C1) 


Description 

(OS) DevHlp_VMLock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

193 (0X00C1) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 194 (0X00C2) 


Description 

(OS) DevHlp_VMProcessToGlobal Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

194 (0X00C2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D Linear address=%D 


DEVHELP Major Code: 0X0006 Minor Code: 195 (0X00C3) 


Description 

(OS) DevHlp_VMUnlock Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

195 (OXOOC3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 197 (0X00C5) 



Description 


(OS) DevHlp_Yield Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

197 (0X00C5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 201 (0X00C9) 


Description 

(OS) DevHlp_FreeGDTSelector Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

201 (0X00C9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 202 (0X00CA) 


Description 

(OS) DevHlp_VirtToLin Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

202 (0X00CA) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


Return code=%D Linear address=%D 


DEVHELP Major Code: 0X0006 Minor Code: 203 (0X00CB) 


Description 

(OS) DevHIpJJnToGDTSelector Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

203 (0X00CB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 204 (0X00CC) 


Description 

(OS) DevHlp_GetDesclnfo Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

204 (0X00CC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D Attrib. byte=%B Access byte=%B 
Phys. address=%D Descr. limit=%D 


DEVHELP Major Code: 0X0006 Minor Code: 205 (0X00CD) 



Description 


(OS) DevHlp_LinToPageList Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

205 (0X00CD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 206 (0X00CE) 


Description 

(OS) DevHlp_PageListToLin Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

206 (0X00CE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D Linear address=%D 


DEVHELP Major Code: 0X0006 Minor Code: 207 (0X00CF) 


Description 

(OS) DevHlp_PageListToGDTSelector Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

207 (0X00CF) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 209 (0X00D1) 


Description 

(OS) DevHlp_PhysToGDTSel Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

209 (0X00D1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 21 1 (0X00D3) 


Description 

(OS) DevHlp_AllocCtxHook Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

21 1 (0X00D3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 212 (0X00D4) 



Description 


(OS) DevHlp_ArmCtxHook Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

212 (0X00D4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 213 (0X00D5) 


Description 

(OS) DevHlp_FreeCtxHook Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

213 (0X00D5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D 


DEVHELP Major Code: 0X0006 Minor Code: 215 (0X00D7) 


Description 

(OS) DevHIpjDpenEventSem Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

215 (0X00D7) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


Return code=%D, Sem Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 216 (0X00D8) 


Description 

(OS) DevHlp_CloseEventSem Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

216 (0X00D8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D, Sem Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 217 (0X00D9) 


Description 

(OS) DevHlp_PostEventSem Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

21 7 (0X00D9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D, Sem Handle=%D 


DEVHELP Major Code: 0X0006 Minor Code: 218 (0X00DA) 



Description 


(OS) DevHlp_ResetEventSem Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

218 (0X00DA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%D, Sem Handle=%D, Post Count=%D 


DEVHELP Major Code: 0X0006 Minor Code: 221 (0X00DD) 


Description 

(OS) DevHlp_ProcRun2 Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

221 (0X00DD) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 236 (0X00EC) 


Description 

(OS) DevHlp_ModifyPriority Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

236 (0X00EC) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 237 (0X00ED) 


Description 

(OS) DevHlp_RegisterTmrDD Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

237 (0X00ED) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pqwTmrRollover=%A pqwTmr=%A 


DEVHELP Major Code: 0X0006 Minor Code: 238 (0X00EE) 


Description 

(OS) DevHlp_RegisterPerfCtrs Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

238 (0X00EE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 252 (0X00FC) 



Description 


(OS) DevHlp_RegisterPDD Post-Invocation 


Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

252 (0X00FC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


DEVHELP Major Code: 0X0006 Minor Code: 253 (0X00FD) 


Description 

(OS) DevHlp_RegisterBeep Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

253 (OXOOFD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Return code=%W 


DEVHELP Major Code: 0X0006 Minor Code: 254 (0X00FE) 


Description 

(OS) DevHlp_Beep Post-Invocation 

Tracepoint 

Static tracepoint in DEVHELP. 

Minor Code 

254 (OXOOFE) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 




Error code=%W 


Miscellaneous System Trace Events 


The tracepoints for the Miscellaneous major code are identified in the following table. These tracepoints are listed separately from the other 
kernel tracepoints because they are static tracepoints. They are compiled with the code. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Disk device driver: 

Trace events for DISK02 Major Code: 0X0007, sorted by minor code. 
Trace events for DISK02 Major Code: 0X0007 , sorted by tracepoint. 


Trace Events for DISK02 Major Code: 0X0007, Sorted by 
Minor Code 


00001 (0X0001) (OS) 

00002 (0X0002) (OS) 

00003 (0X0003) (OS) 
00006 (0X0006) (OS) 

32769 (0X8001) (OS) 

32770 (0X8002) (OS) 

32771 (0X8003) (OS) 
32774 (0X8006) (OS) 


Disk Device Driver Read Pre-Invocation 
Disk Device Driver Write Pre-Invocation 
Disk Device Driver WriteVerify Pre-Invocation 
Disk Device Driver SCB Transfer Pre-Invocation 
Disk Device Driver Read Post-Invocation 
Disk Device Driver Write Post-Invocation 
Disk Device Driver WriteVerify Post-Invocation 
Disk Device Driver SCB Transfer Post-Invocation 


Trace Events for DISK02 Major Code: 0X0007, Sorted by 
Tracepoint 


(OS) Disk Device Driver Read Post-Invocation 32769 (0X8001) 

(OS) Disk Device Driver Read Pre-Invocation 00001 (0X0001) 

(OS) Disk Device Driver SCB Transfer Post-Invocation 32774 (0X8006) 
(OS) Disk Device Driver SCB Transfer Pre-Invocation 00006 (0X0006) 
(OS) Disk Device Driver Write Post-Invocation 32770 (0X8002) 

(OS) Disk Device Driver Write Pre-Invocation 00002 (0X0002) 

(OS) Disk Device Driver WriteVerify Post-Invocation 32771 (0X8003) 
(OS) Disk Device Driver WriteVerify Pre-Invocation 00003 (0X0003) 


DISK02 Major Code: 0X0007 Minor Code: 1 (0X0001) 


Description 

(OS) Disk Device Driver Read Pre-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 



Drive ID=%W Relative Block Addr=%Q 
Number of Sectors=%W Buffer Addr=%D 


DISK02 Major Code: 0X0007 Minor Code: 2 (0X0002) 


Description 

(OS) Disk Device Driver Write Pre-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Relative Block Addr=%Q 
Number of Sectors=%W Buffer Addr=%D 


DISK02 Major Code: 0X0007 Minor Code: 3 (0X0003) 


Description 

(OS) Disk Device Driver WriteVerify Pre-Invocation 

Tracepoint 
Minor Code 


Static tracepoint in DISK02. 



3 (0X0003) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Relative Block Addr=%Q 
Number of Sectors=%W Buffer Addr=%D 


DISK02 Major Code: 0X0007 Minor Code: 6 (0X0006) 


Description 

(OS) Disk Device Driver SCB Transfer Pre-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Relative Block Addr=%Q 
Number of Sectors=%W 

Req Offset=%W Req Selector=%W Req List Entry Offset=%D 
Scatter/Gather Count=%W Command=%W 


DISK02 Major Code: 0X0007 Minor Code: 32769 (0X8001) 


Description 

(OS) Disk Device Driver Read Post-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

32769 (0X8001) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

Drive ID=%W Completion Status=%W 


DISK02 Major Code: 0X0007 Minor Code: 32770 (0X8002) 


Description 

(OS) Disk Device Driver Write Post-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

32770 (0X8002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Completion Status=%W 


DISK02 Major Code: 0X0007 Minor Code: 32771 (0X8003) 


Description 

(OS) Disk Device Driver WriteVerify Post-Invocation 

Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

32771 (0X8003) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Completion Status=%W 


DISK02 Major Code: 0X0007 Minor Code: 32774 (0X8006) 



Description 


(OS) Disk Device Driver SCB Transfer Post-Invocation 


Tracepoint 

Static tracepoint in DISK02. 

Minor Code 

32774 (0X8006) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Drive ID=%W Completion Status=%W 
DASD manager device driver: 

Trace events for OS2DASD Major Code: 0X0007, sorted by minor code. 
Trace events for OS2DASD Major Code: 0X0007 .sorted by tracepoint. 


Trace Events for OS2DASD Major Code: 0X0007, Sorted by 
Minor Code 

00008 (0X0008) (OS) DASD Manager Strategy-1 Read/Write/Verify Pre-Invocation 

00009 (0X0009) (OS) DASD Manager IOCTL Pre-Invocation 

00010 (0X000A) (OS) DASD Manager Strategy-2 Request List Header Pre-Invocation 

0001 1 (0X000B) (OS) DASD Manager Strategy-2 Read/Write/Verify Pre-Invocation 

00012 (0X000C) (OS) DASD Manager IORB Pre-Invocation 

00136 (0X0088) (OS) DASD Manager Strategy-1 Read/Write/Verify Post-Invocation 

00137 (0X0089) (OS) DASD Manager IOCTL Post- Invocation 

00138 (0X008A) (OS) DASD Manager Strategy-2 Request List Header Post-Invocation 

00139 (0X008B) (OS) DASD Manager Strategy-2 Read/Write/Verify Post-Invocation 

00140 (0X008C) (OS) DASD Manager IORB Post-Invocation 


Trace Events for OS2DASD Major Code: 0X0007, Sorted by 
Tracepoint 


(OS) DASD Manager IOCTL Post-Invocation 00137 (0X0089) 

(OS) DASD Manager IOCTL Pre-Invocation 00009 (0X0009) 

(OS) DASD Manager IORB Post-Invocation 00140 (0X008C) 

(OS) DASD Manager IORB Pre-Invocation 00012 (0X000C) 

(OS) DASD Manager Strategy-1 Read/Write/Verify Post-Invocation 00136 (0X0088) 
(OS) DASD Manager Strategy-1 Read/Write/Verify Pre-Invocation 00008 (0X0008) 
(OS) DASD Manager Strategy-2 Read/Write/Verify Post-Invocation 00139 (0X008B) 
(OS) DASD Manager Strategy-2 Read/Write/Verity Pre-Invocation 0001 1 (0X000B) 
(OS) DASD Manager Strategy-2 Request List Header Post-Invocation 00138 (0X008A) 
(OS) DASD Manager Strategy-2 Request List Header Pre-Invocation 00010 (0X000A) 


0S2DASD Major Code: 0X0007 Minor Code: 8 (0X0008) 


Description 

(OS) DASD Manager Strategy-1 Read/Write/Verify Pre-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

8 (0X0008) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 



pRequest=%A Unit=%B %I1 Drive=%S Cmd=%B %I1 %S %I3 Prty=%B %I1 
cSGList=%W RBA=%F Sectors=%F %I4 


OS2DASD Major Code: 0X0007 Minor Code: 9 (0X0009) 


Description 

(OS) DASD Manager IOCTL Pre-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRequest=%A Unit=%B %I1 Drive=%S Cat/Func=%B %B %S %I3 Prty=%B %I1 
cSGList=%W CH=%W %W Sectors=%F %I4 


OS2DASD Major Code: 0X0007 Minor Code: 10 (0X000A) 


Description 


(OS) DASD Manager Strategy-2 Request List Pleader Pre-Invocation 



Tracepoint 


Static tracepoint in OS2DASD. 


Minor Code 

10 (OXOOOA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRLH=%A Count=%W Unit=%B %I1 Drive=%S Ctrl=%W 


OS2DASD Major Code: 0X0007 Minor Code: 1 1 (0X000B) 


Description 

(OS) DASD Manager Strategy-2 Read/Write/Verify Pre-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

11 (0X0O0B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRequest=%A Unit=%B %I1 Drive=%S Cmd=%B %I1 %S %I1 Ctrl=%W Prty=%B %I1 
cSGList=%W RBA=%F Sectors=%F pRLH=%W %I2 


OS2DASD Major Code: 0X0007 Minor Code: 12 (0X000C) 


Description 

(OS) DASD Manager IORB Pre-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

12 (0X0000) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 

pRequest=%A Unit=%B %I1 %I2 Cmd=%B %B %S %I1 Ctrl=%W %I2 
cSGList=%W RBA=%F Sectors=%F %I4 


0S2DASD Major Code: 0X0007 Minor Code: 136 (0X0088) 


Description 

(OS) DASD Manager Strategy-1 Read/Write/Verity Post-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

136 (0X0088) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRequest=%A Status=%B %I1 ErrorCode=%B %I1 SectorsDone=%F 


OS2DASD Major Code: 0X0007 Minor Code: 137 (0X0089) 


Description 

(OS) DASD Manager IOCTL Post-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

137 (0X0089) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRequest=%A Status=%B %I1 ErrorCode=%B %I5 


OS2DASD Major Code: 0X0007 Minor Code: 138 (0X008A) 



Description 


(OS) DASD Manager Strategy-2 Request List Header Post-Invocation 


Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

138 (0X008A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRLH=%A DoneCount=%W Status=%B %I1 


OS2DASD Major Code: 0X0007 Minor Code: 139 (0X008B) 


Description 

(OS) DASD Manager Strategy-2 Read/Write/Verify Post-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

139 (0X008B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


pRequest=%A Status=%B %I1 ErrorCode=%B %I1 SectorsDone=%F 


OS2DASD Major Code: 0X0007 Minor Code: 140 (0X008C) 


Description 

(OS) DASD Manager IORB Post-Invocation 

Tracepoint 

Static tracepoint in OS2DASD. 

Minor Code 

140 (0X008C) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


pRequest=%A Status=%W ErrorCode=%W SectorsDone=%F 


Resource Manager Device Driver Trace Events 


The tracepoints for the Miscellaneous major code are identified in the following table. These tracepoints are listed separately from the other 
kernel tracepoints because they are static tracepoints. They are compiled with the code. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Resource manager device driver: 

Trace events for RESOURCE major code: 0X0008, sorted by minor code. 
Trace events for RESOURCE major code: 0X0008 .sorted by tracepoint. 


Trace Events for RESOURCE Major Code: 0X0008, Sorted by 
Minor Code 

00001 (0X0001) (OS) Resource Manager Allocate 

00002 (0X0002) (OS) Resource Manager Allocate 

00003 (0X0003) (OS) Resource Manager Allocate 

00017 (0X0011) (OS) Resource Manager Deallocate 

00018 (0X0012) (OS) Resource Manager Deallocate 

00019 (0X0013) (OS) Resource Manager Deallocate 


Trace Events for RESOURCE Major Code: 0X0008, Sorted by 
Tracepoint 

(OS) Resource Manager Deallocate 00017 (0X0011) 

(OS) Resource Manager Deallocate 00018 (0X0012) 

(OS) Resource Manager Deallocate 00019 (0X0013) 

(OS) Resource Manager Allocate 00001 (0X0001) 

(OS) Resource Manager Allocate 00002 (0X0002) 

(OS) Resource Manager Allocate 00003 (0X0003) 


RESOURCE Major Code: 0X0008 Minor Code: 1 (0X0001) 


Description 


(OS) Resource Manager Allocate 


Tracepoint 

Static trace point in RESOURCE. 

Minor Code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Driver=%s 

%s=%w%w Flags=%s Rc=%w 


RESOURCE Major Code: 0X0008 Minor Code: 2 (0X0002) 


Description 

(OS) Resource Manager Allocate 

Tracepoint 

Static trace point in RESOURCE. 

Minor Code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Driver=%s 

%s=%w Flags=%s Rc=%w 


RESOURCE Major Code: 0X0008 Minor Code: 3 (0X0003) 


Description 


(OS) Resource Manager Allocate 


Tracepoint 


Minor Code 


Static trace point in RESOURCE. 



3 (0X0003) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Driver=%s 


%s=%f%f Flags=%s Rc=%w 


RESOURCE Major Code: 0X0008 Minor Code: 17 (0X0011) 


Description 

(OS) Resource Manager Deallocate 

Tracepoint 

Static trace point in RESOURCE. 

Minor Code 

17 (0X0011) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Driver=%s 

%s=%w%w Flags=%s Rc=%w 


RESOURCE Major Code: 0X0008 Minor Code: 18 (0X0012) 


Description 

(OS) Resource Manager Deallocate 

Traceooint 

Static trace point in RESOURCE. 

Minor Code 

18 (0X0012) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 




Driver=%s 


%s=%w Flags=%s Rc=%w 


RESOURCE Major Code: 0X0008 Minor Code: 19 (0X0013) 


Description 

(OS) Resource Manager Deallocate 

Tracepoint 

Static trace point in RESOURCE. 

Minor Code 

19 (0X0013) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


Driver=%s 

%s=%f%f Flags=%s Rc=%w 


DOSCALL1 .DLL Trace Events 

The tracepoints for the DOSCALL1 .DLL kernel services major code are identified in the following tables. These tracepoints are dynamic 
tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for DOSCALL1 Major Code: 0X0010, sorted by minor code. 
Trace events for DOSCALL1 Major Code: 0X0010 .sorted by tracepoint. 
Kernel API Tracepoints Indirected Via DOSCALL1 . 

OUECALLS API Tracepoints Indirected Via DOSCALL1. 


Trace Events for DOSCALL1 Major Code: 0X0010, Sorted by 
Minor Code 


00008 (0X0008) (OS) DosFSRamSemClear Pre-Invocation 

00009 (0X0009) (OS) DosFSRamSemRequest Pre-Invocation 

00014 (0X000E) (OS) DosReadAsync Pre-Invocation 

00015 (0X000F) (OS) DosScanEnv Pre-Invocation 


00016 (0X0010) (OS) DosSearchPath Pre-Invocation 

00017 (0X0011) (OS) DosSemClear Pre-Invocation 

00018 (0X0012) (OS) DosSemRequest Pre-Invocation 

00019 (0X0013) (OS) DosSemSet Pre-Invocation 

00020 (0X0014) (OS) DosSemWait Pre-Invocation 

00021 (0X0015) (OS) DosSetCp Pre-Invocation 

00022 (0X0016) (OS) DosSetProcCp Pre-Invocation 

00023 (0X0017) (OS) DosSubAlloc Pre-Invocation 

00024 (0X0018) (OS) Dos32SubAlloc Pre-Invocation 

00025 (0X0019) (OS) DosSubFree Pre-Invocation 

00026 (0X001 A) (OS) Dos32SubFree Pre-Invocation 

00027 (0X001 B) (OS) DosSubSet Pre-Invocation 

00028 (0X001 C) (OS) Dos32SubSet Pre-Invocation 
00030 (0X001 E) (OS) DosWriteAsync Pre-Invocation 

00032 (0X0020) (OS) DosErrClass Pre-Invocation 

00033 (0X0021) (OS) DosQAppType Pre-Invocation 

00034 (0X0022) (OS) Dos32SetExceptionFlandler Pre-Invocation 

00035 (0X0023) (OS) Dos32RaiseException Pre-Invocation 

00036 (0X0024) (OS) Dos32UnsetExceptionFlandler Pre-Invocation 

00037 (0X0025) (OS) Dos32UnwindException Pre-Invocation 

00257 (0X0101) (OS) DosGetMessage Pre-Invocation 

00258 (0X0102) (OS) DosinsMessage Pre-Invocation 

00259 (0X0103) (OS) DosPutMessage Pre-Invocation 

00361 (0X0169) (OS) Dos32R3ExceptionDispatcher Pre-Invocation 

00362 (0X01 6A) (OS) Dos32ExceptionCallback Pre-Invocation 

00363 (0X01 6B) (OS) xcptExecutellserExceptionFlandler Pre-Invocation 

32776 (0X8008) (OS) DosFSRamSemClear Post-Invocation 

32777 (0X8009) (OS) DosFSRamSemRequest Post-Invocation 

32782 (0X800E) (OS) DosReadAsync Post-Invocation 

32783 (0X800F) (OS) DosScanEnv Post-Invocation 

32784 (0X8010) (OS) DosSearchPath Post-Invocation 

32785 (0X8011) (OS) DosSemClear Post-Invocation 

32786 (0X8012) (OS) DosSemRequest Post-Invocation 

32787 (0X8013) (OS) DosSemSet Post-Invocation 

32788 (0X8014) (OS) DosSemWait Post-Invocation 

32789 (0X8015) (OS) DosSetCp Post-Invocation 

32790 (0X8016) (OS) DosSetProcCp Post-Invocation 

32791 (0X8017) (OS) DosSubAlloc Post-Invocation 

32792 (0X8018) (OS) Dos32SubAlloc Post-Invocation 

32793 (0X8019) (OS) DosSubFree Post-Invocation 

32794 (0X801 A) (OS) Dos32SubFree Post-Invocation 

32795 (0X801 B) (OS) DosSubSet Post-Invocation 

32796 (0X801 C) (OS) Dos32SubSet Post-Invocation 
32798 (0X801 E) (OS) DosWriteAsync Post-Invocation 

32800 (0X8020) (OS) DosErrClass Post-Invocation 

32801 (0X8021) (OS) DosQAppType Post-Invocation 

32802 (0X8022) (OS) Dos32SetExceptionFlandler Post-Invocation 
32804 (0X8024) (OS) Dos32UnsetExceptionFlandler Post-Invocation 

33025 (0X8101) (OS) DosGetMessage Post-Invocation 

33026 (0X8102) (OS) DosinsMessage Post-Invocation 

33027 (0X8103) (OS) DosPutMessage Post-Invocation 

33028 (0X8104) (OS) UniThunk 32:16 Return 

33029 (0X8105) (OS) UniThunk 16:32 Return 


Trace Events for DOSCALL1 Major Code: 0X0010, Sorted by 
Tracepoint 


DOS32EXCEPTIONCALLBACK 00362 (0X01 6A) 
DOS32R3EXCEPTIONDISPATCHER 00361 (0X0169) 
DOS32RAISEEXCEPTION 00035 (0X0023) 
DOS32SETEXCEPTIONHANDLER 00034 (0X0022) 
Dos32SubAlloc Post-Invocation 32792 (0X8018) 
Dos32SubAlloc Pre-Invocation 00024 (0X0018) 
Dos32SubFree Post-Invocation 32794 (0X801 A) 


Dos32SubFree Pre-Invocation 00026 (0X001 A) 
Dos32SubSet Post-Invocation 32796 (0X801 C) 
Dos32SubSet Pre-Invocation 00028 (0X001 C) 
DOS32UNSETEXCEPTIONHANDLER 00036 (0X0024) 
DOS32UNWINDEXCEPTION 00037 (0X0025) 
DOSFSRAMSEMCLEAR 00008 (0X0008) 
DOSFSRAMSEMREQUEST 00009 (0X0009) 
DOSREADASYNC 00014 (0X000E) 

DOSSCANENV 00015 (0X000F) 

DOSSEARCHPATH 00016 (0X0010) 

DOSSEMCLEAR 0001 7 (0X001 1 ) 

DOSSEMREQUEST 0001 8 (0X001 2) 

DOSSEMSET 00019 (0X0013) 

DOSSEMWAIT 00020 (0X0014) 

DOSSETCP 00021 (0X0015) 

DOSSETPROCCP 00022 (0X0016) 

DOSSUBSET 00027 (0X001 B) 

DOSWRITEASYNC 00030 (0X001 E) 

POSTGETMSG 33025 (0X8101) 

POSTINSMSG 33026 (0X8102) 

POSTPUTMSG 33027 (0X8103) 

PREGETMSG 00257 (0X0101) 

PREINSMSG 00258 (0X0102) 

PREPUTMSG 00259 (0X0103) 

postDOS32SETEXCEPTIONHANDLER 32802 (0X8022) 
postDOS32UNSETEXCEPTIONHANDLER 32804 (0X8024) 
postDOSERRCLASS 32800 (0X8020) 
postDOSFSRAMSEMCLEAR 32776 (0X8008) 
postDOSFSRAMSEMREQUEST 32777 (0X8009) 
postDOSQAPPTYPE 32801 (0X8021) 
postDOSREADASYNC 32782 (0X800E) 
postDOSSCANENV 32783 (0X800F) 
postDOSSEARCHPATH 32784 (0X8010) 
postDOSSEMCLEAR 32785 (0X8011) 
postDOSSEMREQUEST 32786 (0X801 2) 
postDOSSEMSET 32787 (0X8013) 
postDOSSEMWAIT 32788 (0X8014) 
postDOSSETCP 32789 (0X8015) 
postDOSSETPROCCP 32790 (0X8016) 
postDOSSUBALLOC 32791 (0X8017) 
postDOSSUBFREE 32793 (0X8019) 
postDOSSUBSET 32795 (0X801 B) 
postDOSWRITEASYNC 32798 (0X801 E) 
preDOSERRCLASS 00032 (0X0020) 
preDOSQAPPTYPE 00033 (0X0021) 
preDOSSUBALLOC 00023 (0X0017) 
preDOSSUBFREE 00025 (0X0019) 
xcptExecuteUserExceptionFlancller 00363 (0X01 6B) 
UniThunk 16:32 Return33029 (0X8105) 

UniThunk 32:16 Return33028 (0X8104) 


DOSCALL1 Major Code: 0X0010 Minor Code: 8 (0X0008) 


Description 

(OS) DosFSRamSemClear Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSFSRAMSEMCLEAR 

Minor Code 

8 (0X0008) 

Trace Groups 


SEM 


Trace Types 


PRE 


Traced Parameters 

Sem Ptr = %P %A 

Note: Parameters are trace with OS/2 Warp V3.0 fix pack 35 or OS/2 Warp V4.0 fix pack 1 0 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 9 (0X0009) 


Description 

(OS) DosFSRamSemRequest Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSFSRAMSEMREQUEST 

Minor Code 

9 (0X0009) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Timeout = %P %F Sem Ptr = %P %A 

Note: Parameters are trace with OS/2 Warp V3.0 fix pack 35 or OS/2 Warp V4.0 fix pack 1 0 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 14 (0X000E) 


Description 

(OS) DosReadAsync Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSREADASYNC 

Minor Code 

14 (0X0O0E) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


Sem at = %A Handle = %W 



D0SCALL1 Major Code: 0X0010 Minor Code: 15 (0X000F) 


Description 

(OS) DosScanEnv Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSCANENV 

Minor Code 

15 (OXOOOF) 

Trace Groups 

LNK 

Trace Types 

PRE 

Traced Parameters 


Current Env = %S 
Env Pointer = %A 


DOSCALL1 Major Code: 0X0010 Minor Code: 16 (0X0010) 


Description 

(OS) DosSearchPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSEARCHPATH 

Minor Code 

16 (0X0010) 

Trace Groups 

FS 

Trace Tvpes 

PRE 

Traced Parameters 

Control = %W 


Path = %S 


File = %S 


DOSCALL1 Major Code: 0X001 0 Minor Code: 1 7 (0X001 1 ) 



Description 


(OS) DosSemClear Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSEMCLEAR 

Minor Code 

17 (0X0011) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Sem Handle = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 18 (0X0012) 


Description 

(OS) DosSemRequest Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSEMREQUEST 

Minor Code 

18 (0X0012) 

Trace Groups 

SEM 


Trace Types 

PRE 

Traced Parameters 


Sem Handle = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 19 (0X0013) 


Description 

(OS) DosSemSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSEMSET 

Minor Code 

19 (0X0013) 

Trace Groups 

SEM 

Trace Types 


PRE 



Traced Parameters 


Sem Handle = %D 


D0SCALL1 Major Code: 0X0010 Minor Code: 20 (0X0014) 


Description 

(OS) DosSemWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSEMWAIT 

Minor Code 

20 (0X0014) 

Trace Groups 

SEM 

Trace Tvpes 

PRE 

Traced Parameters 



Sem Handle = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 21 (0X0015) 


Description 

(OS) DosSetCp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSETCP 

Minor Code 

21 (0X0015) 

Trace Groups 

NLS 


Trace Types 

PRE 

Traced Parameters 


Code Page ld= %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 22 (0X0016) 



Description 


(OS) DosSetProcCp Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSETPROCCP 

Minor Code 

22 (0X0016) 

Trace Groups 

NLS 


Trace Types 

PRE 

Traced Parameters 


Code Page ld= %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 23 (0X0017) 


Description 

(OS) DosSubAlloc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .preDOSSUBALLOC 

Minor Code 

23 (0X0017) 

Trace Groups 

MSP 

Trace Types 

PRE 

Traced Parameters 


Selector = %W Size = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 24 (0X0018) 


Description 

(OS) Dos32SubAlloc Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @msp32.c in DOSCALL1 . 

Minor Code 

24 (0X0018) 

Trace Groups 

MSP 

Trace Types 


PRE 



Traced Parameters 


pHdr = %F Size = %D 


D0SCALL1 Major Code: 0X0010 Minor Code: 25 (0X0019) 


Description 

(OS) DosSubFree Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .preDOSSUBFREE 

Minor Code 

25 (0X0019) 

Trace Groups 

MSP 

Trace Types 

PRE 

Traced Parameters 


Selector = %W Offset = %W 
Size = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 26 (0X001 A) 


Description 

(OS) Dos32SubFree Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @msp32.c in DOSCALL1 . 

Minor Code 

26 (0X001 A) 

Trace Groups 

MSP 

Trace Types 

PRE 

Traced Parameters 


pHdr = %F Offset = %F 
Size = %D 


DOSCALL1 Major Code: 0X001 0 Minor Code: 27 (0X001 B) 



Description 


(OS) DosSubSet Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOSSUBSET 

Minor Code 

27 (0X001 B) 

Trace Groups 

MSP 

Trace Types 

PRE 

Traced Parameters 


Selector = %W Flags = %W 
Size = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 28 (0X001 C) 


Description 

(OS) Dos32SubSet Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @msp32.c in DOSCALL1 . 

Minor Code 

28 (0X001 C) 

Trace Groups 

MSP 

Trace Types 

PRE 

Traced Parameters 


pHdr = %F Flags = %D 
Size = %D 


DOSCALL1 Major Code: 0X001 0 Minor Code: 30 (0X001 E) 


Description 

(OS) DosWriteAsync Pre-Invocation 

Tracepoint 
Minor Code 


Public symbol defined dynamic tracepoint: DOSCALL1 .DOSWRITEASYNC 



30 (0X001 E) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


Sem at = %A Handle = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32 (0X0020) 


Descriotion 

(OS) DosErrClass Pre-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .preDOSERRCLASS 

Minor Code 

32 (0X0020) 

Trace GrouDS 

FS 

Trace TvDes 

PRE 

Traced Parameters 



Error Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 33 (0X0021) 


Descriotion 

(OS) DosQAppType Pre-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .preDOSQAPPTYPE 

Minor Code 

33 (0X0021) 

Trace GrouDS 

LDR 

Trace TvDes 

PRE 

Traced Parameters 



File = %S 



D0SCALL1 Major Code: 0X0010 Minor Code: 34 (0X0022) 


Description 

(OS) Dos32SetExceptionHandler Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32SETEXCEPTIONHANDLER 

Minor Code 

34 (0X0022) 

Trace Groups 

EXMG 

Trace Types 

PRE 

Traced Parameters 


ExcHandlerStructAddress = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 35 (0X0023) 


Description 

(OS) Dos32RaiseException Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32RAISEEXCEPTION 

Minor Code 

35 (0X0023) 

Trace Groups 

EXMG 

Trace Types 

PRE 

Traced Parameters 


Exception Report Record: 

Exception Number=%P %F Handler Flags=%F Nested Exception Report Record=%F 
Exception Address=%F Parameter Count=%F 
PI =%F P2=%F P3=%F P4=%F 

Note: Parameters are traced only with OS/2 Warp V3.0 fix pack 35 or OS/2 Warp V4.0 fix pack 1 0 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 36 (0X0024) 



Description 


(OS) Dos32UnsetExceptionHandler Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32UNSETEXCEPTIONHANDLER 

Minor Code 

36 (0X0024) 

Trace Groups 

EXMG 

Trace Types 

PRE 

Traced Parameters 


ExcHandlerStructAddress = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 37 (0X0025) 


Description 

(OS) Dos32UnwindException Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32UNWINDEXCEPTION 

Minor Code 

37 (0X0025) 

Trace Groups 

EXMG 

Trace Types 

PRE 

Traced Parameters 


ExcHandlerStructAddress = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 257 (0X0101) 


Description 

(OS) DosGetMessage Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .PREGETMSG 

Minor Code 

257 (0X0101) 

Trace Groups 


MSG 



Trace Types 
Traced Parameters 


PRE 


MsgNumber = %W 
Filename = %S 


D0SCALL1 Major Code: 0X0010 Minor Code: 258 (0X0102) 


Description 

(OS) DosinsMessage Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .PREINSMSG 

Minor Code 

258 (0X0102) 

Trace Groups 

MSG 

Trace Types 

PRE 

Traced Parameters 


IV Count = %W 

Length of Input Message %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 259 (0X0103) 


Description 

(OS) DosPutMessage Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .PREPUTMSG 

Minor Code 

259 (0X0103) 

Trace Groups 

MSG 

Trace Tvpes 

PRE 

Traced Parameters 



File Handle = %W 


Message Length = %W 



D0SCALL1 Major Code: 0X0010 Minor Code: 32776 
(0X8008) 

(OS) DosFSRamSemClear Post-Invocation 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSFSRAMSEMCLEAR 
32776 (0X8008) 

SEM 
POST 

Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32777 
(0X8009) 

(OS) DosFSRamSemRequest Post-Invocation 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSFSRAMSEMREQUEST 
32777 (0X8009) 

SEM 
POST 

Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32782 
(0X800E) 





Description 


(OS) DosReadAsync Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSREADASYNC 

Minor Code 

32782 (0X800E) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Bytes Read = %W Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32783 
(0X800F) 

Description 

(OS) DosScanEnv Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSCANENV 

Minor Code 

32783 (0X800F) 

Trace Groups 

LNK 

Trace Types 

POST 

Traced Parameters 


Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32784 
(0X8010) 


Description 


(OS) DosSearchPath Post-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSEARCPIPATPI 



32784 (0X8010) 


Trace Groups 
Trace Types 
Traced Parameters 


FS 

POST 

Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32785 
(0X8011) 

Description 

(OS) DosSemClear Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSEMCLEAR 

Minor Code 

32785 (0X8011) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 


Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32786 
(0X8012) 

Description 

(OS) DosSemRequest Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSEMREQUEST 

Minor Code 

32786 (0X8012) 

Trace Groups 

SEM 


Trace Types 

POST 

Traced Parameters 



Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32787 
(0X8013) 

(OS) DosSemSet Post-Invocation 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSEMSET 
32787 (0X8013) 

SEM 
POST 

Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32788 
(0X8014) 

(OS) DosSemWait Post-Invocation 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSEMWAIT 
32788 (0X8014) 

SEM 
POST 

Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32789 





(0X8015) 


Description 

(OS) DosSetCp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSETCP 

Minor Code 

32789 (0X8015) 

Trace Groups 

NLS 

Trace Tvpes 

POST 

Traced Parameters 



Return Code= %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32790 
(0X8016) 

Description 

(OS) DosSetProcCp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSETPROCCP 

Minor Code 

32790 (0X8016) 

Trace Groups 

NLS 


Trace Types 

POST 

Traced Parameters 


Return Code= %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32791 
(0X8017) 


Description 


(OS) DosSubAlloc Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSUBALLOC 


Minor Code 

32791 (0X8017) 

Trace Groups 

MSP 

Trace Types 

POST 

Traced Parameters 


Offset = %W Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32792 
(0X8018) 

Description 

(OS) Dos32SubAlloc Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @msp32.c in DOSCALL1 . 

Minor Code 

32792 (0X8018) 

Trace Groups 

MSP 

Trace Types 

POST 

Traced Parameters 


Offset = %F Return Code = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 32793 
(0X8019) 

Description 

(OS) DosSubFree Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSUBFREE 

Minor Code 

32793 (0X8019) 

Trace Groups 

MSP 

Trace Types 


POST 



Traced Parameters 


Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32794 
(0X801 A) 

Description 

(OS) Dos32SubFree Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @msp32.c in DOSCALL1 . 

Minor Code 

32794 (0X801 A) 

Trace Groups 

MSP 

Trace Types 

POST 

Traced Parameters 


Return Code = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 32795 
(0X801 B) 

Description 

(OS) DosSubSet Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSSUBSET 

Minor Code 

32795 (0X801 B) 

Trace Groups 

MSP 

Trace Types 

POST 

Traced Parameters 


Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32796 



(0X801 C) 


Description 

(OS) Dos32SubSet Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: <3>msp32.c in DOSCALL1 

Minor Code 

32796 (0X801 C) 

Trace Groups 

MSP 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 32798 
(0X801 E) 

Description 

(OS) DosWriteAsync Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSWRITEASYNC 

Minor Code 

32798 (0X801 E) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Bytes Written = %W Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32800 
(0X8020) 


Description 


(OS) DosErrClass Post-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSERRCLASS 


Minor Code 

32800 (0X8020) 

Trace Groups 

FS 


Trace Types 

POST 


Traced Parameters 


Class = %W Action = %W 
Locus = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32801 
(0X8021) 

Description 

(OS) DosQAppType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOSQAPPTYPE 

Minor Code 

32801 (0X8021) 

Trace Groups 

LDR 

Trace Types 

POST 

Traced Parameters 


Type = %W Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 32802 
(0X8022) 


Description 

(OS) Dos32SetExceptionPlandler Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 ,postDOS32SETEXCEPTIONFIANDLER 

Minor Code 

32802 (0X8022) 

Trace Groups 


EXMG 



Trace Types 


POST 


Traced Parameters 

No parameters traced. 


DOSCALL1 Major Code: 0X0010 Minor Code: 32804 
(0X8024) 

Description 

(OS) Dos32UnsetExceptionHandler Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .postDOS32UNSETEXCEPTIONHANDLER 

Minor Code 

32804 (0X8024) 

Trace Groups 

EXMG 

Trace Types 

POST 

Traced Parameters 


Return Code = %D 


DOSCALL1 Major Code: 0X0010 Minor Code: 33025 
(0X8101) 

Description 

(OS) DosGetMessage Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .POSTGETMSG 

Minor Code 

33025 (0X8101) 

Trace Groups 

MSG 

Trace Types 

POST 

Traced Parameters 


Return Code = %W 


Message Length = %W 



D0SCALL1 Major Code: 0X0010 Minor Code: 33026 
(0X8102) 


Description 

(OS) DosinsMessage Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .POST1NSMSG 

Minor Code 

33026 (0X8102) 

Trace Groups 

MSG 

Trace Tvpes 

POST 

Traced Parameters 

Return Code = %W 


Message Length = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 33027 
(0X8103) 

Description 

(OS) DosPutMessage Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .POSTPUTMSG 

Minor Code 

33027 (0X8103) 

Trace Groups 

MSG 

Trace Types 

POST 

Traced Parameters 


Return Code = %W 


DOSCALL1 Major Code: 0X0010 Minor Code: 361 (0X0169) 



Description 


(OS) Dos32R3ExceptionDispatcher Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32R3EXCEPTIONDISPATCHER 

Minor Code 

361 (0X0169) 

Trace Groups 

EXMG 

Trace Types 

PRE, API 

Traced Parameters 


Return address=%P %FTrap Number=%F pRepRec=%F pContext=%F 
Exception Report Record: 

Exception Number=%P %F Flandler Flags=%F Nested Exception Report Record=%F 
Exception Address=%F Parameter Count=%F 
P1=%F P2=%F P3=%F P4=%F 
Context Record: 

ContextFlags=%P %F 

FPU_CNTRL=%W %I2 FPU_STATUS=%W %I2 FPU_TAG=%W %I2 
FPU_IP=%F FPU_CS=%W FPU_OPCODE=%W FPU_DATAOFFS=%F %I4 
FP Register Stack in Lo-DWORD Pli-DWORD Sign/Exp form: 

R0=%F %F %W R1=%F %F %W 

R2=%F %F %W R3=%F %F %W 

R4=%F %F %W R5=%F %F %W 

R6=%F %F %W R7=%F %F %W 

GS=%W %I2 FS=%W %I2 ES=%W %I2 DS=%W %I2 

EDI=%F ESI=%F EAX=%F EBX=%F ECX=%F EDX=%F 

EBP=%F EIP=%F CS=%W %I2 EFLAGS=%F ESP=%F SS=%W %I2 

Note: 

This tracepoint is available with OS/2 Warp V3.0 fix pack 40 and OS/2 Warp V4.0 fix pack 10 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 362 (0X01 6A) 


Description 


(OS) Dos32ExceptionCallback Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: DOSCALL1 .DOS32EXCEPTIONCALLBACK 



Minor Code 


362 (0X0 16A) 


Trace Groups 

EXMG 

Trace Types 

PRE, API 

Traced Parameters 


Return address=%P %FTrap Number=%F pRepRec=%F pContext=%F Disposition=%F 
Exception Report Record: 

Exception Number=%P %F Flandler Flags=%F Nested Exception Report Record=%F 
Exception Address=%F Parameter Count=%F 
P1=%F P2=%F P3=%F P4=%F 
Context Record: 

ContextFlags=%P %F 

FPU_CNTRL=%W %I2 FPU_STATUS=%W %I2 FPU_TAG=%W %I2 
FPU_IP=%F FPU_CS=%W FPU_OPCODE=%W FPU_DATAOFFS=%F %I4 
FP Register Stack in Lo-DWORD Pli-DWORD Sign/Exp form: 

R0=%F %F %W R1=%F %F %W 

R2=%F %F %W R3=%F %F %W 

R4=%F %F %W R5=%F %F %W 

R6=%F %F %W R7=%F %F %W 

GS=%W %I2 FS=%W %I2 ES=%W %I2 DS=%W %I2 

EDI=%F ESI=%F EAX=%F EBX=%F ECX=%F EDX=%F 

EBP=%F EIP=%F CS=%W %I2 EFLAGS=%F ESP=%F SS=%W %I2 

Note: 

This tracepoint is available with OS/2 Warp V3.0 fix pack 40 and OS/2 Warp V4.0 fix pack 10 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 363 (0X01 6B) 


Description 

(OS) xcptExecutellserExceptionFlandler Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .xcptExecuteUserExceptionPlandler 

Minor Code 

363 (0X01 6B) 

Trace Groups 


EXMG 



Trace Types 


PRE, INT 


Traced Parameters 


Return address=%P %F pRepRec=%F pRegRec=%F pContext=%F pDisContext=%F pNestCatcher=%F 
Exception Report Record: 

Exception Number=%P %F Flandler Flags=%F Nested Exception Report Record=%F 

Exception Address=%F Parameter Count=%F 

PI =%F P2=%F P3=%F P4=%F 

Registration Record:" 

pNextRegRec=%P %F pFlandler=%F 

Context Record: 

ContextFlags=%P %F 

FPU_CNTRL=%W %I2 FPU_STATUS=%W %I2 FPU_TAG=%W %I2 
FPU_IP=%F FPU_CS=%W FPU_OPCODE=%W FPU_DATAOFFS=%F %I4 
FP Register Stack in Lo-DWORD Pli-DWORD Sign/Exp form: 

R0=%F %F %W R1=%F %F %W 

R2=%F %F %W R3=%F %F %W 

R4=%F %F %W R5=%F %F %W 

R6=%F %F %W R7=%F %F %W 

GS=%W %I2 FS=%W %I2 ES=%W %I2 DS=%W %I2 

EDI=%F ESI=%F EAX=%F EBX=%F ECX=%F EDX=%F 

EBP=%F EIP=%F CS=%W %I2 EFLAGS=%F ESP=%F SS=%W %I2 

Note: 

This tracepoint is available with OS/2 Warp V3.0 fix pack 40 and OS/2 Warp V4.0 fix pack 10 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 33028 
(0X8104) 


Description 

(OS) UniThunk 32:16 Return 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .UT16_RETURN 

Minor Code 

33028 (0X8104) 

Trace Groups 


UT 



Trace Types 


POST, INT 


Traced Parameters 

Return address = %P %A 

Note: 

This tracepoint is available with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10 or later. 


DOSCALL1 Major Code: 0X0010 Minor Code: 33029 
(0X8105) 


Description 

(OS) UniThunk 16:32 Return 

Tracepoint 

Public symbol defined dynamic tracepoint: DOSCALL1 .UT32_RETURN 

Minor Code 

33029 (0X8105) 

Trace Groups 

UT 

Trace Types 

POST, INT 

Traced Parameters 


Return address = %P %F 

Note: 

This tracepoint is available with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 10 or later. 


Kernel API Tracepoints Indirected Via DOSCALL1 


The following table lists pre-invocation tracepoints for Kernel APIs that are indirected via DOSCALL1 . These should be trace in conjunction 
with their corresponding Kernel pre-invocation tracepoint. 


DOSCALLl API 

Minor 

code 

Group 

Types 

DOS32WAITCHILD 

262 

TK 

PRE, API 

DOS32BEEP 

263 

IO 

PRE, API 

DOS32PHYSICALDISK 

264 

FS 

PRE, API 

DOS32SETCP 

265 

TK 

PRE, API 

DOS32SETPROCESSCP 

266 

TK 

PRE, API 

DOS32SLEEP 

267 

TK 

PRE, API 



DOS32DEVCONFIG 

DOS32GETDATETIME 

DOS32 SETDATETIME 

DOS32EXECPGM 

DOS32ENTERCRITSEC 

DOS32EXITCRITSEC 

DOS32EXIT 

DOS32KILLPROCESS 

DOS32SETPRIORITY 

DOS32RESUMETHREAD 

DOS32SUSPENDTHREAD 

DOS32CREATEPIPE 

DOS32CALLNPIPE 

DOS32CONNECTNPIPE 

DOS32DISCONNECTNPIPE 

DOS32CREATENPIPE 

DOS32PEEKNPIPE 

DOS32QUERYNPHSTATE 

DOS 3 2 RAWREADNP I PE 

DOS32RAWWRITENPIPE 

DOS32QUERYNPIPEINFO 

DOS32QUERYNPIPESEMSTATE 

DOS32SETNPHSTATE 

DOS32SETNPIPESEM 

DOS32TRANSACTNPIPE 

DOS32WAITNPIPE 

DOS32RESETBUFFER 

DOS32SETCURRENTDIR 

DOS32SETFILEPTR 

DOS32PROTECTSETFILEPTR 

DOS32CLOSE 

DOS32PROTECTCLOSE 

DOS32COPY 

DOS32DELETE 

DOS32FORCEDELETE 

DOS32DEVIOCTL 

DOS 3 2 DUP HANDLE 

DOS32EDITNAME 


268 

FS 

PRE, API 

269 

FS 

PRE, API 

270 

TIM 

PRE, API 

271 

TIM 

PRE, API 

272 

TK 

PRE, API 

273 

TK 

PRE, API 

274 

TK 

PRE, API 

275 

TK 

PRE, API 

276 

TK 

PRE, API 

277 

TK 

PRE, API 

278 

TK 

PRE, API 

279 

PIP 

PRE, API 

287 

PIP 

PRE, API 

288 

PIP 

PRE, API 

289 

PIP 

PRE, API 

290 

PIP 

PRE, API 

291 

PIP 

PRE, API 

292 

PIP 

PRE, API 

293 

PIP 

PRE, API 

294 

PIP 

PRE, API 

295 

PIP 

PRE, API 

296 

PIP 

PRE, API 

297 

PIP 

PRE, API 

298 

PIP 

PRE, API 

299 

PIP 

PRE, API 

300 

PIP 

PRE, API 

301 

FS 

PRE, API 

302 

FS 

PRE, API 

303 

FS 

PRE, API 

304 

FS 

PRE, API 

305 

FS 

PRE, API 

306 

FS 

PRE, API 

307 

FS 

PRE, API 

308 

FS 

PRE, API 

309 

FS 

PRE, API 

310 

FS 

PRE, API 

311 

FS 

PRE, API 

312 

FS 

PRE, API 

313 

FS 

PRE, API 


DOS32FINDCLOSE 



DOS32FSATTACH 


DOS32FSCTL 

DOS32MOVE 

DOS32SETFILESIZE 

DOS32PROTECTSETFILESIZE 

DOS32QUERYCURRENTDIR 

DOS32QUERYCURRENTDISK 

DOS32QUERYFHSTATE 

DOS32PROTECTQUERYFHSTATE 

DOS32PQUERYFSATTACH 

DOS32QUERYFSINFO 

DOS32QUERYHTYPE 

DOS 3 2 QUERY VERIFY 

DOS32DELETEDIR 

DOS32SEARCHPATH 

DOS32SETDEFAULTDISK 

DOS32SETFHSTATE 

DOS32PROTECTSETFHSTATE 

DOS32SETFSINFO 

DOS32SETMAXFH 

DOS32SETRELMAXFH 

DOS32SETVERIFY 

DOS32ERRCLASS 

DOS32ERROR 

DOS32LOADMODULE 

DOS32FREEMODULE 

DOS32QUERYMODULEHANDLE 

DOS 3 2 QUERYMODULENAME 

DOS 3 2 QUERY APP TYPE 

DOS32PFINDNEXT 

DOS 3 2 SHUTDOWN 

D0S320PENCHANGEN0TIFY 

DOS32RESETCHANGENOTIFY 

DOS32CLOSECHANGENOTIFY 

DOS32CREATESP INLOCK 

DOS32ACQUIRESP INLOCK 

DOS32RELEASESP INLOCK 

DOS32FREESP INLOCK 


314 

FS 

PRE, API 

315 

FS 

PRE, API 

316 

FS 

PRE, API 

317 

FS 

PRE, API 

318 

FS 

PRE, API 

319 

FS 

PRE, API 

320 

FS 

PRE, API 

321 

FS 

PRE, API 

322 

FS 

PRE, API 

323 

FS 

PRE, API 

324 

FS 

PRE, API 

325 

FS 

PRE, API 

326 

FS 

PRE, API 

327 

FS 

PRE, API 

328 

FS 

PRE, API 

329 

FS 

PRE, API 

330 

FS 

PRE, API 

331 

FS 

PRE, API 

332 

FS 

PRE, API 

333 

FS 

PRE, API 

334 

FS 

PRE, API 

335 

FS 

PRE, API 

336 

FS 

PRE, API 

337 

TK 

PRE, API 

338 

LDR 

PRE, API 

339 

LDR 

PRE, API 

340 

LDR 

PRE, API 

341 

LDR 

PRE, API 

342 

LDR 

PRE, API 

343 

FS 

PRE, API 

344 

FS 

PRE, API 

345 

FS 

PRE, API 

346 

FS 

PRE, API 

347 

FS 

PRE, API 

348 

LOCK 

PRE, API 

349 

LOCK 

PRE, API 

350 

LOCK 

PRE, API 

351 

LOCK 

PRE, API 



QUECALLS API Tracepoints Indirected Via DOSCALL1 


The following table lists pre-invocation tracepoints for QUECALLS.DLL APIs that are indirected via DOSCALL1 . These should be trace in 
conjunction with their corresponding QUECALLS pre-invocation tracepoint. 


DOSCSALL1 API 

Minor 

code 

Group 

Types 

DOS32CREATEQUEUE 

280 

QUE 

PRE, API 

DOS 3 2 OP ENQUEUE 

281 

QUE 

PRE, API 

DOS32CLOSEQUEUE 

282 

QUE 

PRE, API 

DOS32PEEKQUEUE 

283 

QUE 

PRE, API 

DOS32PURGEQUEUE 

284 

QUE 

PRE, API 

DOS32QUERYQUEUE 

285 

QUE 

PRE, API 

DOS32WRITEQUEUE 

286 

QUE 

PRE, API 

DOS32READQUEUE 

352 

QUE 

PRE, API 

DOS 1 6 CREATE QUEUE 

353 

QUE 

PRE, API 

DOS 16 OP ENQUEUE 

354 

QUE 

PRE, API 

DOS16CLOSEQUEUE 

355 

QUE 

PRE, API 

DOS16PEEKQUEUE 

356 

QUE 

PRE, API 

DOS16PURGEQUEUE 

357 

QUE 

PRE, API 

DOS16QUERYQUEUE 

358 

QUE 

PRE, API 

DOS16WRITEQUEUE 

359 

QUE 

PRE, API 

DOS 1 6READQUEUE 

360 

QUE 

PRE, API 


MONCALLS.DLL Trace Events 


The tracepoints for the MONCALLS.DLL services major code are identified in the following tables. These tracepoints are dynamic 
tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for MONCALLS Major Code: 0X0010, sorted by minor code. 
Trace events for MONCALLS Major Code: 0X0010 .sorted by tracepoint. 


Trace Events for MONCALLS Major Code: 0X0010, Sorted by 


Minor Code 


00513 (0X0201) (OS) DosMonClose Prejnvocation 

00514 (0X0202) (OS) DosMonOpen Pre_lnvocation 

00515 (0X0203) (OS) DosMonRead Pre_lnvocation 

00516 (0X0204) (OS) DosMonReg Prejnvocation 

00517 (0X0205) (OS) DosMonWrite Pre_lnvocation 

33281 (0X8201) (OS) DosMonClose Postjnvocation 

33282 (0X8202) (OS) DosMonOpen Postjnvocation 

33283 (0X8203) (OS) DosMonRead Postjnvocation 

33284 (0X8204) (OS) DosMonReg Postjnvocation 

33285 (0X8205) (OS) DosMonWrite Postjnvocation 


Trace Events for MONCALLS Major Code: 0X0010, Sorted by 
Tracepoint 


(OS) DosMonClose Postjnvocation 33281 (0X8201) 
(OS) DosMonClose Prejnvocation 00513 (0X0201) 
(OS) DosMonOpen Postjnvocation 33282 (0X8202) 
(OS) DosMonOpen Prejnvocation 00514 (0X0202) 
(OS) DosMonRead Postjnvocation 33283 (0X8203) 
(OS) DosMonRead Prejnvocation 00515 (0X0203) 
(OS) DosMonReg Postjnvocation 33284 (0X8204) 
(OS) DosMonReg Prejnvocation 00516 (0X0204) 
(OS) DosMonWrite Postjnvocation 33285 (0X8205) 
(OS) DosMonWrite Prejnvocation 00517 (0X0205) 


MONCALLS Major Code: 0X0010 Minor Code: 513 (0X0201) 


DescriDtion 

(OS) DosMonClose Prejnvocation 

TraceDoint 

Source line defined dynamic tracepoint: @moncalls.c in MONCALLS. 

Minor Code 

513 (0X0201) 

Trace GrouDS 

TSK 

Trace TvDes 

PRE 

Traced Parameters 



Handle = %w 


MONCALLS Major Code: 0X0010 Minor Code: 514 (0X0202) 


Description 


(OS) DosMonOpen Prejnvocation 


Tracepoint 

Source line defined dynamic tracepoint: @moncalls.c in MONCALLS. 

Minor Code 

514(0X0202) 

Trace Groups 

TSK 


Trace Types 

PRE 

Traced Parameters 


Device name: %s 


MONCALLS Major Code: 0X0010 Minor Code: 515 (0X0203) 


Description 

(OS) DosMonRead Prejnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @monio.c in MONCALLS. 

Minor Code 

515 (0X0203) 

Trace Groups 

TSK 


Trace Types 

PRE 

Traced Parameters 


Input buffer address = %a Wait flag = %w 
Data buffer address = %a Byte count = %w 


MONCALLS Major Code: 0X0010 Minor Code: 516 (0X0204) 


Description 

(OS) DosMonReg Prejnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @moncalls.c in MONCALLS. 

Minor Code 


516 (0X0204) 



Trace Groups 


TSK 


Trace Types 


PRE 


Traced Parameters 


Handle = %w 

Input buffer address = %a Output buffer address = %a 

Position flag = %w Index = %w 

Input buffer length = %w Output buffer length = %w 


MONCALLS Major Code: 0X0010 Minor Code: 517 (0X0205) 


Description 

(OS) DosMonWrite Prejnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @monio.c in MONCALLS. 

Minor Code 

517(0X0205) 

Trace Groups 

TSK 


Trace Types 

PRE 

Traced Parameters 


Output buffer address = %a Data buffer address = %a 
Byte count = %w Data = %r %b 


MONCALLS Major Code: 0X0010 Minor Code: 33281 
(0X8201) 

Description 

(OS) DosMonClose Postjnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @moncalls.c in MONCALLS. 

Minor Code 

33281 (0X8201) 

Trace Groups 

TSK 


Trace Types 



POST 


Traced Parameters 

Return code = %w 


MONCALLS Major Code: 0X0010 Minor Code: 33282 
(0X8202) 

Description 

(OS) DosMonOpen Postjnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @moncalls.c in MONCALLS. 

Minor Code 

33282 (0X8202) 

Trace Groups 

TSK 


Trace Types 

API 

Traced Parameters 


Return code = %w New handle = %w 


MONCALLS Major Code: 0X0010 Minor Code: 33283 
(0X8203) 

Description 

(OS) DosMonRead Postjnvocation 

Tracepoint 

Source line defined dynamic tracepoint: @monio.c in MONCALLS. 

Minor Code 

33283 (0X8203) 

Trace Groups 

TSK 


Trace Types 

POST 

Traced Parameters 


Return code = %w Byte count = %w Data = %r %b 



MONCALLS Major Code: 0X0010 Minor Code: 33284 
(0X8204) 

(OS) DosMonReg Postjnvocation 

Source line defined dynamic tracepoint: <3>moncalls.c in MONCALLS. 

33284 (0X8204) 

TSK 
POST 

Return code = %w 

Input buffer length = %w Device driver length = %w 
Output buffer length = %w Device driver length = %w 


MONCALLS Major Code: 0X0010 Minor Code: 33285 
(0X8205) 

(OS) DosMonWrite Postjnvocation 

Source line defined dynamic tracepoint: (cpmonio.c in MONCALLS. 

33285 (0X8205) 

TSK 
POST 

Return code = %w 


OS2CHAR.DLL Trace Events 

The tracepoints for the OS2CHAR.DLL major code are identified in the following tables. These tracepoints are dynamic tracepoints. 





Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for OS2CHAR Major Code: 0X0018, sorted by minor code. 

Trace events for OS2CHAR Major Code: 0X0018 .sorted by tracepoint. 


Trace Events for OS2CHAR Major Code: 0X0018, Sorted by 
Minor Code 

00001 (0X0001) (OS) VioAssociate Pre-Invocation 

00002 (0X0002) (OS) VioCreateLogFont Pre-Invocation 

00003 (0X0003) (OS) VioCreatePS Pre-Invocation 

00004 (0X0004) (OS) VioDeleteSetID Pre-Invocation 

00005 (0X0005) (OS) VioDeRegister Pre-Invocation 

00006 (0X0006) (OS) VioDestroyPS Pre-Invocation 

00007 (0X0007) (OS) VioEndPopUp Pre-Invocation 

00008 (0X0008) (OS) VioGetAnsi Pre-Invocation 

00009 (0X0009) (OS) VioGetBuf Pre-Invocation 

00010 (0X000A) (OS) VioGetConfig Pre-Invocation 

0001 1 (0X000B) (OS) VioGetCp Pre-Invocation 

00012 (0X000C) (OS) VioGetCurPos Pre-Invocation 

00013 (0X000D) (OS) VioGetCurType Pre-Invocation 

00014 (0X000E) (OS) VioGetDeviceCellSize Pre-Invocation 

00015 (0X000F) (OS) VioGetFont Pre-Invocation 

00016 (0X0010) (OS) VioGetMode Pre-Invocation 

00017 (0X0011) (OS) VioGetOrg Pre-Invocation 

00018 (0X0012) (OS) VioGetPhysBuf Pre-Invocation 

00019 (0X0013) (OS) VioGetPSAddress Pre-Invocation 

00020 (0X0014) (OS) VioGetState Pre-Invocation 

00021 (0X0015) (OS) VioGlobalReg Pre-Invocation 

00022 (0X0016) (OS) VioModellndo Pre-Invocation 

00023 (0X0017) (OS) VioModeWait Pre-Invocation 

00024 (0X0018) (OS) VioPopUp Pre-Invocation 

00025 (0X0019) (OS) VioPrtSc Pre-Invocation 

00026 (0X001 A) (OS) VioPrtScToggle Pre-Invocation 

00027 (0X001 B) (OS) VioQueryConsole Pre-Invocation 

00028 (0X001 C) (OS) VioQueryFonts Pre-Invocation 

00029 (0X001 D) (OS) VioQuerySetIDs Pre-Invocation 

00030 (0X001 E) (OS) VioReadCellStr Pre-Invocation 

00031 (0X001 F) (OS) VioReadCharStr Pre-Invocation 

00032 (0X0020) (OS) VioRegister Pre-Invocation 

00033 (0X0021) (OS) VioSavRedrawlIndo Pre-Invocation 

00034 (0X0022) (OS) VioSavRedrawWait Pre-Invocation 

00035 (0X0023) (OS) VioScrLock Pre-Invocation 

00036 (0X0024) (OS) VioScrollDn Pre-Invocation 

00037 (0X0025) (OS) VioScrolILf Pre-Invocation 

00038 (0X0026) (OS) VioScrolIRt Pre-Invocation 

00039 (0X0027) (OS) VioScrollUp Pre-Invocation 

00040 (0X0028) (OS) VioScrllnLock Pre-Invocation 

00041 (0X0029) (OS) VioSetAnsi Pre-Invocation 

00042 (0X002A) (OS) VioSetCp Pre-Invocation 

00043 (0X002B) (OS) VioSetCurPos Pre-Invocation 

00044 (0X002C) (OS) VioSetCurType Pre-Invocation 

00045 (0X002D) (OS) VioSetDeviceCellSize Pre-Invocation 

00046 (0X002E) (OS) VioSetFont Pre-Invocation 

00047 (0X002F) (OS) VioSetMode Pre-Invocation 

00048 (0X0030) (OS) VioSetOrg Pre-Invocation 

00049 (0X0031) (OS) VioSetState Pre-Invocation 

00050 (0X0032) (OS) VioShieldl nit Pre-Invocation 

00051 (0X0033) (OS) VioShieldTerm Pre-Invocation 

00052 (0X0034) (OS) VioShowBuf Pre-Invocation 


00053 (0X0035) (OS) VioShowPS Pre-Invocation 

00054 (0X0036) (OS) VioWrtCellStr Pre-Invocation 

00055 (0X0037) (OS) VioWrtCharStr Pre-Invocation 

00056 (0X0038) (OS) VioWrtCharStrAtt Pre-Invocation 

00057 (0X0039) (OS) VioWrtNAttr Pre-Invocation 

00058 (0X003A) (OS) VioWrtNCell Pre-Invocation 

00059 (0X003B) (OS) VioWrtNChar Pre-Invocation 

00060 (0X003C) (OS) VioWrtTTY Pre-Invocation 

00257 (0X0101) KbdCharln Pre-Invocation 

00258 (0X0102) KbdClose Pre-Invocation 

00259 (0X0103) KbdGetHWID Pre-Invocation 

00260 (0X0104) KbdDeRegister Pre-Invocation 

00261 (0X0105) KbdFlushBuffer Pre-Invocation 

00262 (0X0106) KbdFreeFocus Pre-Invocation 

00263 (0X0107) KbdGetCP Pre-Invocation 

00264 (0X0108) KbdGetFocus Pre-Invocation 

00265 (0X0109) KbdGetStatus Pre-Invocation 

00266 (0X01 0A) KbdOpen Pre-Invocation 

00267 (0X01 0B) KbdPeek Pre-Invocation 

00268 (0X01 0C) KbdFtegister Pre-Invocation 

00269 (0X01 0D) KbdSetCP Pre-Invocation 

00270 (0X01 0E) KbdSetCustXT Pre-Invocation 

00271 (0X01 OF) KbdSetFgnd Pre-Invocation 

00272 (0X0110) KbdSetStatus Pre-Invocation 

00273 (0X0111) KbdShelllnit Pre-Invocation 

00274 (0X0112) KbdStringln Pre-Invocation 

00275 (0X0113) KbdSynch Pre-Invocation 

00276 (0X0114) KbdXIate Pre-Invocation 

00513 (0X0201) (MOU) MouClose Pre-Invocation 

00514 (0X0202) (MOU) MouDeRegister Pre-Invocation 

00515 (0X0203) (MOU) MouDrawPtr Pre-Invocation 

00516 (0X0204) (MOU) MouFlushQue Pre-Invocation 

00517 (0X0205) (MOU) MouGetDevStatus Pre-Invocation 

00518 (0X0206) (MOU) MouGetEventMask Pre-Invocation 

00519 (0X0207) (MOU) MouGetNumButtons Pre-Invocation 

00520 (0X0208) (MOU) MouGetNumMickeys Pre-Invocation 

00521 (0X0209) (MOU) MouGetNumQueEl Pre-Invocation 

00522 (0X020A) (MOU) MouGetPtrPos Pre-Invocation 

00523 (0X020B) (MOU) MouGetPtrShape Pre-Invocation 

00524 (0X020C) (MOU) MouGetScaleFact Pre-Invocation 

00525 (0X020D) (MOU) MouGetThreshold Pre-Invocation 

00526 (0X020E) (MOU) MoulnitReal Pre-Invocation 

00527 (0X020F) (MOU) MouOpen Pre-Invocation 

00528 (0X0210) (MOU) MouReadEventQue Pre-Invocation 

00529 (0X0211) (MOU) MouRegister Pre-Invocation 

00530 (0X0212) (MOU) MouRemovePtr Pre-Invocation 

00531 (0X0213) (MOU) MouSetDevStatus Pre-Invocation 

00532 (0X0214) (MOU) MouSetEventMask Pre-Invocation 

00533 (0X0215) (MOU) MouSetPtrPos Pre-Invocation 

00534 (0X0216) (MOU) MouSetPtrShape Pre-Invocation 

00535 (0X0217) (MOU) MouSetScaleFact Pre-Invocation 

00536 (0X0218) (MOU) MouSetThreshold Pre-Invocation 

00537 (0X0219) (MOU) MouShelllnit Pre-Invocation 

00538 (0X021 A) (MOU) MouSynch Pre-Invocation 

32769 (0X8001) (OS) VioAssociate Post-Invocation 

32770 (0X8002) (OS) VioCreateLogFont Post-Invocation 

32771 (0X8003) (OS) VioCreatePS Post-Invocation 

32772 (0X8004) (OS) VioDeleteSetID Post-Invocation 

32773 (0X8005) (OS) VioDeRegister Post-Invocation 

32774 (0X8006) (OS) VioDestroyPS Post-Invocation 

32775 (0X8007) (OS) VioEndPopUp Post-Invocation 

32776 (0X8008) (OS) VioGetAnsi Post-Invocation 

32777 (0X8009) (OS) VioGetBuf Post-Invocation 

32778 (0X800A) (OS) VioGetConfig Post-Invocation 

32779 (0X800B) (OS) VioGetCp Post-Invocation 

32780 (0X800C) (OS) VioGetCurPos Post-Invocation 

32781 (0X800D) (OS) VioGetCurType Post-Invocation 

32782 (0X800E) (OS) VioGetDeviceCellSize Post-Invocation 

32783 (0X800F) (OS) VioGetFont Post-Invocation 

32784 (0X8010) (OS) VioGetMode Post-Invocation 

32785 (0X8011) (OS) VioGetOrg Post-Invocation 

32786 (0X8012) (OS) VioGetPhysBuf Post-Invocation 

32787 (0X8013) (OS) VioGetPSAddress Post-Invocation 


32788 (0X8014) (OS) VioGetState Post-Invocation 

32789 (0X8015) (OS) VioGlobalReg Post-Invocation 

32790 (0X8016) (OS) VioModeUndo Post-Invocation 

32791 (0X8017) (OS) VioModeWait Post-Invocation 

32792 (0X8018) (OS) VioPopUp Post-Invocation 

32793 (0X8019) (OS) VioPrtSc Post-Invocation 

32794 (0X801 A) (OS) VioPrtScToggle Post-Invocation 

32795 (0X801 B) (OS) VioQueryConsole Post-Invocation 

32796 (0X801 C) (OS) VioQueryFonts Post-Invocation 

32797 (0X801 D) (OS) VioQuerySetIDs Post-Invocation 

32798 (0X801 E) (OS) VioReadCeilStr Post-Invocation 

32799 (0X801 F) (OS) VioReadCharStr Post-Invocation 

32800 (0X8020) (OS) VioRegister Post-Invocation 

32801 (0X8021) (OS) VioSavRedrawlIndo Post-Invocation 

32802 (0X8022) (OS) VioSavRedrawWait Post-Invocation 

32803 (0X8023) (OS) VioScrLock Post-Invocation 

32804 (0X8024) (OS) VioScrollDn Post-Invocation 

32805 (0X8025) (OS) VioScrolILf Post-Invocation 

32806 (0X8026) (OS) VioScroliRt Post- Invocation 

32807 (0X8027) (OS) VioScrollUp Post-Invocation 

32808 (0X8028) (OS) VioScrllnLock Post-Invocation 

32809 (0X8029) (OS) VioSetAnsi Post-Invocation 

32810 (0X802A) (OS) VioSetCp Post-Invocation 

3281 1 (0X802B) (OS) VioSetCurPos Post-Invocation 

32812 (0X802C) (OS) VioSetCurType Post-Invocation 

32813 (0X802D) (OS) VioSetDeviceCellSize Post-Invocation 

32814 (0X802E) (OS) VioSetFont Post-Invocation 

32815 (0X802F) (OS) VioSetMode Post-Invocation 

32816 (0X8030) (OS) VioSetOrg Post-Invocation 

32817 (0X8031) (OS) VioSetState Post-Invocation 

32818 (0X8032) (OS) VioShieldlnit Post-Invocation 

32819 (0X8033) (OS) VioShieldTerm Post-Invocation 

32820 (0X8034) (OS) VioShowBuf Post-Invocation 

32821 (0X8035) (OS) VioShowPS Post-Invocation 

32822 (0X8036) (OS) VioWrtCellStr Post-Invocation 

32823 (0X8037) (OS) VioWrtCharStr Post- Invocation 

32824 (0X8038) (OS) VioWrtCharStrAtt Post-Invocation 

32825 (0X8039) (OS) VioWrtNAttr Post-Invocation 

32826 (0X803A) (OS) VioWrtNCell Post-Invocation 

32827 (0X803B) (OS) VioWrtNChar Post-Invocation 

32828 (0X803C) (OS) VioWrtTTY Post-Invocation 

33025 (0X8101) KbdCharln Post-Invocation 

33026 (0X8102) KbdClose Post-Invocation 

33027 (0X8103) KbdGetHWID Post-Invocation 

33028 (0X8104) KbdDeRegister Post-Invocation 

33029 (0X8105) KbdFlushBuffer Post-Invocation 

33030 (0X8106) KbdFreeFocus Post-Invocation 

33031 (0X8107) KbdGetCP Post-Invocation 

33032 (0X8108) KbdGetFocus Post-Invocation 

33033 (0X8109) KbdGetStatus Post-Invocation 

33034 (0X81 0A) KbdOpen Post-Invocation 

33035 (0X81 0B) KbdPeek Post-Invocation 

33036 (0X81 0C) KbdRegister Post-Invocation 

33037 (0X81 0D) KbdSetCP Post-Invocation 

33038 (0X81 0E) KbdSetCustXT Post-Invocation 

33039 (0X81 OF) KbdSetFgnd Post-Invocation 

33040 (0X8110) KbdSetStatus Post-Invocation 

33041 (0X8111) KbdShelllnit Post-Invocation 

33042 (0X8112) KbdStringln Post-Invocation 

33043 (0X8113) KbdSynch Post-Invocation 

33044 (0X8114) KbdXIate Post-Invocation 

33281 (0X8201) (MOU) MouClose Post-Invocation 

33282 (0X8202) (MOU) MouDeRegister Post-Invocation 

33283 (0X8203) (MOU) MouDrawPtr Post-Invocation 

33284 (0X8204) (MOU) MouFlushQue Post-Invocation 

33285 (0X8205) (MOU) MouGetDevStatus Post-Invocation 

33286 (0X8206) (MOU) MouGetEventMask Post-Invocation 

33287 (0X8207) (MOU) MouGetNumButtons Post-Invocation 

33288 (0X8208) (MOU) MouGetNumMickeys Post-Invocation 

33289 (0X8209) (MOU) MouGetNumQueEl Post-Invocation 

33290 (0X820A) (MOU) MouGetPtrPos Post-Invocation 

33291 (0X820B) (MOU) MouGetPtrShape Post- Invocation 

33292 (0X820C) (MOU) MouGetScaleFact Post-Invocation 


33293 (0X820D) (MOU) MouGetThreshold Post-Invocation 

33294 (0X820E) (MOU) MoulnitReal Post-Invocation 

33295 (0X820F) (MOU) MouOpen Post-Invocation 

33296 (0X8210) (MOU) MouReadEventQue Post-Invocation 

33297 (0X8211) (MOU) MouRegister Post-Invocation 

33298 (0X8212) (MOU) MouRemovePtr Post-Invocation 

33299 (0X8213) (MOU) MouSetDevStatus Post-Invocation 

33300 (0X8214) (MOU) MouSetEventMask Post-Invocation 

33301 (0X8215) (MOU) MouSetPtrPos Post-Invocation 

33302 (0X8216) (MOU) MouSetPtrShape Post-Invocation 

33303 (0X8217) (MOU) MouSetScaleFact Post-Invocation 

33304 (0X8218) (MOU) MouSetThreshold Post-Invocation 

33305 (0X8219) (MOU) MouShelllnit Post-Invocation 

33306 (0X821 A) (MOU) MouSynch Post-Invocation 


Trace Events for OS2CHAR Major Code: 0X0018, Sorted by 
Tracepoint 


KBDCHARIN 00257 (0X0101) 
KBDCHARIN 33025 (0X8101) 
KBDCLOSE 00258 (0X0102) 
KBDCLOSE 33026 (0X8102) 
KBDDEREGISTER 00260 (0X0104) 
KBDDEREGISTER 33028 (0X8104) 
KBDFLUSHBUFFER 00261 (0X0105) 
KBDFLUSHBUFFER 33029 (0X8105) 
KBDFREEFOCUS 00262 (0X0106) 
KBDFREEFOCUS 33030 (0X8106) 
KBDGETCP 00263 (0X0107) 
KBDGETCP 33031 (0X8107) 
KBDGETFOCUS 00264 (0X0108) 
KBDGETFOCUS 33032 (0X8108) 
KBDGETHWID 00259 (0X0103) 
KBDGETHWID 33027 (0X8103) 
KBDGETSTATUS 00265 (0X0109) 
KBDGETSTATUS 33033 (0X8109) 
KBDOPEN 00266 (0X01 0A) 
KBDOPEN 33034 (0X81 0A) 
KBDPEEK 00267 (0X01 0B) 
KBDPEEK 33035 (0X81 0B) 
KBDREGISTER 00268 (0X01 0C) 
KBDREGISTER 33036 (0X81 0C) 
KBDSETCP 00269 (0X01 0D) 
KBDSETCP 33037 (0X81 0D) 
KBDSETCUSTXT 00270 (0X01 0E) 
KBDSETCUSTXT 33038 (0X81 0E) 
KBDSETFGND 00271 (0X01 OF) 
KBDSETFGND 33039 (0X81 OF) 
KBDSETSTATUS 00272 (0X0110) 
KBDSETSTATUS 33040 (0X8110) 
KBDSHELLINIT 00273 (0X01 11) 
KBDSHELLINIT 33041 (0X8111) 
KBDSTRINGIN 00274 (0X0112) 
KBDSTRINGIN 33042 (0X8112) 
KBDSYNCH 00275 (0X0113) 
KBDSYNCH 33043 (0X8113) 
KBDXLATE 00276 (0X0114) 
KBDXLATE 33044 (0X8114) 
MOUCLOSE 00513 (0X0201) 
MOUCLOSE 33281 (0X8201) 
MOUDEREGISTER 00514 (0X0202) 
MOUDEREGISTER 33282 (0X8202) 
MOUDRAWPTR 00515 (0X0203) 
MOUDRAWPTR 33283 (0X8203) 


MOUFLUSHQUE 00516 (0X0204) 
MOUFLUSHQUE 33284 (0X8204) 
MOUGETDEVSTATUS 00517 (0X0205) 
MOUGETDEVSTATUS 33285 (0X8205) 
MOUGETEVENTMASK 00518 (0X0206) 
MOUGETEVENTMASK 33286 (0X8206) 
MOUGETNUMBUTTONS 00519 (0X0207) 
MOUGETNUMBUTTONS 33287 (0X8207) 
MOUGETNUMMICKEYS 00520 (0X0208) 
MOUGETNUMMICKEYS 33288 (0X8208) 
MOUGETNUMQUEEL 00521 (0X0209) 
MOUGETNUMQUEEL 33289 (0X8209) 
MOUGETPTRPOS 00522 (OX020A) 
MOUGETPTRPOS 33290 (0X820A) 
MOUGETPTRSHAPE 00523 (0X020B) 
MOUGETPTRSHAPE 33291 (0X820B) 
MOUGETSCALEFACT 00524 (0X020C) 
MOUGETSCALEFACT 33292 (0X820C) 
MOUGETTHRESHOLD 00525 (0X020D) 
MOUGETTHRESHOLD 33293 (0X820D) 
MOUINITREAL 00526 (0X020E) 

MOUINITREAL 33294 (0X820E) 

MOUOPEN 00527 (0X020F) 

MOUOPEN 33295 (0X820F) 
MOUREADEVENTQUE 00528 (0X0210) 
MOUREADEVENTQUE 33296 (0X8210) 
MOUREGISTER 00529 (0X0211) 

MOUREGISTER 33297 (0X8211) 
MOUREMOVEPTR 00530 (0X0212) 
MOUREMOVEPTR 33298 (0X8212) 
MOUSETDEVSTATUS 00531 (0X0213) 
MOUSETDEVSTATUS 33299 (0X8213) 
MOUSETEVENTMASK 00532 (0X0214) 
MOUSETEVENTMASK 33300 (0X8214) 
MOUSETPTRPOS 00533 (0X0215) 
MOUSETPTRPOS 33301 (0X8215) 
MOUSETPTRSHAPE 00534 (0X0216) 
MOUSETPTRSHAPE 33302 (0X8216) 
MOUSETSCALEFACT 00535 (0X0217) 
MOUSETSCALEFACT 33303 (0X8217) 
MOUSETTHRESHOLD 00536 (0X0218) 
MOUSETTHRESHOLD 33304 (0X8218) 
MOUSHELLINIT 00537 (0X021 9) 

MOUSHELLINIT 33305 (0X821 9) 

MOUSYNCH 00538 (0X021 A) 

MOUSYNCH 33306 (0X821 A) 

VIOASSOCIATE 00001 (0X0001) 
VIOASSOCIATE_POSTDT 32769 (0X8001 ) 
VIOCREATELOGFONT 00002 (0X0002) 
VIOCREATELOGFONT_POSTDT 32770 (0X8002) 
VIOCREATEPS 00003 (0X0003) 
VIOCREATEPS_POSTDT 32771 (0X8003) 
VIODELETESETID 00004 (0X0004) 
VIODELETESETID_POSTDT 32772 (0X8004) 
VIODEREGISTER 00005 (0X0005) 
VIODEREGISTER_POSTDT 32773 (0X8005) 
VIODESTROYPS 00006 (0X0006) 
VIODESTROYPS_POSTDT 32774 (0X8006) 
VIOENDPOPUP 00007 (0X0007) 
VIOENDPOPUP_POSTDT 32775 (0X8007) 
VIOGETANSI 00008 (0X0008) 
VIOGETANSI_POSTDT 32776 (0X8008) 
VIOGETBUF 00009 (0X0009) 
VIOGETBUF_POSTDT 32777 (0X8009) 
VIOGETCONFIG 00010 (0X000A) 
VIOGETCONFIG_POSTDT 32778 (0X800A) 
VIOGETCP 00011 (0X000B) 

VIOGETCP_POSTDT 32779 (0X800B) 
VIOGETCURPOS 00012 (0X000C) 
VIOGETCURPOS_POSTDT 32780 (0X800C) 
VIOGETCURTYPE 00013 (0X000D) 
VIOGETCURTYPE_POSTDT 32781 (0X800D) 
VIOGETDEVICECELLSIZE 00014 (0X000E) 


VIOGETDEVICECELLSIZE_POSTDT 32782 (0X800E) 
VIOGETFONT 0001 5 (0X000F) 
VIOGETFONT_POSTDT 32783 (0X800F) 
VIOGETMODE 00016 (0X0010) 
VIOGETMODE_POSTDT 32784 (0X8010) 
VIOGETORG 00017 (0X0011) 

VIOGETORG_POSTDT 32785 (0X8011) 
VIOGETPHYSBUF 00018 (0X0012) 
VIOGETPHYSBUF_POSTDT 32786 (0X8012) 
VIOGETPSADDRESS 00019 (0X0013) 
VIOGETPSADDRESS_POSTDT 32787 (0X8013) 
VIOGETSTATE 00020 (0X0014) 
VIOGETSTATE_POSTDT 32788 (0X8014) 
VIOGLOBALREG 00021 (0X0015) 
VIOGLOBALREG_POSTDT 32789 (0X8015) 
VIOMODEUNDO 00022 (0X0016) 
VIOMODEUNDO_POSTDT 32790 (0X801 6) 
VIOMODEWAIT 00023 (0X0017) 
VIOMODEWAIT_POSTDT 32791 (0X8017) 

VIOPOPUP 00024 (0X0018) 

VIOPOPUP_POSTDT 32792 (0X8018) 

VIOPRTSC 00025 (0X0019) 

VIOPRTSCTOGGLE 00026 (0X001 A) 
VIOPRTSCTOGGLE_POSTDT 32794 (0X801 A) 
VIOPRTSC_POSTDT 32793 (0X8019) 
VIOQUERYCONSOLE 00027 (0X001 B) 
VIOQUERYCONSOLE_POSTDT 32795 (0X801 B) 
VIOQUERYFONTS 00028 (0X001 C) 
VIOQUERYFONTS_POSTDT 32796 (0X801 C) 
VIOQUERYSETIDS 00029 (0X001 D) 
VIOQUERYSETIDS_POSTDT 32797 (0X801 D) 
VIOREADCELLSTR 00030 (0X001 E) 
VIOREADCELLSTR_POSTDT 32798 (0X801 E) 
VIOREADCHARSTR 00031 (0X001 F) 
VIOREADCHARSTR_POSTDT 32799 (0X801 F) 
VIOREGISTER 00032 (0X0020) 
VIOREGISTER_POSTDT 32800 (0X8020) 
VIOSAVREDRAWUNDO 00033 (0X0021) 
VIOSAVREDRAWUNDO_POSTDT 32801 (0X8021) 
VIOSAVREDRAWWAIT 00034 (0X0022) 
VIOSAVREDRAWWAIT_POSTDT 32802 (0X8022) 
VIOSCRLOCK 00035 (0X0023) 
VIOSCRLOCK_POSTDT 32803 (0X8023) 
VIOSCROLLDN 00036 (0X0024) 
VIOSCROLLDN_POSTDT 32804 (0X8024) 
VIOSCROLLLF 00037 (0X0025) 
VIOSCROLLLF_POSTDT 32805 (0X8025) 
VIOSCROLLRT 00038 (0X0026) 
VIOSCROLLRT_POSTDT 32806 (0X8026) 
VIOSCROLLUP 00039 (0X0027) 
VIOSCROLLUP_POSTDT 32807 (0X8027) 
VIOSCRUNLOCK 00040 (0X0028) 
VIOSCRUNLOCK_POSTDT 32808 (0X8028) 
VIOSETANSI 00041 (0X0029) 

VIOSETANSI_POSTDT 32809 (0X8029) 

VIOSETCP 00042 (0X002A) 

VIOSETCP_POSTDT 32810 (0X802A) 
VIOSETCURPOS 00043 (0X002B) 
VIOSETCURPOS_POSTDT 3281 1 (0X802B) 
VIOSETCURTYPE 00044 (0X002C) 
VIOSETCURTYPE_POSTDT 32812 (0X802C) 
VIOSETDEVICECELLSIZE 00045 (0X002D) 
VIOSETDEVICECELLSIZE_POSTDT 32813 (0X802D) 
VIOSETFONT 00046 (0X002E) 
VIOSETFONT_POSTDT 32814 (0X802E) 
VIOSETMODE 00047 (0X002F) 
VIOSETMODE_POSTDT 32815 (0X802F) 
VIOSETORG 00048 (0X0030) 

VIOSETORG_POSTDT 32816 (0X8030) 
VIOSETSTATE 00049 (0X0031) 
VIOSETSTATE_POSTDT 32817 (0X8031) 
VIOSHIELDINIT 00050 (0X0032) 
VIOSHIELDINIT_POSTDT 32818 (0X8032) 


VIOSHIELDTERM 00051 (0X0033) 
VIOSHIELDTERM_POSTDT 32819 (0X8033) 
VIOSHOWBUF 00052 (0X0034) 
VIOSHOWBUF_POSTDT 32820 (0X8034) 
VIOSHOWPS 00053 (0X0035) 
VIOSHOWPS_POSTDT 32821 (0X8035) 
VIOWRTCELLSTR 00054 (0X0036) 
VIOWRTCELLSTR_POSTDT 32822 (0X8036) 
VIOWRTCHARSTR 00055 (0X0037) 
VIOWRTCHARSTRATT 00056 (0X0038) 
VIOWRTCHARSTRATT_POSTDT 32824 (0X8038) 
VIOWRTCHARSTR_POSTDT 32823 (0X8037) 
VIOWRTNATTR 00057 (0X0039) 
VIOWRTNATTR_POSTDT 32825 (0X8039) 
VIOWRTNCELL 00058 (0X003A) 
VIOWRTNCELL_POSTDT 32826 (0X803A) 
VIOWRTNCHAR 00059 (0X003B) 
VIOWRTNCHAR_POSTDT 32827 (0X803B) 
VIOWRTTTY 00060 (0X003C) 
VIOWRTTTY_POSTDT 32828 (0X803C) 


OS2CHAR Major Code: 0X0018 Minor Code: 1 (0X0001) 


Description 

(OS) VioAssociate Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CFIAR. VIOASSOCIATE 

Minor Code 

1 (0X0001) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Flandle = %w 

Device Context Flandle = %d 


OS2CHAR Major Code: 0X0018 Minor Code: 2 (0X0002) 


Description 

(OS) VioCreateLogFont Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CFIAR. VIOCREATELOGFONT 

Minor Code 

2 (0X0002) 

Trace Groups 

VIO 



PS Handle = %w 

Logical Font Name = %s 
Local Identifier = %d 

FATTRS - usRecordLength = %w 

- fsSelection = %w 

- IMatch = %d 

- szFacename = %s 

- id Registry = %w 

- usCodePage = %w 

- IMaxBaseLineExt = %d 

- lAveCharWidth = %d 

-fsType = %w 

- fsFontUse = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 3 (0X0003) 

(OS) VioCreatePS Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOCREATEPS 
3 (0X0003) 

VIO 
PRE 

Reserved 
Attribute Size 
Format 
Width 
Depth 


= %w 
= %w 
= %w 
= %w 
= %w 



PS Handle 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 4 (0X0004) 


Description 

(OS) VioDeleteSetID Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIODELETESETID 

Minor Code 

4 (0X0004) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Handle = %w 

Local Identifier = %d 


OS2CHAR Major Code: 0X0018 Minor Code: 5 (0X0005) 


Description 

(OS) VioDeRegister Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIODEREGISTER 

Minor Code 

5 (0X0005) 

Trace Groups 

VIO 

Trace Tvpes 

PRE 

Traced Parameters 



None 


OS2CHAR Major Code: 0X0018 Minor Code: 6 (0X0006) 


Description 


(OS) VioDestroyPS Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: OS2CHAR.VIODESTROYPS 


Minor Code 

6 (0X0006) 

Trace Groups 

VIO 


Trace Types 

PRE 


Traced Parameters 


PS Handle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 7 (0X0007) 


Description 

(OS) VioEndPopUp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOENDPOPUP 

Minor Code 

7 (0X0007) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 8 (0X0008) 


Description 

(OS) VioGetAnsi Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETANSI 

Minor Code 

8 (0X0008) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 



Handle 


= %w 


Indicator = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 9 (0X0009) 


Description 

(OS) VioGetBuf Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETBUF 

Minor Code 

9 (0X0009) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

= %w 

Length 

= %w 

LVBptr 

= %d 


OS2CHAR Major Code: 0X0018 Minor Code: 10 (0X000A) 


Description 

(OS) VioGetConfig Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETCONFIG 

Minor Code 

10 (0X0O0A) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Config Data = %r%w 

Reserved = %w 



0S2CHAR Major Code: 0X0018 Minor Code: 1 1 (0X000B) 


Description 

(OS) VioGetCp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETCP 

Minor Code 

11 (OXOOOB) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Code Page Id = %w 

Reserved = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 12 (0X000C) 


Description 

(OS) VioGetCurPos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETCURPOS 

Minor Code 

12 (0X0O0C) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

Column 

Row 


= %w 
= %w 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 13 (0X000D) 



Description 


(OS) VioGetCurType Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETCURTYPE 

Minor Code 

13 (OXOOOD) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Cursor Data = %w%w%w%w 


OS2CHAR Major Code: 0X0018 Minor Code: 14 (0X000E) 


Description 

(OS) VioGetDeviceCellSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETDEVICECELLSIZE 

Minor Code 

14 (OXOOOE) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Handle = %w 

Width = %w 

Height = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 15 (0X000F) 


Description 


(OS) VioGetFont Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETFONT 


Minor Code 


15 (0X0O0F) 



Trace Groups 


VIO 


Trace Types 
Traced Parameters 


PRE 


Handle = %w 

Request Block = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 16 (0X0010) 


Description 

(OS) VioGetMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETMODE 

Minor Code 

16 (0X0010) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Mode Data = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 17 (0X0011) 


Description 

(OS) VioGetOrg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETORG 

Minor Code 

17 (0X0011) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 



PS Handle 


= %w 


0S2CHAR Major Code: 0X0018 Minor Code: 18 (0X0012) 


Description 

(OS) VioGetPhysBuf Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETPHYSBUF 

Minor Code 

18 (0X0012) 

Trace Groups 

VIO 

Trace Tvpes 

PRE 

Traced Parameters 

Reserved = %w 


DisplayBuf = %d%d%w%w 


OS2CHAR Major Code: 0X0018 Minor Code: 19 (0X0013) 


Description 

(OS) VioGetPSAddress Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETPSADDRESS 

Minor Code 

19 (0X0013) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Handle 

= %w 

PS Address 

= %d 

Reserved 

= %d 


OS2CHAR Major Code: 0X0018 Minor Code: 20 (0X0014) 



Description 


(OS) VioGetState Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGETSTATE 

Minor Code 

20 (0X0014) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Request Block = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 21 (0X0015) 


Description 

(OS) VioGlobalReg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOGLOBALREG 

Minor Code 

21 (0X0015) 

Trace Groups 

VIO 

Trace Tvpes 

PRE 

Traced Parameters 

Reserved = %d 


Function Mask 2 = %d 


Function Mask 1 = %d 


Entry Point Name = %s 


Module Name = %s 


OS2CHAR Major Code: 0X0018 Minor Code: 22 (0X0016) 


Description 



(OS) VioModellndo Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOMODEUNDO 

Minor Code 

22 (0X0016) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Reserved = %w 

Kill Indicator = %w 
Owner Indicator = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 23 (0X0017) 


Description 

(OS) VioModeWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOMODEWAIT 

Minor Code 

23 (0X0017) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Reserved = %w 

Notify Type = %w 

Request Type = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 24 (0X0018) 


Description 

(OS) VioPopUp Pre-Invocation 

Tracepoint 
Minor Code 


Public symbol defined dynamic tracepoint: OS2CHAR. VIOPOPUP 



24 (0X0018) 


Trace Groups 

VIO 


Trace Types 

PRE 


Traced Parameters 


Handle = %w 

Options = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 25 (0X0019) 


Description 

(OS) VioPrtSc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOPRTSC 

Minor Code 

25 (0X0019) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 26 (0X001 A) 


Description 

(OS) VioPrtScToggle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOPRTSCTOGGLE 

Minor Code 

26 (0X001 A) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 27 (0X001 B) 


Description 

(OS) VioQueryConsole Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOQUERYCONSOLE 

Minor Code 

27 (0X001 B) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Console Structure = %d 


OS2CHAR Major Code: 0X0018 Minor Code: 28 (0X001 C) 


Description 

(OS) VioQueryFonts Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOQUERYFONTS 

Minor Code 

28 (0X001 C) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Handle = %w 

Options = %d 

Font Face Name = %s 
Fonts Returned = %d 
Metrics Length = %d 


OS2CHAR Major Code: 0X0018 Minor Code: 29 (0X001 D) 



Description 

(OS) VioQuerySetIDs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOQUERYSETIDS 

Minor Code 

29 (0X001 D) 


Trace Groups 

VIO 


Trace Tvpes 

PRE 


Traced Parameters 

PS Handle 

= %w 


Count 

= %d 


Types 

= %d 


Font Names 

= %r%b 


Local Identifiers 

= %d 


0S2CHAR Major Code: 0X0018 Minor Code: 30 (0X001 E) 


Description 

(OS) VioReadCellStr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOREADCELLSTR 

Minor Code 

30 (0X001 E) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

= %w 

Column 

= %w 

Row 

= %w 

Length 

= %w 

CellStr 

= %r%b 


OS2CHAR Major Code: 0X0018 Minor Code: 31 (0X001 F) 



(OS) VioReadCharStr Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOREADCHARSTR 
31 (0X001 F) 

VIO 


Trace TvDes 

PRE 


Traced Parameters 

Handle 

= %w 


Column 

= %w 


Row 

= %w 


Length 

= %w 


CharStr 

= %r%b 


OS2CHAR Major Code: 0X0018 Minor Code: 32 (0X0020) 

(OS) VioRegister Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOREGISTER 
32 (0X0020) 

VIO 
PRE 


Function Mask 2 

= %d 

Function Mask 1 

= %d 

Entry Point Name 

= %s 

Module Name 

= %s 




OS2CHAR Major Code: 0X0018 Minor Code: 33 (0X0021) 



Description 


(OS) VioSavRedrawUndo Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSAVREDRAWUNDO 

Minor Code 

33 (0X0021) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Reserved = %w 

Kill Indicator = %w 
Owner Indicator = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 34 (0X0022) 


Description 

(OS) VioSavRedrawWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSAVREDRAWWAIT 

Minor Code 

34 (0X0022) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Reserved = %w 

Notify Type = %w 

SavRedrawIndic = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 35 (0X0023) 


Description 


(OS) VioScrLock Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCRLOCK 


Minor Code 

35 (0X0023) 


Trace Groups 

VIO 


Trace Tvpes 

PRE 


Traced Parameters 

Handle 

= %w 


Status 

= %b 


Wait Flag 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 36 (0X0024) 


Description 

(OS) VioScrollDn Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSCROLLDN 

Minor Code 

36 (0X0024) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

Cell 

Lines 

RightCol 

BotRow 

LeftCol 

TopRow 


= %w 
= %w 
= %w 
= %w 
= %w 
= %w 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 37 (0X0025) 


Description 



(OS) VioScrolILf Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLLF 

Minor Code 

37 (0X0025) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

Cell 

Lines 

RightCol 

BotRow 

LeftCol 

TopRow 


= %w 
= %w 
= %w 
= %w 
= %w 
= %w 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 38 (0X0026) 


Description 

(OS) VioScrolIRt Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLRT 

Minor Code 

38 (0X0026) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

= %w 

Cell 

= %w 

Lines 

= %w 

RightCol 

= %w 

BotRow 

= %w 

LeftCol 

= %w 


TopRow 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 39 (0X0027) 



(OS) VioScrollUp Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSCROLLUP 
39 (0X0027) 

VIO 

PRE 


Traced Parameters 


Handle 

= %w 

Cell 

= %w 

Lines 

= %w 

RightCol 

= %w 

BotRow 

= %w 

LeftCol 

= %w 

TopRow 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 40 (0X0028) 



(OS) VioScrUnLock Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSCRUNLOCK 
40 (0X0028) 

VIO 

PRE 


Traced Parameters 


Handle 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 41 (0X0029) 


Description 

(OS) VioSetAnsi Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETANSI 

Minor Code 

41 (0X0029) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Indicator = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 42 (0X002A) 


Description 

(OS) VioSetCp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETCP 

Minor Code 

42 (0X0O2A) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Code Page Id = %w 

Reserved = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 43 (0X002B) 


Description 


(OS) VioSetCurPos Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETCURPOS 


Minor Code 

43 (0X002B) 


Trace Groups 

VIO 


Trace Tvpes 

PRE 


Traced Parameters 

Handle 

= %w 


Column 

= %w 


Row 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 44 (0X002C) 


Description 

(OS) VioSetCurType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETCURTYPE 

Minor Code 

44 (0X0O2C) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

CursorData = %w%w%w%w 


OS2CHAR Major Code: 0X0018 Minor Code: 45 (0X002D) 


Description 

(OS) VioSetDeviceCellSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETDEVICECELLSIZE 

Minor Code 

45 (0X002D) 


Trace Groups 



VIO 


Trace Types 


PRE 


Traced Parameters 


PS Handle = %w 

Width = %w 

Height = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 46 (0X002E) 


Description 

(OS) VioSetFont Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETFONT 

Minor Code 

46 (0X0O2E) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle = %w 

Request Block = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 47 (0X002F) 


Description 

(OS) VioSetMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETMODE 

Minor Code 

47 (OX002F) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 



Handle 


= %w 


Mode Data = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 48 (0X0030) 


Description 

(OS) VioSetOrg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETORG 

Minor Code 

48 (0X0030) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


PS Handle = %w 

Column = %w 

Row = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 49 (0X0031) 


Description 

(OS) VioSetState Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSETSTATE 

Minor Code 

49 (0X0031) 

Trace Groups 

VIO 

Trace Tvpes 

PRE 

Traced Parameters 

Handle = %w 


Request Block = %r%w 


OS2CHAR Major Code: 0X0018 Minor Code: 50 (0X0032) 



Description 


(OS) VioShieldlnit Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSHIELDINIT 

Minor Code 

50 (0X0032) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


None 


OS2CHAR Major Code: 0X0018 Minor Code: 51 (0X0033) 


Description 

(OS) VioShieldTerm Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSHIELDTERM 

Minor Code 

51 (0X0033) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


None 


OS2CHAR Major Code: 0X0018 Minor Code: 52 (0X0034) 


Description 

(OS) VioShowBuf Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSHOWBUF 

Minor Code 

52 (0X0034) 

Trace Groups 

VIO 



Trace Types 


PRE 


Traced Parameters 


Handle 

= %w 

Length 

= %w 

Offset 

= %w 


0S2CHAR Major Code: 0X0018 Minor Code: 53 (0X0035) 


Description 

(OS) VioShowPS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOSHOWPS 

Minor Code 

53 (0X0035) 


Trace Groups 

VIO 


Trace Tvpes 

PRE 


Traced Parameters 

PS Handle 

= %w 


Cell Offset 

= %w 


Width 

= %w 


Depth 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 54 (0X0036) 


Description 

(OS) VioWrtCellStr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTCELLSTR 

Minor Code 

54 (0X0036) 

Trace Groups 

VIO 

Trace Types 


PRE 



Traced Parameters 


Handle 

= %w 

Column 

= %w 

Row 

= %w 

Length 

= %w 

Cell String 

= %r%b 


0S2CHAR Major Code: 0X0018 Minor Code: 55 (0X0037) 


Description 

(OS) VioWrtCharStr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTCHARSTR 

Minor Code 

55 (0X0037) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

= %w 

Column 

= %w 

Row 

= %w 

Length 

= %w 

Char String 

= %r%b 


OS2CHAR Major Code: 0X0018 Minor Code: 56 (0X0038) 


Description 

(OS) VioWrtCharStrAtt Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTCHARSTRATT 

Minor Code 

56 (0X0038) 

Trace Groups 

VIO 


Trace Types 



PRE 


Traced Parameters 


Handle 

= %w 

Attr 

= %b 

Column 

= %w 

Row 

= %w 

Length 

= %w 

CharStr 

= %r%b 


0S2CHAR Major Code: 0X0018 Minor Code: 57 (0X0039) 


Description 

(OS) VioWrtNAttr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTNATTR 

Minor Code 

57 (0X0039) 

Trace Groups 

VIO 


Trace Types 

PRE 

Traced Parameters 


Handle 

= %w 

Column 

= %w 

Row 

= %w 

Times 

= %w 

Attr 

= %b 


OS2CHAR Major Code: 0X0018 Minor Code: 58 (0X003A) 


Description 


(OS) VioWrtNCell Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTNCELL 


Minor Code 


58 (0X003A) 



Trace Groups 

VIO 


Trace Tvpes 

PRE 


Traced Parameters 

Handle 

= %w 


Column 

= %w 


Row 

= %w 


Times 

= %w 


Cell 

= %b%b 


0S2CHAR Major Code: 0X0018 Minor Code: 59 (0X003B) 


Description 

(OS) VioWrtNChar Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTNCHAR 

Minor Code 

59 (0X0O3B) 

Trace Groups 

VIO 

Trace Tvpes 

PRE 

Traced Parameters 



Handle 

= %w 

Column 

= %w 

Row 

= %w 

Times 

= %w 

Char 

= %b 


OS2CHAR Major Code: 0X0018 Minor Code: 60 (0X003C) 


Description 


(OS) VioWrtTTY Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: OS2CHAR. VIOWRTTTY 



60 (OX003C) 


Trace GrouDS 

VIO 


Trace TvDes 

PRE 


Traced Parameters 

Handle 

= %w 


Length 

= %w 


CharStr 

= %r%b 


OS2CHAR Major Code: 0X0018 Minor Code: 257 (0X0101) 

KbdCharln Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDCHARIN 
257 (0X0101) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
IOWAIT = %W 
CharDataRec addr. = %A 



OS2CHAR Major Code: 0X0018 Minor Code: 258 (0X0102) 



KbdClose Pre-Invocation 


Public symbol defined dynamic tracepoint: OS2CHAR. KBDCLOSE 



Minor Code 


258 (0X0102) 


Trace Groups 

KBD 

Trace Types 

PRE 

Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 259 (0X0103) 


DescriDtion 

KbdGetHWID Pre-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETHWID 

Minor Code 

259 (0X0103) 

Trace GrouDS 

KBD 

Trace TvDes 

PRE 

Traced Parameters 

Major = %X Minor = %Y 


ProcStatus = %B 


ProcType = %B 


SessionID = %W 


KbdHandle = %W 


HWIDStruc addr. = %A 


HWIDStruc length = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 260 (0X0104) 



Description 


KbdDeRegister Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDDEREGISTER 

Minor Code 

260 (0X0104) 

Trace Groups 

KBD 

Trace Types 

PRE 

Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 261 (0X0105) 


Description 

KbdFlushBuffer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDFLUSHBUFFER 

Minor Code 

261 (0X0105) 

Trace Groups 

KBD 

Trace Types 

PRE 

Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 262 (0X0106) 



KbdFreeFocus Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CFIAR. KBDFREEFOCUS 
262 (0X0106) 

KBD 

PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 263 (0X0107) 

KbdGetCP Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CFIAR. KBDGETCP 
263 (0X0107) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
CodePagelD addr. = %A 




OS2CHAR Major Code: 0X0018 Minor Code: 264 (0X0108) 



Descriotion 

KbdGetFocus Pre-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETFOCUS 

Minor Code 

264 (0X0108) 

Trace GrouDS 

KBD 

Trace TvDes 

PRE 

Traced Parameters 



Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
IOWAIT = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 265 (0X0109) 


Descriotion 

KbdGetStatus Pre-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETSTATUS 

Minor Code 

265 (0X0109) 

Trace GrouDS 

KBD 

Trace TvDes 

PRE 

Traced Parameters 

Major = %X Minor = %Y 


ProcStatus = %B 


ProcType = %B 


SessionID = %W 


KbdHandle = %W 


Status addr. = %A 



0S2CHAR Major Code: 0X0018 Minor Code: 266 (0X01 0A) 


KbdOpen Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDOPEN 
266 (0X01 0A) 

KBD 

PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle addr. = %A 


OS2CHAR Major Code: 0X0018 Minor Code: 267 (0X01 0B) 

KbdPeek Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDPEEK 
267 (0X01 0B) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 




KbdHandle = %W 



CharDataRec addr. = %A 


0S2CHAR Major Code: 0X0018 Minor Code: 268 (0X01 0C) 

KbdRegister Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDREGISTER 
268 (0X01 0C) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
Function Mask = %D 
EntryName addr. = %A 
EntryName = %S 
ModuleName addr. = %A 
ModuleName = %S 


OS2CHAR Major Code: 0X0018 Minor Code: 269 (0X01 0D) 

KbdSetCP Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CFIAR. KBDSETCP 
269 (0X01 0D) 

KBD 




PRE 



Traced Parameters 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
CodePagelD = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 270 (0X01 0E) 

KbdSetCustXT Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETCUSTXT 
270 (0X01 0E) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
XlateTable addr. = %A 


OS2CHAR Major Code: 0X0018 Minor Code: 271 (0X01 OF) 

KbdSetFgnd Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETFGND 
271 (0X01 OF) 





KBD 



Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 272 (0X01 10) 



KbdSetStatus Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETSTATUS 
272 (0X0110) 

KBD 

PRE 


Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
Status addr. = %A 
Status = %W 
%W 
%W 

%w 

%w 


OS2CHAR Major Code: 0X0018 Minor Code: 273 (0X01 11) 



KbdShelllnit Pre-Invocation 




Public symbol defined dynamic tracepoint: OS2CHAR.KBDSHELLINIT 
273 (0X0111) 

KBD 

PRE 


Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 274 (0X01 12) 

KbdStringln Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDSTRINGIN 
274 (0X0112) 

KBD 
PRE 

Major = %X Minor = %Y 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
IOWAIT = %W 

LengthBuffer addr. = %A 



CharBuffer addr. = %A 



CharBuffer length = %W 


0S2CHAR Major Code: 0X0018 Minor Code: 275 (0X01 13) 


Description 

KbdSynch Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSYNCH 

Minor Code 

275 (0X0113) 

Trace Groups 

KBD 

Trace Tvpes 

PRE 

Traced Parameters 

Major = %X Minor = %Y 


ProcStatus = %B 


ProcType = %B 


SessionID = %W 


IOWAIT = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 276 (0X01 14) 


Description 

KbdXIate Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDXLATE 

Minor Code 

276 (0X0114) 

Trace Groups 

KBD 

Trace Types 

PRE 

Traced Parameters 


Major = %X Minor = %Y 
ProcStatus = %B 


ProcType = %B 



SessionID = %W 


KbdHandle = %W 
XlateRecord addr. = %A 
XlateRecord = %B %B %B %B 
%B %B %B %B 
%B %B %B %B 
%B %B %B %B 
%B %B 


OS2CHAR Major Code: 0X0018 Minor Code: 513 (0X0201) 

(MOU) MouClose Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUCLOSE 
513 (0X0201) 

MOU 
PRE 

ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 514 (0X0202) 

(MOU) MouDeRegister Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUDEREGISTER 
514(0X0202) 




MOU 



Trace Types 


PRE 


Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 515 (0X0203) 


Description 

(MOU) MouDrawPtr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUDRAWPTR 

Minor Code 

515 (0X0203) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 516 (0X0204) 


Description 
Tracepoint 
Minor Code 
Trace Groups 
Trace Types 
Traced Parameters 


(MOU) MouFlushQue 
Public symbol defined 
516 (0X0204) 

MOU 

PRE 


Pre-Invocation 

dynamic tracepoint: OS2CHAR. MOUFLUSHQUE 



ProcStatus = %b 


ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 517 (0X0205) 


Description 

(MOU) MouGetDevStatus Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETDEVSTATUS 

Minor Code 

517(0X0205) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
DevStatus addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 518 (0X0206) 


Description 

(MOU) MouGetEventMask Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETEVENTMASK 

Minor Code 

518 (0X0206) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 



ProcStatus = %b 


ProcType = %b 
SessionID = %w 
MouHandle = %w 
EventMask addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 519 (0X0207) 


Description 

(MOU) MouGetNumButtons Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMBUTTONS 

Minor Code 

519 (0X0207) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
NumButtons addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 520 (0X0208) 


Description 

(MOU) MouGetNumMickeys Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMMICKEYS 

Minor Code 

520 (0X0208) 

Trace Groups 

MOU 

Trace Types 


PRE 



Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
NumMickeys addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 521 (0X0209) 


Description 

(MOU) MouGetNumQueEl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMQUEEL 

Minor Code 

521 (0X0209) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
QueDataRec addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 522 (0X020A) 


Description 

(MOU) MouGetPtrPos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETPTRPOS 

Minor Code 

522 (OX020A) 

Trace Groups 


MOU 



Trace Types 


PRE 


Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrPos addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 523 (0X020B) 


Description 

(MOU) MouGetPtrShape Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETPTRSHAPE 

Minor Code 

523 (OX020B) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrDefRec addr. = %a 
PtrBuffer addr. = %a 
PtrBuffer length = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 524 (0X020C) 


Description 


(MOU) MouGetScaleFact Pre-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETSCALEFACT 



Minor Code 


524 (OX020C) 


Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
ScaieStruc addr. = %a 


OS2CHAR Major Code: 0X0018 Minor Code: 525 (0X020D) 


Description 

(MOU) MouGetThreshold Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETTHRESHOLD 

Minor Code 

525 (0X020D) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
ThresholdStruc addr. = %a 
ThresholdStruc Length = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 526 (0X020E) 


Description 


(MOU) MoulnitReal Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR.MOUINITREAL 


Minor Code 

526 (OX020E) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 527 (0X020F) 


Description 

(MOU) MouOpen Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUOPEN 

Minor Code 

527 (OX020F) 

Trace Groups 

MOU 

Trace Tvpes 

PRE 

Traced Parameters 

ProcStatus = %b 


ProcType = %b 


SessionID = %w 


MouHandle addr. = %a 


PtrName addr. = %a 


PtrName = %s 


OS2CHAR Major Code: 0X0018 Minor Code: 528 (0X0210) 


Description 


(MOU) MouReadEventQue Pre-Invocation 



Public symbol defined dynamic tracepoint: OS2CHAR.MOUREADEVENTQUE 
528 (0X0210) 

MOU 

PRE 

ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
EventBuf addr. = %a 
ReadType addr. = %a 
ReadType =%w 


OS2CHAR Major Code: 0X0018 Minor Code: 529 (0X0211) 

(MOU) MouRegister Pre-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUREGISTER 
529 (0X0211) 

MOU 
PRE 

ProcStatus = %b 
ProcType = %b 
SessionID = %w 
Function Mask = %d 
EntryName addr. = %a 
EntryName = %s 
ModuleName addr. = %a 




ModuleName = %s 



0S2CHAR Major Code: 0X0018 Minor Code: 530 (0X0212) 


Description 

(MOU) MouRemovePtr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUREMOVEPTR 

Minor Code 

530 (0X0212) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrRec addr. = %a 
PtrRec.UpLEFTROW = %w 
.UpLEFTCOL = %w 
.LoRIGHTROW = %w 
.LoRIGHTCOL = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 531 (0X0213) 


Description 

(MOU) MouSetDevStatus Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETDEVSTATUS 

Minor Code 

531 (0X0213) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 



ProcStatus = %b 


ProcType = %b 
SessionID = %w 
MouHandle = %w 
DevStatus addr. = %a 
DevStatus = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 532 (0X0214) 


Description 

(MOU) MouSetEventMask Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETEVENTMASK 

Minor Code 

532 (0X0214) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
EventMask addr. = %a 
EventMask = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 533 (0X0215) 


Description 

(MOU) MouSetPtrPos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETPTRPOS 

Minor Code 

533 (0X0215) 

Trace Groups 


MOU 



Trace Types 


PRE 


Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrPos addr. = %a 
PtrPos.ROW = %w 
.COL = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 534 (0X0216) 


Description 

(MOU) MouSetPtrShape Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETPTRSHAPE 

Minor Code 

534 (0X0216) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrBuffer addr. = %a 
PtrDefRec addr. = %a 
PtrDefRec.BUFFERLEN = %w 
.COL = %w 
.ROW = %w 
.COLOFFSET = %w 


.ROWOFFSET = %w 



0S2CHAR Major Code: 0X0018 Minor Code: 535 (0X0217) 


Description 

(MOU) MouSetScaleFact Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETSCALEFACT 

Minor Code 

535 (0X0217) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouFlandle = %w 
Scale Fact addr. = %a 
ScaleFact.ROWSCALE = %w 
.COLSCALE = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 536 (0X0218) 


Description 

(MOU) MouSetThreshold Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CFIAR.MOUSETTFIRESFIOLD 

Minor Code 

536 (0X0218) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 


SessionID = %w 



MouHandle = %w 


ThresholdStruc addr. = %a 
ThresholdStruc. Length = %w 
.Levell = %w 
.Levi Mult = %w 
.Level2 = %w 
.Lev2Mult = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 537 (0X0219) 


Description 

(MOU) MouShelllnit Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.MOUSHELLINIT 

Minor Code 

537 (0X0219) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 


ProcStatus = %b 
ProcType = %b 
SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 538 (0X021 A) 


Description 

(MOU) MouSynch Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSYNCH 

Minor Code 

538 (0X021 A) 

Trace Groups 

MOU 

Trace Types 

PRE 

Traced Parameters 



ProcStatus = %b 


ProcType = %b 
SessionID = %w 
WaitFlags = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32769 (0X8001) 


Description 

(OS) VioAssociate Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOASSOCIATE_POSTDT 

Minor Code 

32769 (0X8001) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32770 (0X8002) 


Description 

(OS) VioCreateLogFont Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOCREATELOGFONT_POSTDT 

Minor Code 

32770 (0X8002) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32771 (0X8003) 



Description 


(OS) VioCreatePS Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOCREATEPS_POSTDT 

Minor Code 

32771 (0X8003) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


PS Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32772 (0X8004) 


Description 

(OS) VioDeleteSetID Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIODELETESETID_POSTDT 

Minor Code 

32772 (0X8004) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32773 (0X8005) 


Description 

(OS) VioDeRegister Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIODEREGISTER_POSTDT 

Minor Code 


32773 (0X8005) 



Trace Groups 


VIO 


Trace Types 
Traced Parameters 


POST 


Return Code 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32774 (0X8006) 


Description 

(OS) VioDestroyPS Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIODESTROYPS_POSTDT 

Minor Code 

32774 (0X8006) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32775 (0X8007) 


Description 

(OS) VioEndPopUp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOENDPOPUP_POSTDT 

Minor Code 

32775 (0X8007) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 


Return Code 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 32776 (0X8008) 


Description 

(OS) VioGetAnsi Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETANSI_POSTDT 

Minor Code 

32776 (0X8008) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Indicator = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32777 (0X8009) 


Description 

(OS) VioGetBuf Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETBUF_POSTDT 

Minor Code 

32777 (0X8009) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 

= %w 

Length 

= %w 

LVBPtr 

= %d 

Return Code 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32778 (0X800A) 



Description 

(OS) VioGetConfig Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETCONFIG_POSTDT 

Minor Code 

32778 (0X800A) 


Trace Groups 

VIO 


Trace Tvpes 

POST 


Traced Parameters 

Handle 

= %w 


Config Data 

= %r%w 


Reserved 

= %w 


Return Code 

= %w 


0S2CHAR Major Code: 0X0018 Minor Code: 32779 (0X800B) 


Description 

(OS) VioGetCp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETCP_POSTDT 

Minor Code 

32779 (0X800B) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 
Code Page Id 
Reserved 
Return Code 


= %w 
= %w 
= %w 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32780 
(0X800C) 



Description 


(OS) VioGetCurPos Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETCURPOS_POSTDT 

Minor Code 

32780 (0X800C) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 

Column 

Row 

Return Code 


= %w 
= %w 
= %w 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32781 
(0X800D) 


Description 

(OS) VioGetCurType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETCURTYPE_POSTDT 

Minor Code 

32781 (0X800D) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 
Cursor Data 
Return Code 


= %w 


= %w%w%w%w 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32782 (0X800E) 



Description 


(OS) VioGetDeviceCellSize Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETDEVICECELLSIZE_POSTDT 

Minor Code 

32782 (0X800E) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


PS Handle = %w 

Width = %w 

Height = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32783 (0X800F) 


Description 

(OS) VioGetFont Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETFONT_POSTDT 

Minor Code 

32783 (0X800F) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 


Request Block = %r%w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32784 (0X8010) 


Description 

Tracepoint 


(OS) VioGetMode Post-Invocation 



Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETMODE_POSTDT 


Minor Code 

32784 (0X8010) 


Trace GrouDS 

VIO 


Trace TvDes 

POST 


Traced Parameters 

Handle 

= %w 


ModeData 

= %r%w 


Return Code 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32785 (0X8011) 

(OS) VioGetOrg Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETORG_POSTDT 
32785 (0X8011) 

VIO 
POST 

PS Handle = %w 

Column = %w 

Row = %w 

Return Code = %w 



OS2CHAR Major Code: 0X0018 Minor Code: 32786 (0X8012) 

(OS) VioGetPhysBuf Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETPHYSBUF_POSTDT 



Minor Code 


32786 (0X8012) 



Trace Groups 


VIO 


Trace Types 
Traced Parameters 


POST 


DisplayBuf = %d%d%w%w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32787 (0X8013) 


Description 

(OS) VioGetPSAddress Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETPSADDRESS_POSTDT 

Minor Code 

32787 (0X8013) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32788 (0X8014) 


Description 

(OS) VioGetState Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGETSTATE_POSTDT 

Minor Code 

32788 (0X8014) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 



Handle 


= %w 



Request Block 
Return Code 


= %r%w 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32789 (0X8015) 


Description 

(OS) VioGlobalReg Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOGLOBALREG_POSTDT 

Minor Code 

32789 (0X8015) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32790 (0X8016) 


Description 

(OS) VioModellndo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOMODEUNDO_POSTDT 

Minor Code 

32790 (0X8016) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32791 (0X8017) 


Description 



(OS) VioModeWait Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOMODEWAIT_POSTDT 

Minor Code 

32791 (0X8017) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Notify Type = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32792 (0X8018) 


Description 

(OS) VioPopUp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOPOPUP_POSTDT 

Minor Code 

32792 (0X8018) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32793 (0X8019) 


Description 

(OS) VioPrtSc Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOPRTSC_POSTDT 

Minor Code 

32793 (0X8019) 

Trace Groups 

VIO 



Trace Types 


POST 


Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32794 (0X801 A) 


Description 

(OS) VioPrtScToggle Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOPRTSCTOGGLE_POSTDT 

Minor Code 

32794 (0X801 A) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32795 (0X801 B) 


Description 

(OS) VioQueryConsole Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOQUERYCONSOLE_POSTDT 

Minor Code 

32795 (0X801 B) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 32796 
(0X801 C) 


Description 

(OS) VioQueryFonts Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOQUERYFONTS_POSTDT 

Minor Code 

32796 (0X801 C) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


PS Handle = %w 

Options = %d 

Fonts Returned = %d 
Metrics Length = %d 

Metrics - szFamilyname[FACESIZE] = %s 
szFacename[FACESIZE] = %s 
idRegistry = %w 

usCodePage = %w 

lEmHeight = %d 

IXHeight = %d 

IMaxAscender = %d 

IMaxDescender = %d 

ILowerCaseAscent = %d 
ILowerCaseDescent = %d 
IlnternalLeading = %d 

lExternalLeading = %d 

lAveCharWidth = %d 

IMaxCharlnc = %d 

lEmlnc = %d 

IMaxBaselineExt = %d 

sCharSlope = %w 


slnlineDir 


= %w 



sCharRot 

%w 

usWeightClass 

= %w 

usWidthClass 

= %w 

sXDeviceRes 

= %w 

sYDeviceRes 

= %w 

sFirstChar 

%w 

sLastChar 

%w 

sDefaultChar 

= %w 

sBreakChar 

= %w 

sNominalPointSize 

= %w 

sMinimumPointSize 

= %w 

sMaximumPointSize 

! = %W 

fsType = %w 

fsDefn = %w 

fsSelection 

%w 

fsCapabilities 

: %W 

ISubscriptXSize 

= %d 

ISubscriptYSize 

= %d 

ISubscriptXOffset 

= %d 

ISubscriptYOffset 

= %d 

ISuperscriptXSize 

= %d 

ISuperscriptYSize 

= %d 

ISuperscriptXOffset 

= %d 

ISuperscriptYOffset 

= %d 

IllnderscoreSize 

= %d 

IllnderscorePosition 

= %d 

IStrikeoutSize 

= %d 

IStrikeoutPosition 

= %d 

sKerningPairs 

= %w 

sFamilyClass 

= %w 

IMatch = %d 

Fonts Not Returned 

= %d 

Return Code 

= %w 


0S2CHAR Major Code: 0X0018 Minor Code: 32797 



(0X801 D) 


Description 

(OS) VioQuerySetIDs Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOQUERYSETIDS_POSTDT 

Minor Code 

32797 (0X801 D) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


PS Handle 
Count 
Types 
Font Names 
Local Identifiers 
Return Code 


= %w 
= %d 
= %d 


= %r%b 


= %d 
= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32798 (0X801 E) 


Description 

(OS) VioReadCellStr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOREADCELLSTR_POSTDT 

Minor Code 

32798 (0X801 E) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 

= %w 

Column 

= %w 

Row 

= %w 

Length 

= %w 

CellStr 

= %r%b 



Return Code 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32799 (0X801 F) 

(OS) VioReadCharStr Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOREADCHARSTR_POSTDT 
32799 (0X801 F) 

VIO 
POST 

Handle 
Column 
Row 
Length 
CharStr 
Return Code 


= %w 
= %w 
= %w 
= %w 
= %r%b 
= %w 



OS2CHAR Major Code: 0X0018 Minor Code: 32800 (0X8020) 



(OS) VioRegister Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOREGISTER_POSTDT 
32800 (0X8020) 

VIO 

POST 


Traced Parameters 


Return Code 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 32801 (0X8021) 


Description 

(OS) VioSavRedrawUndo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSAVREDRAWUNDO_POSTDT 

Minor Code 

32801 (0X8021) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32802 (0X8022) 


Description 

(OS) VioSavRedrawWait Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSAVREDRAWWAIT_POSTDT 

Minor Code 

32802 (0X8022) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Reserved = %w 

Notify Type = %w 

SavRedrawindic = %w 
Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32803 (0X8023) 


Description 



(OS) VioScrLock Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCRLOCK_POSTDT 

Minor Code 

32803 (0X8023) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 

= %w 

Status 

= %b 

Wait Flag 

= %w 

Return Code 

= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32804 (0X8024) 


Description 

(OS) VioScrollDn Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLDN_POSTDT 

Minor Code 

32804 (0X8024) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32805 (0X8025) 


Description 


(OS) VioScrolILf Post-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLLF_POSTDT 


Minor Code 



32805 (0X8025) 


Trace Groups 

VIO 


Trace Types 

POST 


Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32806 (0X8026) 


DescriDtion 

(OS) VioScrolIRt Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLRT_POSTDT 

Minor Code 

32806 (0X8026) 

Trace GrouDS 

VIO 

Trace TvDes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32807 (0X8027) 


DescriDtion 

(OS) VioScrollUp Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCROLLUP_POSTDT 

Minor Code 

32807 (0X8027) 

Trace GrouDS 

VIO 

Trace TvDes 

POST 

Traced Parameters 




Handle 


= %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32808 (0X8028) 


Description 

(OS) VioScrUnLock Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSCRUNLOCK_POSTDT 

Minor Code 

32808 (0X8028) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32809 (0X8029) 


Description 

(OS) VioSetAnsi Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETANSI_POSTDT 

Minor Code 

32809 (0X8029) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32810 (0X802A) 



Description 


(OS) VioSetCp Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETCP_POSTDT 

Minor Code 

32810 (0X802A) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 3281 1 (0X802B) 


Description 

(OS) VioSetCurPos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETCURPOS_POSTDT 

Minor Code 

3281 1 (0X802B) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32812 
(0X802C) 


Description 

(OS) VioSetCurType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETCURTYPE_POSTDT 



Minor Code 

32812 (0X802C) 


Trace GrouDS 

VIO 


Trace TvDes 

POST 


Traced Parameters 

Plandle 

= %w 


Return Code 

= %w 


0S2CHAR Major Code: 0X0018 Minor Code: 32813 
(0X802D) 

(OS) VioSetDeviceCellSize Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETDEVICECELLSIZE_POSTDT 
32813 (0X802D) 

VIO 
POST 

Return Code = %w 



OS2CHAR Major Code: 0X0018 Minor Code: 32814 (0X802E) 



(OS) VioSetFont Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETFONT_POSTDT 
32814 (0X802E) 

VIO 

POST 



Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32815 (0X802F) 


DescriDtion 

(OS) VioSetMode Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETMODE_POSTDT 

Minor Code 

32815 (0X802F) 

Trace GrouDS 

VIO 

Trace TvDes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32816 (0X8030) 


DescriDtion 

(OS) VioSetOrg Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETORG_POSTDT 

Minor Code 

32816 (0X8030) 

Trace GrouDS 

VIO 

Trace TvDes 

POST 

Traced Parameters 



Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32817 (0X8031) 



Description 


(OS) VioSetState Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSETSTATE_POSTDT 

Minor Code 

32817(0X8031) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32818 (0X8032) 


Description 

(OS) VioShieldlnit Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSHIELDINIT_POSTDT 

Minor Code 

32818 (0X8032) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 



Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32819 (0X8033) 


Description 

(OS) VioShieldTerm Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSHIELDTERM_POSTDT 

Minor Code 


32819 (0X8033) 



Trace Groups 


VIO 


Trace Types 
Traced Parameters 


POST 


Return Code 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32820 (0X8034) 


Description 

(OS) VioShowBuf Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSHOWBUF_POSTDT 

Minor Code 

32820 (0X8034) 

Trace GrouDS 

VIO 

Trace TvDes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32821 (0X8035) 


Description 

(OS) VioShowPS Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOSHOWPS_POSTDT 

Minor Code 

32821 (0X8035) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 



Return Code 


= %w 



0S2CHAR Major Code: 0X0018 Minor Code: 32822 (0X8036) 


Description 

(OS) VioWrtCellStr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTCELLSTR_POSTDT 

Minor Code 

32822 (0X8036) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32823 (0X8037) 


Description 

(OS) VioWrtCharStr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTCHARSTR_POSTDT 

Minor Code 

32823 (0X8037) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32824 (0X8038) 


Description 


(OS) VioWrtCharStrAtt Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTCHARSTRATT_POSTDT 


Minor Code 

32824 (0X8038) 

Trace Groups 

VIO 


Trace Types 

POST 


Traced Parameters 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32825 (0X8039) 


Description 

(OS) VioWrtNAttr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTNATTR_POSTDT 

Minor Code 

32825 (0X8039) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32826 (0X803A) 


Description 

(OS) VioWrtNCell Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTNCELL_POSTDT 

Minor Code 

32826 (0X803A) 

Trace Groups 

VIO 



Trace Types 
Traced Parameters 


POST 


Handle = %w 

Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32827 (0X803B) 


Description 

(OS) VioWrtNChar Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTNCHAR_POSTDT 

Minor Code 

32827 (0X803B) 

Trace Groups 

VIO 

Trace Tvpes 

POST 

Traced Parameters 

Handle = %w 


Return Code = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 32828 
(0X803C) 

Description 

(OS) VioWrtTTY Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.VIOWRTTTY_POSTDT 

Minor Code 

32828 (0X803C) 

Trace Groups 

VIO 


Trace Types 

POST 

Traced Parameters 


Handle 


= %w 



Return Code 


= %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33025 (0X8101) 

KbdCharln Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDCHARIN 
33025 (0X8101) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
CharDataRec.charcode = %B 
.scancode = %B 
.status = %B 
.NLSstat = %B 
.shiftstat = %W 
.timestamp = %D 


OS2CHAR Major Code: 0X0018 Minor Code: 33026 (0X8102) 

KbdClose Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDCLOSE 




33026 (0X8102) 



KBD 



POST 


Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33027 (0X8103) 

KbdGetHWID Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETHWID 
33027 (0X8103) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
HWIDStruc = %W 
= %W 



OS2CHAR Major Code: 0X0018 Minor Code: 33028 (0X8104) 



Description 


KbdDeRegister Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDDEREGISTER 

Minor Code 

33028 (0X8104) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33029 (0X8105) 


Description 

KbdFlushBuffer Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDFLUSHBUFFER 

Minor Code 

33029 (0X8105) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33030 (0X8106) 



Description 


KbdFreeFocus Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CFIAR. KBDFREEFOCUS 

Minor Code 

33030 (0X8106) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33031 (0X8107) 


Description 

KbdGetCP Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETCP 

Minor Code 

33031 (0X8107) 

Trace Groups 

KBD 

Trace Tvpes 

POST 

Traced Parameters 

Major = %X Minor = %Y 


Return Code = %W 


ProcStatus = %B 


ProcType = %B 


SessionID = %W 


KbdHandle = %W 



CodePagelD = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33032 (0X8108) 

KbdGetFocus Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETFOCUS 
33032 (0X8108) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33033 (0X8109) 

KbdGetStatus Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDGETSTATUS 
33033 (0X8109) 

KBD 
POST 

Major = %X Minor = %Y 




Return Code = %W 



ProcStatus = %B 


ProcType = %B 
SessionID = %W 
KbdHandle = %W 
Status = %W 
%W 
%W 

%w 

%w 


OS2CHAR Major Code: 0X0018 Minor Code: 33034 (0X81 0A) 


Description 

KbdOpen Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDOPEN 

Minor Code 

33034 (0X81 0A) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33035 (0X81 0B) 


Description 


KbdPeek Post-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: OS2CHAR. KBDPEEK 



Minor Code 


33035 (0X81 OB) 


Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
CharDataRec.charcode = %B 
.scancode = %B 
.status = %B 
.NLSstat = %B 
.shiftstat = %W 
.timestamp = %D 


OS2CHAR Major Code: 0X0018 Minor Code: 33036 
(0X81 0C) 


Description 

KbdRegister Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDREGISTER 

Minor Code 

33036 (0X81 0C) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 


ProcType = %B 



SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33037 
(0X81 0D) 

Description 

KbdSetCP Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETCP 

Minor Code 

33037 (0X81 0D) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33038 (0X81 0E) 


Description 

KbdSetCustXT Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETCUSTXT 

Minor Code 

33038 (0X81 0E) 

Trace Groups 

KBD 

Trace Tvpes 

POST 

Traced Parameters 



Major = %X Minor = %Y 



Return Code = %W 


ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33039 (0X81 OF) 

KbdSetFgnd Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSETFGND 
33039 (0X81 OF) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33040 (0X8110) 

KbdSetStatus Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CFIAR. KBDSETSTATUS 
33040 (0X8110) 

KBD 




POST 



Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33041 (0X8111) 

KbdShelilnit Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDSHELLINIT 
33041 (0X8111) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 


OS2CHAR Major Code: 0X0018 Minor Code: 33042 (0X8112) 

KbdStringln Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDSTRINGIN 
33042 (0X8112) 




KBD 



POST 



Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
CharBuffer length = %W 
CharBuffer = %S 

Note: CharBuffer was added with OS/2 Warp V3.0 fix pack 41 and OS/2 Warp V4.0 fix pack 10. 


OS2CHAR Major Code: 0X0018 Minor Code: 33043 (0X8113) 

KbdSynch Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. KBDSYNCH 
33043 (0X8113) 

KBD 
POST 

Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 



OS2CHAR Major Code: 0X0018 Minor Code: 33044 (0X8114) 



Description 


KbdXIate Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.KBDXLATE 

Minor Code 

33044 (0X8114) 

Trace Groups 

KBD 

Trace Types 

POST 

Traced Parameters 


Major = %X Minor = %Y 
Return Code = %W 
ProcStatus = %B 
ProcType = %B 
SessionID = %W 
KbdHandle = %W 
XlateRecord = %B %B %B %B 
%B %B %B %B 
%B %B %B %B 
%B %B %B %B 
%B %B 


OS2CHAR Major Code: 0X0018 Minor Code: 33281 (0X8201) 


Description 

(MOU) MouClose Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUCLOSE 

Minor Code 

33281 (0X8201) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 


ProcType = %b 



SessionID = %w 


MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33282 (0X8202) 


Description 

(MOU) MouDeRegister Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUDEREGISTER 

Minor Code 

33282 (0X8202) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33283 (0X8203) 


Description 

(MOU) MouDrawPtr Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUDRAWPTR 

Minor Code 

33283 (0X8203) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 


ProcType = %b 



SessionID = %w 


MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33284 (0X8204) 


Description 

(MOU) MouFlushQue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUFLUSHQUE 

Minor Code 

33284 (0X8204) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33285 (0X8205) 


Description 

(MOU) MouGetDevStatus Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETDEVSTATUS 

Minor Code 

33285 (0X8205) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


ProcStatus = %b 



ProcType = %b 
SessionID = %w 
MouHandle = %w 
DevStatus = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33286 (0X8206) 


Description 

(MOU) MouGetEventMask Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETEVENTMASK 

Minor Code 

33286 (0X8206) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
EventMask = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33287 (0X8207) 


Description 

(MOU) MouGetNumButtons Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMBUTTONS 

Minor Code 

33287 (0X8207) 

Trace Groups 

MOU 

Trace Types 


POST 



Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
NumButtons = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33288 (0X8208) 


Description 

(MOU) MouGetNumMickeys Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMMICKEYS 

Minor Code 

33288 (0X8208) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
NumMickeys = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33289 (0X8209) 


Description 

(MOU) MouGetNumQueEl Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETNUMQUEEL 

Minor Code 


33289 (0X8209) 



Trace Groups 


MOU 


Trace Types 


POST 


Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
Que Events = %w 
Que Max Events = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33290 (0X820A) 


Description 

(MOU) MouGetPtrPos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETPTRPOS 

Minor Code 

33290 (0X820A) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrPos.ROW = %w 
.COL = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33291 (0X820B) 



Description 


(MOU) MouGetPtrShape Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETPTRSHAPE 

Minor Code 

33291 (0X820B) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
PtrDefRec. LENGTH = %w 
.COL = %w 
.ROW = %w 
.COLOFFSET = %w 
.ROWOFFSET = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33292 
(0X820C) 


Description 

(MOU) MouGetScaleFact Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETSCALEFACT 

Minor Code 

33292 (0X820C) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 


ProcType = %b 



SessionID = %w 


MouHandle = %w 
ScaleFact.ROWSCALE = %w 
.COLSCALE = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33293 
(0X820D) 

(MOU) MouGetThreshold Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUGETTHRESHOLD 
33293 (0X820D) 

MOU 
POST 

Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
ThresholdStruc. Length = %w 
.Levell = %w 
.Levi Mult = %w 
.Level2 = %w 
.Lev2Mult = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33294 (0X820E) 

(MOU) MoulnitReal Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR.MOUINITREAL 





Minor Code 


33294 (0X820E) 


Trace GrouDS 

MOU 

Trace TvDes 

POST 

Traced Parameters 

Return Code = %w 


ProcStatus = %b 


ProcType = %b 


SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33295 (0X820F) 

(MOU) MouOpen Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUOPEN 
33295 (0X820F) 

MOU 
POST 

Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 



OS2CHAR Major Code: 0X0018 Minor Code: 33296 (0X8210) 

(MOU) MouReadEventQue Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUREADEVENTQUE 




Minor Code 


33296 (0X8210) 


MOU 

POST 

Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 
EventBuffer.MOUSTATE = %w 
.EVENTTIME = %d 
.ROW = %w 
.COL = %w 
ReadType = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33297 (0X8211) 

(MOU) MouRegister Post-Invocation 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUREGISTER 
33297 (0X8211) 

MOU 
POST 

Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 




OS2CHAR Major Code: 0X0018 Minor Code: 33298 (0X8212) 



Description 


(MOU) MouRemovePtr Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUREMOVEPTR 

Minor Code 

33298 (0X8212) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33299 (0X8213) 


Description 

(MOU) MouSetDevStatus Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETDEVSTATUS 

Minor Code 

33299 (0X8213) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33300 (0X8214) 



Description 


(MOU) MouSetEventMask Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETEVENTMASK 

Minor Code 

33300 (0X8214) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33301 (0X8215) 


Description 

(MOU) MouSetPtrPos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETPTRPOS 

Minor Code 

33301 (0X8215) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33302 (0X8216) 



Description 


(MOU) MouSetPtrShape Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETPTRSHAPE 

Minor Code 

33302 (0X8216) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33303 (0X8217) 


Description 

(MOU) MouSetScaleFact Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETSCALEFACT 

Minor Code 

33303 (0X8217) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33304 (0X8218) 



Description 


(MOU) MouSetThreshold Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSETTHRESHOLD 

Minor Code 

33304 (0X8218) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 
MouHandle = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33305 (0X8219) 


Description 

(MOU) MouShelllnit Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: OS2CHAR.MOUSHELLINIT 

Minor Code 

33305 (0X8219) 

Trace Groups 

MOU 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 
ProcStatus = %b 
ProcType = %b 
SessionID = %w 


OS2CHAR Major Code: 0X0018 Minor Code: 33306 (0X821 A) 



DescriDtion 

(MOU) MouSynch Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: OS2CHAR. MOUSYNCH 

Minor Code 

33306 (0X821 A) 

Trace GrouDS 

MOU 

Trace TvDes 

POST 

Traced Parameters 

Return Code = %w 


ProcStatus = %b 


ProcType = %b 


SessionID = %w 


QUECALLS.DLL Trace Events 

The tracepoints for the QUECALLS.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for QUECALLS Major Code: 0X0016, sorted by minor code. 
Trace events for QUECALLS Major Code: 0X0016 , sorted by tracepoint. 
QUECALLS API Tracepoints Indirected Via DOSCALL1 . 


Trace Events for QUECALLS Major Code: 0X0016, Sorted by 
Minor Code 

00001 (0X0001) (OS) DosCloseQueue Pre-Invocation 

00002 (0X0002) (OS) DosCreateQueue Pre-Invocation 

00003 (0X0003) (OS) DosOpenQueue Pre-Invocation 

00004 (0X0004) (OS) DosPeekQueue Pre-Invocation 

00005 (0X0005) (OS) DosPurgeQueue Pre-Invocation 

00006 (0X0006) (OS) DosQueryQueue Pre-Invocation 

00007 (0X0007) (OS) DosReadQueue Pre-Invocation 

00008 (0X0008) (OS) DosWriteQueue Pre-Invocation 

00009 (0X0009) (OS) Peek Data Packet From Queue 

00010 (0X000A) (OS) Read Data Packet From Queue 

0001 1 (0X000B) (OS) Write Data Packet To Queue 

32769 (0X8001) (OS) DosCloseQueue Post-Invocation 

32770 (0X8002) (OS) DosCreateQueue Post-Invocation 


32771 (0X8003) (OS) 

32772 (0X8004) (OS) 

32773 (0X8005) (OS) 

32774 (0X8006) (OS) 

32775 (0X8007) (OS) 

32776 (0X8008) (OS) 


DosOpenQueue Post-Invocation 
DosPeekQueue Post-Invocation 
DosPurgeQueue Post-Invocation 
DosQueryQueue Post-Invocation 
DosReadQueue Post-Invocation 
DosWriteQueue Post-Invocation 


Trace Events for QUECALLS Major Code: 0X0016, Sorted by 
Tracepoint 


(OS) DosCloseQueue Post-Invocation 32769 (0X8001) 
(OS) DosCloseQueue Pre-Invocation 00001 (0X0001) 
(OS) DosCreateQueue Post-Invocation 32770 (0X8002) 
(OS) DosCreateQueue Pre-Invocation 00002 (0X0002) 
(OS) DosOpenQueue Post-Invocation 32771 (0X8003) 
(OS) DosOpenQueue Pre-Invocation 00003 (0X0003) 
(OS) DosPeekQueue Post-Invocation 32772 (0X8004) 
(OS) DosPeekQueue Pre-Invocation 00004 (0X0004) 
(OS) DosPurgeQueue Post-Invocation 32773 (0X8005) 
(OS) DosPurgeQueue Pre-Invocation 00005 (0X0005) 
(OS) DosQueryQueue Post-Invocation 32774 (0X8006) 
(OS) DosQueryQueue Pre-Invocation 00006 (0X0006) 
(OS) DosReadQueue Post-Invocation 32775 (0X8007) 
(OS) DosReadQueue Pre-Invocation 00007 (0X0007) 
(OS) DosWriteQueue Post-Invocation 32776 (0X8008) 
(OS) DosWriteQueue Pre-Invocation 00008 (0X0008) 
(OS) Peek Data Packet From Queue 00009 (0X0009) 
(OS) Read Data Packet From Queue 00010 (0X000A) 
(OS) Write Data Packet To Queue 0001 1 (0X000B) 


QUECALLS Major Code: 0X0016 Minor Code: 1 (0X0001) 


Description 

(OS) DosCloseQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @closeq.c in QUECALLS. 

Minor Code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 


Traced Parameters 


Plandle=%w 


QUECALLS Major Code: 0X0016 Minor Code: 2 (0X0002) 


Description 


(OS) DosCreateQueue Pre-Invocation 


Tracepoint 

Source line defined dynamic tracepoint: @createq.c in QUECALLS. 

Minor Code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Priority=%w Queue name=%s 


QUECALLS Major Code: 0X0016 Minor Code: 3 (0X0003) 


Description 

(OS) DosOpenQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @openq.c in QUECALLS. 

Minor Code 

3 (0X0003) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Queue name=%s 


QUECALLS Major Code: 0X0016 Minor Code: 4 (0X0004) 


Description 

(OS) DosPeekQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @peekq.c in QUECALLS. 

Minor Code 

4 (0X0004) 

Trace Groups 


No groups assigned. 



Trace Types 

PRE 

Traced Parameters 

Handle=%w Element Code=%w 
Semaphore Handle=%d No Wait Flag=%b%i1 


QUECALLS Major Code: 0X0016 Minor Code: 5 (0X0005) 


Description 

(OS) DosPurgeQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: <§>purgeq.c in QUECALLS. 

Minor Code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Handle=%w 


QUECALLS Major Code: 0X0016 Minor Code: 6 (0X0006) 


Description 

(OS) DosQueryQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @queryq.c in QUECALLS. 

Minor Code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Handle=%w 



QUECALLS Major Code: 0X0016 Minor Code: 7 (0X0007) 


Description 

(OS) DosReadQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @readq.c in QUECALLS. 

Minor Code 

7 (0X0007) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Handle=%w Element Code=%w 
Semaphore Handle=%d No Wait Flag=%b 


QUECALLS Major Code: 0X0016 Minor Code: 8 (0X0008) 


Description 

(OS) DosWriteQueue Pre-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @writeq.c in QUECALLS. 

Minor Code 

8 (0X0008) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Handle=%w Request=%d Length=%d 
Address=%a Priority=%b 


QUECALLS Major Code: 0X0016 Minor Code: 9 (0X0009) 


Description 


(OS) Peek Data Packet From Queue 


Tracepoint 



Source line defined dynamic tracepoint: @peekq.c in QUECALLS. 


Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

INT 

Traced Parameters 


Length=%w Address=%a Element Code=%w 


QUECALLS Major Code: 0X0016 Minor Code: 10 (0X000A) 


Description 

(OS) Read Data Packet From Queue 

Tracepoint 

Source line defined dynamic tracepoint: @readq.c in QUECALLS. 

Minor Code 

10 (0X0O0A) 

Trace Groups 

No groups assigned. 

Trace Types 

INT 

Traced Parameters 


Length=%d Address=%a Element Code=%w 


QUECALLS Major Code: 0X0016 Minor Code: 11 (0X000B) 


Description 

(OS) Write Data Packet To Queue 

Tracepoint 

Source line defined dynamic tracepoint: @writeq.c in QUECALLS. 

Minor Code 

11 (0X0O0B) 

Trace Groups 

No groups assigned. 

Trace Types 

INT 

Traced Parameters 



Length=%d Address=%a Element Code=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32769 
(0X8001) 

(OS) DosCloseQueue Post-Invocation 

Source line defined dynamic tracepoint: @closeq.c in QUECALLS. 

32769 (0X8001) 

No groups assigned. 

POST 

Return Code=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32770 
(0X8002) 

(OS) DosCreateQueue Post-Invocation 

Source line defined dynamic tracepoint: @createq.c in QUECALLS. 

32770 (0X8002) 

No groups assigned. 

POST 

Return Code=%w Handle=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32771 





(0X8003) 


Description 

(OS) DosOpenQueue Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @openq.c in QUECALLS. 

Minor Code 

32771 (0X8003) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code=%w Handle=%w Owner PID=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32772 
(0X8004) 


Description 

(OS) DosPeekQueue Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @peekq.c in QUECALLS. 

Minor Code 

32772 (0X8004) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code=%w Request=%w%d Address=%a Length=%d 
Element Code=%w Priority=%b 


QUECALLS Major Code: 0X0016 Minor Code: 32773 
(0X8005) 


Description 


(OS) DosPurgeQueue Post-Invocation 



Tracepoint 


Source line defined dynamic tracepoint: @purgeq.c in QUECALLS. 


Minor Code 

32773 (0X8005) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32774 
(0X8006) 

Description 

(OS) DosQueryQueue Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @queryq.c in QUECALLS. 

Minor Code 

32774 (0X8006) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code=%w Number of Elements=%w 


QUECALLS Major Code: 0X0016 Minor Code: 32775 
(0X8007) 


Description 

(OS) DosReadQueue Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @readq.c in QUECALLS. 

Minor Code 

32775 (0X8007) 

Trace Groups 


No groups assigned. 



Trace Types 


POST 


Traced Parameters 

Return Code=%w Request=%w%d Address=%a Length=%d 
Priority=%b 


QUECALLS Major Code: 0X0016 Minor Code: 32776 
(0X8008) 

Description 

(OS) DosWriteQueue Post-Invocation 

Tracepoint 

Source line defined dynamic tracepoint: @writeq.c in QUECALLS. 

Minor Code 

32776 (0X8008) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code=%w 


SESMGR.DLL Trace Events 


The tracepoints for the SESMGR.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for SESMGR Major Code: 0X0017, sorted by minor code. 
Trace events for SESMGR Major Code: 0X0017 .sorted by tracepoint. 
Indirected Session Manager API Tracepoints. 


Trace Events for SESMGR Major Code: 0X0017, Sorted by 
Minor Code 


00001 (0X0001) (OS) DosSelectSession Pre-Invocation 

00002 (0X0002) (OS) DosSetSession Pre-Invocation 

00004 (0X0004) (OS) DosSMAppNotify Pre-Invocation 

00005 (0X0005) (OS) DosSMChildExit Pre-Invocation 

00007 (0X0007) (OS) DosSMDoAppReq Pre-Invocation 

00008 (0X0008) (OS) DosSMFreeSGId Pre-Invocation 

00009 (0X0009) (OS) DosSMGetSGId Pre-Invocation 

0001 1 (0X000B) (OS) DosSMNotifyDD Pre-Invocation 

00012 (0X000C) (OS) DosSMNotifyDD2 Pre-Invocation 

00013 (0X000D) (OS) DosSMParentSwitch Pre-Invocation 

00014 (0X000E) (OS) DosSMSGDoPopup Pre-Invocation 

00015 (0X000F) (OS) DosSMSGEndPopup Pre-Invocation 

00016 (0X0010) (OS) DosSMSGSet Pre-Invocation 

00017 (0X0011) (OS) DosSMSGStart Pre-Invocation 

00018 (0X0012) (OS) DosSMSGSwitch Pre-Invocation 

00019 (0X0013) (OS) DosSMSGTerminate Pre-Invocation 

00020 (0X0014) (OS) DosStartSession Pre-Invocation 

00021 (0X0015) (OS) DosStopSession Pre-Invocation 

00023 (0X0017) (OS) ParentNotify Pre-Invocation 

00024 (0X0018) (OS) ParentSwitch Pre-Invocation 

00025 (0X0019) (OS) WriteTermQueue Pre-Invocation 

32769 (0X8001) (OS) DosSelectSession Post-Invocation 

32770 (0X8002) (OS) DosSetSession Post-Invocation 

32772 (0X8004) (OS) DosSMAppNotify Post-Invocation 

32773 (0X8005) (OS) DosSMChildExit Post-Invocation 
32775 (0X8007) (OS) DosSMDoAppReq Post-Invocation 

32779 (0X800B) (OS) DosSMNotifyDD Post-Invocation 

32780 (0X800C) (OS) DosSMNotifyDD2 Post-Invocation 

32781 (0X800D) (OS) DosSMParentSwitch Post-Invocation 

32782 (0X800E) (OS) DosSMSGDoPopup Post-Invocation 

32783 (0X800F) (OS) DosSMSGEndPopup Post-Invocation 

32784 (0X8010) (OS) DosSMSGSet Post-Invocation 

32785 (0X8011) (OS) DosSMSGStart Post-Invocation 

32786 (0X8012) (OS) DosSMSGSwitch Post-Invocation 

32787 (0X8013) (OS) DosSMSGTerminate Post-Invocation 

32788 (0X8014) (OS) DosStartSession Post-Invocation 

32789 (0X8015) (OS) DosStopSession Post-Invocation 

32791 (0X8017) (OS) ParentNotify Post-Invocation 

32792 (0X8018) (OS) ParentSwitch Post-Invocation 

32793 (0X8019) (OS) WriteTermQueue Post-Invocation 


Trace Events for SESMGR Major Code: 0X0017, Sorted by 
Tracepoint 


DOSSELECTSESSION 00001 (0X0001) 
DOSSELECTSESSION_POSTDT 32769 (0X8001) 
DOSSMADDSGQUEUE 00002 (0X0002) 
DOSSMADDSGQUEUE_POSTDT 32770 (0X8002) 
DOSSMAPPNOTIFY 00004 (0X0004) 
DOSSMAPPNOTIFY_POSTDT 32772 (0X8004) 
DOSSMDELSGQUEUE 00005 (0X0005) 
DOSSMDELSGQUEUE_POSTDT 32773 (0X8005) 
DOSSMDOAPPREQ 00007 (0X0007) 
DOSSMFREESGID 00008 (0X0008) 
DOSSMGETSGQUEUE 00009 (0X0009) 
DOSSMGETSGQUEUE_POSTDT 32775 (0X8007) 
DOSSMGETSTATUS 00021 (0X0015) 
DOSSMGETSTATUS_POSTDT 32789 (0X8015) 
DOSSMNOTIFYDD 00011 (0X000B) 
DOSSMNOTIFYDD2 00012 (0X000C) 
DOSSMNOTIFYDD2_POSTDT 32780 (0X800C) 
DOSSMNOTIFYDD_POSTDT 32779 (0X800B) 
DOSSMPARENTSWITCH 00013 (0X000D) 
DOSSMPARENTSWITCH_POSTDT 32781 (0X800D) 


DOSSMSGDOPOPUP 00014 (0X000E) 
DOSSMSGDOPOPUP_POSTDT 32782 (0X800E) 
DOSSMSGENDPOPUP 00015 (0X000F) 
DOSSMSGENDPOPUP_POSTDT 32783 (0X800F) 
DOSSMSGSET 00016 (0X0010) 
DOSSMSGSET_POSTDT 32784 (0X8010) 
DOSSMSGSTART 0001 7 (0X001 1 ) 
DOSSMSGSTART_POSTDT 32785 (0X8011) 
DOSSMSGSWITCH 00018 (0X0012) 
DOSSMSGSWITCFLPOSTDT 32786 (0X8012) 
DOSSMSGTERMINATE 00019 (0X0013) 
DOSSMSGTERMINATE_POSTDT 32787 (0X8013) 
DOSSTARTSESSION 00020 (0X0014) 
DOSSTARTSESSION_POSTDT 32788 (0X8014) 
PARENTNOTIFY 00023 (0X0017) 
PARENTNOTIFY_POSTDT 32791 (0X8017) 
PARENTSWITCH 00024 (0X0018) 
PARENTSWITCFLPOSTDT 32792 (0X8018) 
WRITETERMQUEUE 00025 (0X0019) 
WRITETERMQUEUE_POSTDT 32793 (0X8019) 


SESMGR Major Code: 0X0017 Minor Code: 1 (0X0001) 


Description 

(OS) DosSelectSession Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSELECTSESSION 

Minor Code 

1 (0X0001) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Reserved = %d 

Select Option = %w 


SESMGR Major Code: 0X0017 Minor Code: 2 (0X0002) 


Description 

(OS) DosSetSession Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMADDSGQUEUE 

Minor Code 

2 (0X0002) 

Trace Groups 


No groups assigned. 


Trace Types 


PRE 


Traced Parameters 


Status Data - SetLength = %w 
SelectOpt = %w 
BondOption = %w 
Session id = %w 


SESMGR Major Code: 0X0017 Minor Code: 4 (0X0004) 


Description 

(OS) DosSMAppNotify Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMAPPNOTIFY 

Minor Code 

4 (0X0004) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Sessions Return Code = %w 
Terminated Session Id = %w 
Notify Switch Action = %w 


SESMGR Major Code: 0X0017 Minor Code: 5 (0X0005) 


Description 

(OS) DosSMChildExit Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMDELSGQUEUE 

Minor Code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 


PRE 



Traced Parameters 


SGID = %w 


SESMGR Major Code: 0X0017 Minor Code: 7 (0X0007) 


Description 

(OS) DosSMDoAppReq Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMDOAPPREQ 

Minor Code 

7 (0X0007) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Request Header = %r%b 
Request Data = %r%b 


SESMGR Major Code: 0X0017 Minor Code: 8 (0X0008) 


Description 

(OS) DosSMFreeSGId Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMFREESGID 

Minor Code 

8 (0X0008) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


SGID = %w 


SESMGR Major Code: 0X0017 Minor Code: 9 (0X0009) 



Description 


(OS) DosSMGetSGId Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR.DOSSMGETSGQUEUE 

Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


None 


SESMGR Major Code: 0X001 7 Minor Code: 1 1 (0X000B) 


Description 

(OS) DosSMNotifyDD Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMNOTIFYDD 

Minor Code 

11 (0X0O0B) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Outgoing SG 

= %w 

Incoming SG 

= %w 

Notification Type 

= %w 


SESMGR Major Code: 0X0017 Minor Code: 12 (0X000C) 


Description 

(OS) DosSMNotifyDD2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMNOTIFYDD2 

Minor Code 


12 (0X000C) 



Trace Groups 


No groups assigned. 


Trace Types 

PRE 

Traced Parameters 


None 


SESMGR Major Code: 0X0017 Minor Code: 13 (0X000D) 


Description 

(OS) DosSMParentSwitch Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMPARENTSWITCH 

Minor Code 

13 (0X000D) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Session Id = %w 


SESMGR Major Code: 0X0017 Minor Code: 14 (0X000E) 


Description 

(OS) DosSMSGDoPopup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGDOPOPUP 

Minor Code 

14 (0X0O0E) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


SGID = %w 

PID = %w 



PopType = %w 

Proc_Type = %w 


SESMGR Major Code: 0X0017 Minor Code: 15 (0X000F) 


Description 

(OS) DosSMSGEndPopup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGENDPOPUP 

Minor Code 

15 (OXOOOF) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


None 


SESMGR Major Code: 0X0017 Minor Code: 16 (0X0010) 


Description 

(OS) DosSMSGSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGSET 

Minor Code 

16 (0X0010) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Bond Option = %w 

Select Option = %w 

Child Session Id = %w 

Parent Session Id = %w 


SESMGR Major Code: 0X0017 Minor Code: 17 (0X0011) 



(OS) DosSMSGStart Pre-Invocation 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGSTART 
17 (0X0011) 

No groups assigned. 

PRE 


Reserved 

= %d 

Debug PID 

= %w 

Debug SID 

= %w 

PM Struct 

= %d 

Request Block 

= %d 

Environ Option 

= %w 

New Process Id 

= %w 

New Session 

= %w 

Parent Id 

= %w 

Program Inputs 

= %r%b 

Program Name 

= %r%t 

Program Title 

= %s 

Program Type 

= %w 

Asynchronous Option = %w 

Start Mode 

= %w 

Save Action 

= %w 


SESMGR Major Code: 0X0017 Minor Code: 18 (0X0012) 

(OS) DosSMSGSwitch Pre-Invocation 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGSWITCH 




18 (0X0012) 



No groups assigned. 


Trace Types 
Traced Parameters 


PRE 


Reserved 

= %d 

Debug SIG 

= %w 

Session id 

= %w 

Switch Action 

= %w 


SESMGR Major Code: 0X0017 Minor Code: 19 (0X0013) 


Description 

(OS) DosSMSGTerminate Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGTERMINATE 

Minor Code 

19 (0X0013) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Reserved = %d 

Session id = %w 


SESMGR Major Code: 0X0017 Minor Code: 20 (0X0014) 


Description 

(OS) DosStartSession Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSTARTSESSION 

Minor Code 

20 (0X0014) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 



Start Data 


= %r%w 


SESMGR Major Code: 0X0017 Minor Code: 21 (0X0015) 



(OS) DosStopSession Pre-Invocation 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMGETSTATUS 
21 (0X0015) 

No groups assigned. 

PRE 


Traced Parameters 


Reserved = %d 

Session Id = %w 

Stop Session Option = %w 


SESMGR Major Code: 0X0017 Minor Code: 23 (0X0017) 



(OS) ParentNotify Pre-Invocation 

Public symbol defined dynamic tracepoint: SESMGR. PARENTNOTIFY 
23 (0X0017) 

No groups assigned. 

PRE 


Traced Parameters 


Session Id = %w 

TermType = %w 


SESMGR Major Code: 0X0017 Minor Code: 24 (0X0018) 



Description 


(OS) ParentSwitch Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. PARENTSWITCH 

Minor Code 

24 (0X0018) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Session Id = %w 


SESMGR Major Code: 0X0017 Minor Code: 25 (0X0019) 


Description 

(OS) WriteTermQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. WRITETERMQUEUE 

Minor Code 

25 (0X0019) 

Trace Groups 

No groups assigned. 

Trace Types 

PRE 

Traced Parameters 


Action = %w 

Parent Process Id = %w 
Parent Screen Group = %w 
Terminating Session SID = %w 
PID = %w 


SESMGR Major Code: 0X0017 Minor Code: 32769 (0X8001) 

Description 


(OS) DosSelectSession Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: SESMGR.DOSSELECTSESSION_POSTDT 


Minor Code 

32769 (0X8001) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32770 (0X8002) 


Description 

(OS) DosSetSession Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMADDSGQUEUE_POSTDT 

Minor Code 

32770 (0X8002) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32772 (0X8004) 


Description 

(OS) DosSMAppNotify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMAPPNOTIFY_POSTDT 

Minor Code 

32772 (0X8004) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 



Return Code 


= %w 


SESMGR Major Code: 0X0017 Minor Code: 32773 (0X8005) 


Description 

(OS) DosSMChildExit Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMDELSGQUEUE_POSTDT 

Minor Code 

32773 (0X8005) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32775 (0X8007) 


Description 

(OS) DosSMDoAppReq Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMGETSGQUEUE_POSTDT 

Minor Code 

32775 (0X8007) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32779 (0X800B) 


Description 


(OS) DosSMNotifyDD Post-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: SESMGR.DOSSMNOTIFYDD_POSTDT 


Minor Code 

32779 (0X800B) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32780 (0X800C) 


Description 

(OS) DosSMNotifyDD2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMNOTIFYDD2_POSTDT 

Minor Code 

32780 (0X800C) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


DosDevlOCTLsRC = %w 


SESMGR Major Code: 0X0017 Minor Code: 32781 (0X800D) 


Description 

(OS) DosSMParentSwitch Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMPARENTSWITCPI_POSTDT 

Minor Code 

32781 (0X800D) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 



Switched 


= %w 


SESMGR Major Code: 0X0017 Minor Code: 32782 (0X800E) 


Description 

(OS) DosSMSGDoPopup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGDOPOPUP_POSTDT 

Minor Code 

32782 (0X800E) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32783 (0X800F) 


Description 

(OS) DosSMSGEndPopup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGENDPOPUP_POSTDT 

Minor Code 

32783 (0X800F) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32784 (0X8010) 


Description 



(OS) DosSMSGSet Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR.DOSSMSGSET_POSTDT 

Minor Code 

32784 (0X8010) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32785 (0X801 1 ) 


Description 

(OS) DosSMSGStart Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGSTART_POSTDT 

Minor Code 

32785 (0X8011) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32786 (0X8012) 


Description 

(OS) DosSMSGSwitch Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGSWITCH_POSTDT 

Minor Code 

32786 (0X8012) 

Trace Groups 

No groups assigned. 

Trace Types 


POST 



Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32787 (0X8013) 


Description 

(OS) DosSMSGTerminate Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSMSGTERMINATE_POSTDT 

Minor Code 

32787 (0X8013) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32788 (0X8014) 


Description 

(OS) DosStartSession Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. DOSSTARTSESSION_POSTDT 

Minor Code 

32788 (0X8014) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


New Process Id = %w 
New Session = %w 

Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32789 (0X8015) 



Description 


(OS) DosStopSession Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR.DOSSMGETSTATUS_POSTDT 

Minor Code 

32789 (0X8015) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


SESMGR Major Code: 0X0017 Minor Code: 32791 (0X8017) 


Description 

(OS) ParentNotify Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. PARENTNOTIFY_POSTDT 

Minor Code 

32791 (0X8017) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Switched = %w 


SESMGR Major Code: 0X0017 Minor Code: 32792 (0X8018) 


Description 

(OS) ParentSwitch Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. PARENTSWITCH_POSTDT 

Minor Code 

32792 (0X8018) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


POST 


Switched 


= %w 


SESMGR Major Code: 0X0017 Minor Code: 32793 (0X8019) 


Description 

(OS) WriteTermQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: SESMGR. WRITETERMQUEUE_POSTDT 

Minor Code 

32793 (0X8019) 

Trace Groups 

No groups assigned. 

Trace Types 

POST 

Traced Parameters 


Return Code = %w 


Indirected Session Manager API Tracepoints 


The following table lists 32-bit pre-invocation tracepoints for SESMGR.DLL APIs that are indirected via SESMGR thunking layer. These 
should be trace in conjunction with their corresponding SESMGR 16-bit API tracepoints. 


SESMGR API 

Minor 

code 

Types 

DOS32SELECTSESSION 

32 

PRE, API 

DOS32SETSESSION 

33 

PRE, API 

DOS32STARTSESSION 

34 

PRE, API 

DOS 3 2 STOP SESSION 

35 

PRE, API 


Multi-Media Extensions 


The tracepoints for the Multi-Media Extensions major code are identified in the following tables. These tracepoints are static tracepoints. 



Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for Multi-Media Extensions major code: 0X006D, sorted by minor code. 
Trace events for Multi-Media Extensions major code: 0X006D , sorted by tracepoint. 


Trace Events for Multi-Media Extensions Major Code: 
0X006D, Sorted by Minor Code 


00001 (0X0001) SSM_ShcAssociate_Entry 

00002 (0X0002) SSM_ShcClose_Entry 

00003 (0X0003) SSM_ShcCreate_Entry 

00004 (0X0004) SSM_ShcDestroy_Entry 

00005 (0X0005) SSM_ShcStart_Entry 

00006 (0X0006) SSM_ShcStop_Entry 

00007 (0X0007) SSM_ShcSeek_Entry 

00008 (0X0008) SSM_ShcEnableEvt_Entry 

00009 (0X0009) SSM_ShcDisableEvt_Entry 

00010 (0X000A) SSM_ShcEnableSync_Entry 

0001 1 (0X000B) SSM_ShcDisableSync_Entry 

00012 (0X000C) SSM_ShcGetTime_Entry 

00013 (0X000D) SSM_ShcGetProtocol_Entry 

00014 (0X000E) SSM_ShclnstProtocol_Entry 

00015 (0X000F) SSM_ShcEnumProtocol_Entry 

00016 (0X0010) SSM_ShcNegotReslt_Entry 

0001 7 (0X001 1 ) SSM_ShcSendMsg_Entry 

00018 (0X0012) UNUSED_HOOK 1 09_01 8 

00019 (0X0013) UNUSED HOOK1 09_01 9 

00020 (0X0014) SSM_ProcRun_Entry 

00021 (0X0015) SSM_ProcBlock_Entry 

00022 (0X0016) SSM_loctl_Entry 

00023 (0X0017) SSM_IDC_Call_To_SHC 

00024 (0X0018) SSMJDCNotifyEntry 

00025 (0X0019) SSM IDCDeRegEntry 

00026 (0X001 A) SSM_IDCRptEvtEntry 

00027 (0X001 B) GET_EMPTY_Entry 

00028 (0X001 C) GET_FULL_Entry 

00029 (0X001 D) RET_EMPTY_Entry 

00030 (0X001 E) RET_FULL_Entry 

00031 (0X001 F) BUF_Record_Entry 

00032 (0X0020) SMH_ReportEventO 

00033 (0X0021) UNUSED_HOOK_109_033 

00034 (0X0022) UNUSED_FIOOK_109_034 

00035 (0X0023) SSM_SmhRing3_Entry 

00036 (0X0024) SSM_SmhRegister_Entry 

00037 (0X0025) SSM_SmhReportEvnt_Entry 

00038 (0X0026) SSM_SmhNotify_Entry 

00039 (0X0027) SSM_SmhDeRegister_Entry 

00040 (0X0028) SSM_SmhLockMem_Entry 

00041 (0X0029) SSM_SpiAssociate_Entry 

00042 (0X002A) SSM_SpiCreate_Entry 

00043 (0X002B) SSM_SpiDestroy_Entry 

00044 (0X002C) SSM_SpiEnumProtocol_Entry 

00045 (0X002D) SSM_SpiEnumHndlr_Entry 

00046 (0X002E) SSM_SpiGetHndlr_Entry 

00047 (0X002F) SSM_SpiGetProtocol_Entry 

00048 (0X0030) SSM_SpiGetTime_Entry 

00049 (0X0031) SSM_SpilnstProtocol_Entry 

00050 (0X0032) SSM_SpiSeekStrm_Entry 

00051 (0X0033) SSM_SpiStartStrm_Entry 

00052 (0X0034) SSM_SpiStopStrm_Entry 

00053 (0X0035) SSM_SpiEnableEvent_Entry 


00054 (0X0036) SSM_SpiDisableEvent_Entry 

00055 (0X0037) SSM_SpiEnableSync_Entry 

00056 (0X0038) SSM_SpiDisableSync_Entry 

00057 (0X0039) SSM_ShcRouter_Entry 

00058 (0X003A) SSM_ShcRouterRing3_Entry 

00059 (0X003B) SSM_SmhRptEventSync_Entry 

00060 (0X003C) SSM_AppEvent3_Entry 

00061 (0X003D) SSM_AppEventQ_Entry 

00062 (0X003E) SSM_SmhNotifylOCtl_Entry 

00063 (0X003F) SSM_QueueEventlOCtl_Entry 

00064 (0X0040) SSM_CreateBDS 

00065 (0X0041) SSM_SpiDetSyncMaster_Entry 

00066 (0X0042) SSM_SpiSendMsg_Entry 

00067 (0X0043) SSM_SpiAssStrNetEntry 

00068 (0X0044) SSM_SpiCloseStrNetEntry 

00069 (0X0045) SSM_SpiConnStrEntry 

00070 (0X0046) SSM_SpiDeactStrEntry 

00071 (0X0047) SSM_SpiAddStrConnEntry 

00072 (0X0048) SSM_SpiOpenStrNetEntry 

00073 (0X0049) SSM_SpiReactStrEntry 

00074 (OX004A) SSM_SpiRemStrConnEntry 

00075 (0X004B) SSM_SpiSeekStrNetEntry 

00076 (0X004C) SSM_SpiStartStrNetEntry 

00077 (0X004D) SSM_SpiStopStrNetEntry 

00078 ( 0X004E) SSM_SpiUnassStrNetEntry 

00080 (0X0050) ACP_ACPADevintEntry 

00081 (0X0051) ADH_ADSHIntHandlerEntry 

00082 (0X0052) ADH_SHCCreateEntry 

00083 (0X0053) ADH_SHCStartEntry 

00084 (0X0054) ADH_SHCStopEntry 

00085 (0X0055) ADH_GetEmptyEntry 

00086 (0X0056) ADH_ReturnFullEntry 

00087 (0X0057) ADH_GetFullEntry 

00088 (0X0058) ADH_ReturnEmptyEntry 

00089 (0X0059) ADH_ReportEOSEntry 

00090 (0X005A) ADH_ReportErrorEntry 

00091 (0X005B) ADH_ReportPLCueEntry 

00092 (0X005C) ADFI_ReportCueTimeEntry 

00093 (0X005D) ADFI_ReportCueDataEntry 

00094 (0X005E) ADFI_ReportDataUnderEntry 

00095 (0X005F) ADFI_ReportSyncOverEntry 

00096 (0X0060) ADH_EventHandlerEntry 

00097 (0X0061) ACP_DevReportError 

00101 (0X0065) ADSH_AddBufEntry 

00102 (0X0066) ADSH_RemoveBufEntry 

00103 (0X0067) ADSHJDCWriteEntry 

00104 (0X0068) ADSH_GetBufferEntry 

00105 (0X0069) ADSH_RetBufferEntry 

00106 (0X006A) ADSH_DLLIntEntry 

00107 (0X006B) ADSH_IDCControlEntry 

00108 (0X006C) ADSHJDCSetupEntry 

00109 (0X006D) ADSH_SendBufferEntry 

00112 (0X0070) CDSH_StartCdReadloctl 

00113 (0X0071) CDSH_StartCddaRead 

00114 (0X0072) CDSH_StartCddaWrite 

00129 (0X0081) SSM_ShcAssociate_Exit 

00130 (0X0082) SSM_ShcClose_Exit 

00131 (0X0083) SSM_ShcCreate_Exit 

00132 (0X0084) SSM_ShcDestroy_Exit 

00133 (0X0085) SSM_ShcStart_Exit 

00134 (0X0086) SSM_ShcStop_Exit 

00135 (0X0087) SSM_ShcSeek_Exit 

00136 (0X0088) SSM_ShcEnableEvt_Exit 

00137 (0X0089) SSM_ShcDisableEvt_Exit 

00138 (OX008A) SSM_ShcEnableSync_Exit 

00139 (0X008B) SSM_ShcDisableSync_Exit 

00140 (0X008C) SSM_ShcGetTime_Exit 

00141 (0X008D) SSM_ShcGetProtocol_Exit 

00142 (0X008E) SSM_ShclnstProtocol_Exit 

00143 (0X008F) SSM_ShcEnumProtocol_Exit 

00144 (0X0090) SSM_ShcNegotReslt_Exit 

00145 (0X0091) SSM_ShcSendMsg_Exit 

00146 (0X0092) UNUSED_HOOK^109_146 


00147 (0X0093) UNUSED_HOOK_109_147 

00148 (0X0094) SSM_ProcRun_Exit 

00149 (0X0095) SSM_ProcBlock_Exit 

00150 (0X0096) SSM_loctl_Exit 

00151 (0X0097) SSM_IDC_Ret_From_SHC 

00152 (0X0098) SSMJDCNotifyExit 

00153 (0X0099) SSMJDCDeRegExit 

00154 (0X009A) SSM_I DCRptEvtExit 

00155 (0X009B) GET_EMPTY_Exit 

00156 (0X009C) GET_FULL_Exit 

00157 (0X009D) RET_EMPTY_Exit 

00158 (0X009E) RET_FULL_Exit 

00159 (0X009F) BUF_Record_Exit 

00160 (0X00A0) SSM_Negotiate_error 

00161 (0X00A1) UNUSED_HOOK_109_161 

00162 (0X00A2) UNUSED_HOOK_109_162 

00163 (0X00A3) SSM_SmhRing3_Exit 

00164 (0X00A4) SSM_SmhRegister_Exit 

00165 (0X00A5) SSM_SmhReportEvnt_Exit 

00166 (0X00A6) SSM_SmhNolify_Exit 

00167 (0X00A7) SSM_SmhDeRegister_Exit 

00168 (0X00A8) SSM_SmhLockMem_Exit 

00169 (0X00A9) SSM_SpiAssociate_Exit 

00170 (0X00AA) SSM_SpiCreate_Exit 

00171 (OXOOAB) SSM_SpiDestroy_Exit 

00172 (OXOOAC) SSM_SpiEnumProtocol_Exit 

00173 (OXOOAD) SSM_SpiEnumHndlr_Exit 

00174 ( OXOOAE) SSM_SpiGetHndlr_Exit 

00175 (OXOOAF) SSM_SpiGetProtocol_Exit 

00176 (OXOOBO) SSM_SpiGetTime_Exit 

00177 (0X00B1) SSM_SpilnstProtocol_Exit 

00178 (0X00B2) SSM_SpiSeekStrm_Exit 

00179 (0X00B3) SSM_SpiStartStrm_Exit 

00180 (0X00B4) SSM_SpiStopStrm_Exit 

00181 (0X00B5) SSM_SpiEnableEvent_Exit 

00182 (0X00B6) SSM_SpiDisableEvent_Exit 

00183 (0X00B7) SSM_SpiEnableSync_Exit 

00184 (0X00B8) SSM_SpiDisableSync_Exit 

00185 (0X00B9) SSM_ShcRouter_Exit 

00186 (OXOOBA) SSM_ShcRouterRing3_Exit 

00187 (OXOOBB) SSM_xxxUnused1 

00188 (OXOOBC) SSM_AppEvent3_Exit 

00189 (OXOOBD) SSM_AppEventQ_Exit 

00190 (OXOOBE) SSM_SmhNotifylOCtl_Exit 

00191 (OXOOBF) SSM_QueueEventlOCtl_Exit 

00192 (OXOOCO) SSM_CreateBDSNotMax 

00193 (0X00C1) SSM_SpiDetSyncMaster_Exit 

00194 (0X00C2) SSM_SpiSendMsg_Exit 

00195 (0X00C3) SSM_SpiAssStrNetExit 

00196 (0X00C4) SSM_SpiCloseStrNetExit 

00197 (0X00C5) SSM_SpiConnStrExit 

00198 (0X00C6) SSM_SpiDeactStrExit 

00199 (0X00C7) SSM_SpiAddStrConnExit 

00200 (0X00C8) SSM_SpiOpenStrNetExit 

00201 (0X00C9) SSM_SpiReactStrExit 

00202 (OXOOCA) SSM_SpiRemStrConnExit 

00203 (OXOOCB) SSM_SpiSeekStrNetExit 

00204 (OXOOCC) SSM_SpiStartStrNetExit 

00205 (OXOOCD) SSM_SpiStopStrNetExit 

00206 (OXOOCE) SSM_SpiUnassStrNetExit 

00208 (OXOODO) ACP_ACPADevlntExit 

00209 (0X00D1) ADH_ADSHIntHandlerExit 

00210 (0X00D2) ADH_SHCCreateExit 

0021 1 (0X00D3) ADH_SHCStartExit 

00212 (0X00D4) ADH_SHCStopExit 

00213 (0X00D5) ADH_GetEmptyExit 

00214 (0X00D6) ADH_ReturnFullExit 

00215 (0X00D7) ADH_GetFullExit 

00216 (0X00D8) ADH_ReturnEmptyExit 

00217 (0X00D9) ADH_ReportEOSExit 

00218 (OXOODA) ADH_ReportErrorExit 

00219 (OXOODB) ADH_ReportPLCueExit 

00220 (OXOODC) ADFI_ReportCueTimeExit 


00221 (0X00DD) ADH_ReportCueDataExit 

00222 (OXOODE) ADH_ReportDataUnderExit 

00223 (OXOODF) ADH_ReportSyncOverExit 

00224 (OXOOEO) ADH_EventHandlerExit 

00225 (0X00E1) ACP_DevReportError 

00229 (0X00E5) ADSH_AddBufExit 

00230 (0X00E6) ADSH_RemoveBufExit 

00231 (0X00E7) ADSH_IDCWriteExit 

00232 (0X00E8) ADSH_GetBufferExit 

00233 (0X00E9) ADSH_RetBufferExit 

00234 (OXOOEA) ADSH_DLLIntExit 

00235 (OXOOEB) ADSHJDCControlExit 

00236 (OXOOEC) ADSH_IDCSetupExit 

00237 (OXOOED) ADSH_SendBufferExit 

00240 (OXOOFO) CDSH_StopCdReadloctl 

00241 (0X00F1) CDSH_StopCddaRead 

00242 (0X00F2) CDSH_StopCddaWrite 

00257 (0X0101) MDM_mciSendStringEntry 

00258 (0X0102) MDM_mciSendCommandEntry 

00259 (0X0103) MDM_mciOpen_Entry 

00260 (0X0104) MDM_MCDOpen_Entry 

00261 (0X0105) MDM_mciMakeActive_Entry 

00262 (0X0106) MDM_mciClose_Entry 

00263 (0X0107) MDM_RESTORE_Entry 

00264 (0X0108) MDM_SAVE_Entry 

00265 (0X0109) MDM_Thread_call_Entry 

00324 (0X0144) MTSH_GetEmptyEntry 

00325 (0X0145) MTSH_ReturnFullEntry 

00385 (0X0181) MDM_mciSendStringExit 

00386 (0X0182) MDM_mciSendCommandExit 

00387 (0X0183) MDM_mciOpen_Exit 

00388 (0X0184) MDM_MCDOpen_Exit 

00389 ( 0X0185) MDM_mciMakeActive_Exit 

00390 (0X0186) MDM_mciClose_Exit 

00391 (0X0187) MDM_RESTORE_EXIT 

00392 (0X0188) MDM_SAVE_EXIT 

00393 (0X0189) MDM_Thread_call_Exit 

00452 (0X01 C4) MTSH_GetEmptyExit 

00453 (0X01 C5) MTSH_ReturnFullExit 

00513 (0X0201) MIO_DosOpen_Entry 

00514 (0X0202) MIO_DosRead_Entry 

00515 (0X0203) MIO_DosWrite_Entry 

00516 (0X0204) MIO_DosSeek_Entry 

00517 (0X0205) MIO_DosClose_Entry 

00518 (0X0206) MIO_DosDelete_Entry 

00519 (0X0207) MIO_MemOpen_Entry 

00520 (0X0208) MIO_MemRead_Entry 

00521 (0X0209) MIO_MemWrile_Entry 

00522 (0X020A) MIO_MemSeek_Entry 

00523 (0X020B) MIOJVIemClose_Entry 

00524 (0X020C) MIO_mmioOpen_Entry 

00525 (0X020D) MIO_mmioClose_Entry 

00526 (0X020E) MIO_mmioRead_Entry 

00527 (0X020F) MIO_mmioWrite_Entry 

00528 (0X0210) MIO_mmioSeek_Entry 

00529 (0X0211) MIO_mmioFlush_Entry 

00530 (0X0212) MIO_mmioAscend_Entry 

00531 (0X0213) MIO_mmioDescend_Entry 

00532 (0X0214) MIO_mmioAdvance_Entry 

00533 (0X0215) MIO_mmiolnstlOProc_Entry 

00534 (0X0216) MIO_mmioSendMsg_Entry 

00535 (0X0217) MIO_mmioAquireSem_Entry 

00536 (0X0218) MIO_mmioDiscardSem_Entry 

00537 (0X0219) MIO_mmioCreateChunk_Entry 

00538 (0X021 A) MIO_mmioCFOpen_Entry 

00539 (0X021 B) MIO_mmioCFCIose_Entry 

00540 (0X021 C) MIO_mmioCFRmvShrEnt_Entry 

00541 (0X021 D) MIO_mmioCFAddShrEnt_Entry 

00542 (0X021 E) MIO_mmioCFSetlnfo_Entry 

00543 (0X021 F) MIO_mmioCFGetlnfo_Entry 

00544 (0X0220) MIO_mmioCFOpnTmpElem_Entry 

00545 (0X0221) MIO_mmioCFCIsTmpElem_Entry 

00546 (0X0222) MIO_mmioCFAddEnt_Entry 


00547 (0X0223) MIO_mmioCFChgEnt_Entry 

00548 (0X0224) MIO_mmioCFCopy_Entry 

00549 (0X0225) MIO_mmioCFDelEnt_Entry 

00550 (0X0226) MIO_mmioCFAddElem_Entry 

00551 (0X0227) MIO_mmioCFFndEnt_Entry 

00552 (0X0228) MIO_mmioldentFile_Entry 

00553 (0X0229) MIO_MidiOpen_Entry 

00554 (0X022A) MIO_MidiRead_Entry 

00555 (0X022B) MIO_MidiWrite_Entry 

00556 (0X022C) MIO_MidiSeek_Entry 

00557 (0X022D) MIO_MidiClose_Entry 

00576 (0X0240) MSH_RdPlayList_Entry 

00577 (0X0241) MSH_WrPlayList_Entry 

00592 (0X0250) SWVR_GetlmageEntry 

00593 (0X0251) SWVR_ComplndxFrameEntry 

00594 (0X0252) SWVR_CompRefrFrameEnlry 

00595 (0X0253) SWVR_PostBufferFullEntry 

00596 (0X0254) SWVR_PostBufferEmptyEntry 

00597 (0X0255) SWVR_WaitMsgBufferFullEntry 

00598 (0X0256) SWVR_WaitMsgBufferEmptyEntry 

00599 (0X0257) SWVR_PostCountErrorEntry 

00600 (0X0258) SWVR_BufferWriteStartEntry 

00601 (0X0259) SWVR_VCADosDevlOCTLEntry 

00602 (0X025A) SWVR_VCABufferCopyEntry 

00603 (0X025B) SWVR_VCAtoX4CopyEntry 

00604 (0X025C) SWVR_VCAtoX2CopyEntry 

00605 (0X025D) SWVR_VCA640CopyEntry 

00612 (0X0264) SVSH_DecompBufferEntry 

00613 (0X0265) ULDC_DLLDroppedEntry 

00617 (0X0269) SVMC_SetBitmapEntry 

00618 (0X026A) SVMC_BitBltEntry 

00619 (0X026B) SVMC_BlitUpEntry 

00620 (0X026C) SVMC_SpiMoveCoorEntry 

00621 (0X026D) 

00641 (0X0281) MIO_DosOpen_Exit 

00642 (0X0282) MIO_DosRead_Exit 

00643 (0X0283) MIO_DosWrite_Exit 

00644 ( 0X0284) MIO_DosSeek_Exit 

00645 (0X0285) MIO_DosClose_Exit 

00646 (0X0286) MIO_DosDelete_Exit 

00647 (0X0287) MIO_MemOpen_Exit 

00648 (0X0288) MIO_MemRead_Exit 

00649 (0X0289) MIO_MemWrite_Exit 

00650 (0X028A) MIO_MemSeek_Exit 

00651 (0X028B) MIO_MemClose_Exit 

00652 (0X028C) MIO_mmioOpen_Exit 

00653 (0X028D) MIO_mmioClose_Exit 

00654 (0X028E) MIO_mmioRead_Exit 

00655 (0X028F) MIO_mmioWrite_Exit 

00656 (0X0290) MIO_mmioSeek_Exit 

00657 (0X0291) MIO_mmioFlush_Exit 

00658 (0X0292) MIO_mmioAscend_Exit 

00659 (0X0293) MIO_mmioDescend_Exit 

00660 (0X0294) MIO_mmioAdvance_Exit 

00661 (0X0295) MIO_mmiolnstlOProc_Exit 

00662 (0X0296) MIO_mmioSendMsg_Exit 

00663 (0X0297) MIO_mmioAquireSem_Exit 

00664 (0X0298) MIO_mmioDiscardSem_Exit 

00665 (0X0299) MIO_mmioCreateChunk_Exit 

00666 (0X029A) MIO_mmioCFOpen_Exit 

00667 (0X029B) MIO_mmioCFCIose_Exit 

00668 (0X029C) MIO_mmioCFRmvShrEnt_Exit 

00669 (0X029D) MIO_mmioCFAddShrEnt_Exit 

00670 (0X029E) MIO_mmioCFSetlnfo_Exit 

00671 (0X029F) MIO_mmioCFGetlnfo_Exit 

00672 (0X02A0) MIO_mmioCFOpnTmpElem_Exit 

00673 (0X02A1) MIO_mmioCFCIsTmpElem_Exit 

00674 (0X02A2) MIO_mmioCFAddEnt_Exit 

00675 (0X02A3) MIO_mmioCFChgEnt_Exit 

00676 (0X02A4) MIO_mmioCFCopy_Exit 

00677 (0X02A5) MIO_mmioCFDelEnt_Exit 

00678 (0X02A6) MIO_mmioCFAddElem_Exit 

00679 (0X02A7) MIO_mmioCFFndEnt_Exit 


00680 (0X02A8) MIO_mmioldentFile_Exit 

00681 (0X02A9) MIOJVIidiOpen_Exit 

00682 (0XO2AA) MIO_MidiRead_Exit 

00683 (0X02AB) MIO_MidiWrite_Exit 

00684 (0X02AC) MIO_MidiSeek_Exit 

00685 (0X02AD) MIO_MidiClose_Exit 

00704 (0X02C0) MSH_RdPlayList_Exit 

00705 (0X02C1) MSH_WrPlayList_Exit 

00720 (0X02D0) SWVR_GetlmageExit 

00721 (0X02D1) SWVR_ComplndxFrameExit 

00722 (0X02D2) SWVR_CompRefrFrameExit 

00723 (0X02D3) SWVR_PostBufferFullExit 

00724 (0X02D4) SWVR_PostBufferEmptyExit 

00725 (0X02D5) SWVR_WaitMsgBufferFullExit 

00726 (0X02D6) SWVR_WaitMsgBufferEmptyExit 

00727 (0X02D7) SWVR_PostCountErrorExit 

00728 (0X02D8) SWVR_BufferWriteDoneExit 

00729 (0X02D9) SWVR_VCADosDevlOCTLExit 

00730 (0X02DA) SWVR_VCABufferCopyExit 

00731 (0X02DB) SWVR_VCAtoX4CopyExit 

00732 (0X02DC) SWVR_VCAtoX2CopyExit 

00733 (0X02DD) SWVR_VCA640CopyExit 

00740 (0X02E4) SVSH_DecompBufferExit 

00741 (0X02E5) ULDC_DLLDroppedExit 

00745 (0X02E9) SVMC_SetBitmapExit 

00746 (0X02EA) SVMC_BitBltExit 

00747 (0X02EB) SVMC_BlitUpExit 

00748 (0X02EC) SVMC_SpiMoveCoorExit 


Trace Events for Multi-Media Extensions Major Code 
0 X 006 D, Sorted by Tracepoint 


00621 (0X026D) 

ACP_ACPADevintEntry 00080 (0X0050) 
ACP_ACPADevlntExit 00208 (0X00D0) 
ACP_DevReportError 00097 (0X0061) 
ACP_DevReportError 00225 (0X00E1) 
ADH_ADSHIntHandlerEntry 00081 (0X0051) 
ADH_ADSHIntHandlerExit 00209 (0X00D1) 
ADH__EventHandlerEntry 00096 (0X0060) 
ADH_EventHandlerExit 00224 (0X00E0) 
ADFI_GetEmptyEntry 00085 (0X0055) 
ADH_GetEmptyExit 00213 (0X00D5) 
ADFI_GetFullEntry 00087 (0X0057) 
ADH_GetFullExit 00215 (0X00D7) 
ADFI_ReportCueDataEntry 00093 (0X005D) 
ADFI_ReportCueDataExit 00221 (0X00DD) 
ADFI_ReportCueTimeEntry 00092 (0X005C) 
ADFI_ReportCueTimeExit 00220 (0X00DC) 
ADFI_ReportDatallnderEntry 00094 (0X005E) 
ADFI_ReportDataUnderExit 00222 (0X00DE) 
ADFI_ReportEOSEntry 00089 (0X0059) 
ADH_ReportEOSExit 00217 (0X00D9) 
ADH_ReportErrorEntry 00090 (0X005A) 
ADH_ReportErrorExit 00218 (0X00DA) 
ADH_ReportPLCueEntry 00091 (0X005B) 
ADFI_ReportPLCueExit 00219 (0X00DB) 
ADFI_ReportSyncOverEntry 00095 (0X005F) 
ADH_ReportSyncOverExit 00223 (0X00DF) 
AD FI_Retu rn E mpty Entry 00088 (0X0058) 
ADH_ReturnEmptyExit 00216 (0X00D8) 
ADFLReturnFullEntry 00086 (0X0056) 
ADH_ReturnFullExit 00214 (0X00D6) 
ADH_SHCCreateEntry 00082 (0X0052) 


ADH_SHCCreateExit 00210 (0X00D2) 
ADH_SHCStartEntry 00083 (0X0053) 
ADH_SHCStartExit 0021 1 (0X00D3) 
ADH_SHCStopEntry 00084 (0X0054) 
ADH_SHCStopExit 00212 (0X00D4) 
ADSH_AddBufEntry 00101 (0X0065) 
ADSH_AddBufExit 00229 (0X00E5) 
ADSH_DLLIntEntry 00106 (0X006A) 
ADSH_DLLIntExit 00234 (OXOOEA) 
ADSH_GetBufferEntry 00104 (0X0068) 
ADSH_GetBufferExit 00232 (0X00E8) 
ADSH_IDCControlEntry 00107 (0X006B) 
ADSHJDCControlExit 00235 (0X00EB) 
ADSH_IDCSetupEntry 00108 (0X006C) 
ADSH_IDCSetupExit 00236 (OXOOEC) 
ADSHJDCWriteEntry 00103 (0X0067) 
ADSH_IDCWriteExit 00231 (0X00E7) 
ADSH_RemoveBufEntry 00102 (0X0066) 
ADSH_RemoveBufExit 00230 (0X00E6) 
ADSH_RetBufferEntry 00105 (0X0069) 
ADSH_RetBufferExit 00233 (0X00E9) 
ADSH_SendBufferEntry 00109 (0X006D) 
ADSH_SendBufferExit 00237 (OXOOED) 
BUF_Record_Entry 00031 (0X001 F) 
BUF_Record_Exit 00159 (0X009F) 
CDSH_StartCddaRead 00113 (0X0071) 
CDSFI_StartCddaWrite 00114 (0X0072) 
CDSH_StartCdReadloctl 00112 (0X0070) 
CDSFI_StopCddaRead 00241 (0X00F1) 
CDSH_StopCddaWrite 00242 (0X00F2) 
CDSFI_StopCdReadloctl 00240 (OXOOFO) 
GET_EMPTY_Entry 00027 (0X001 B) 
GETJEMPTY_Exit 00155 (0X009B) 
GET_FULL_Entry 00028 (0X001 C) 
GET_FULL_Exit 00156 (0X009C) 
MDM_MCDOpen_Entry 00260 (0X0104) 
MDM_MCDOpen_Exit 00388 (0X0184) 
MDM_mciClose_Entry 00262 (0X0106) 
MDM_mciClose_Exit 00390 (0X0186) 
MDM_mciMakeActive_Entry 00261 (0X0105) 
MDM_mciMakeActive_Exit 00389 (0X0185) 
MDM_mciOpen_Entry 00259 (0X0103) 
MDM_mciOpen_Exit 00387 (0X0183) 
MDM_mciSendCommandEntry 00258 (0X0102) 
MDM_mciSendCommandExit 00386 (0X0182) 
MDM_mciSendStringEntry 00257 (0X0101) 
MDM_mciSendStringExit 00385 (0X0181) 
MDM_RESTORE_Entry 00263 (0X0107) 
MDM_RESTORE_EXIT 00391 (0X0187) 
MDM_SAVE_Entry 00264 (0X0108) 
MDM_SAVE_EXIT 00392 (0X0188) 
MDM_Thread_call_Entry 00265 (0X0109) 

M DM_Th read_cal l_Exit 00393 (0X0189) 
MIO_DosClose_Entry 00517 (0X0205) 
MIO_DosClose_Exit 00645 (0X0285) 
MIO_DosDelete_Entry 00518 (0X0206) 
MIO_DosDelete_Exit 00646 (0X0286) 
MIO_DosOpen_Entry 00513 (0X0201) 
MIO_DosOpen_Exit 00641 (0X0281) 

M 1 0_Dos Read_E ntry 00514 (0X0202) 

M 1 0_Dos Read_Exit 00642 (0X0282) 
MIO_DosSeek_Entry 00516 (0X0204) 
MIO_DosSeek_Exit 00644 (0X0284) 
MIO_DosWrite_Entry 00515 (0X0203) 

M 1 0_Dos Write_Exit 00643 (0X0283) 
MIO_MemClose_Entry 00523 (0X020B) 
MIO_MemClose_Exit 00651 (0X028B) 
MIO_MemOpen_Entry 00519 (0X0207) 
MIO_MemOpen_Exit 00647 (0X0287) 
MIO_MemRead_Entry 00520 (0X0208) 
MIO_MemRead_Exit 00648 (0X0288) 
MIO_MemSeek_Entry 00522 (0X020A) 
MIO_MemSeek_Exit 00650 (0X028A) 


MIO_MemWrite_Entry 00521 (0X0209) 
MIO_MemWrite_Exit 00649 (0X0289) 
MIO_MidiClose_Entry 00557 (0X022D) 
MIO_MidiClose_Exit 00685 (0X02AD) 
MIO_MidiOpen_Entry 00553 (0X0229) 
MIO_MidiOpen_Exit 00681 (0X02A9) 

M 1 0_M idi Read_Entry 00554 (0X022A) 
MIO_MidiRead_Exit 00682 (0X02AA) 
MIO_MidiSeek_Entry 00556 (0X022C) 
MIO_MidiSeek_Exit 00684 (0X02AC) 
MIO_MidiWrite_Entry 00555 (0X022B) 
MIO_MidiWrite_Exit 00683 (0X02AB) 
MIO_mmioAdvance_Entry 00532 (0X0214) 
MIO_mmioAdvance_Exit 00660 (0X0294) 
MIO_mmioAquireSem_Entry 00535 (0X0217) 
MIO_mmioAquireSem_Exit 00663 (0X0297) 
MIO_mmioAscend_Entry 00530 (0X0212) 
MIO_mmioAscend_Exit 00658 (0X0292) 
MIO_mmioCFAddElem_Entry 00550 (0X0226) 
MIO_mmioCFAddElem_Exit 00678 (0X02A6) 
MIO_mmioCFAddEnt_Entry 00546 (0X0222) 
MIO_mmioCFAddEnt_Exit 00674 (0X02A2) 
MIO_mmioCFAddShrEnt_Exit 00669 (0X029D) 
MIO_mmioCFAddShrEnt_Entry 00541 (0X021 D) 
MIO_mmioCFChgEnt_Entry 00547 (0X0223) 
MIO_mmioCFChgEnt_Exit 00675 (0X02A3) 
MIO_mmioCFCIose_Entry 00539 (0X021 B) 
MIO_mmioCFCIose_Exit 00667 (0X029B) 
MIO_mmioCFCIsTmpElem_Exit 00673 (0X02A1) 
MIO_mmioCFCIsTmpElem_Entry 00545 (0X0221) 
MIO_mmioCFCopy_Entry 00548 (0X0224) 
MIO_mmioCFCopy_Exit 00676 (0X02A4) 
MIO_mmioCFDelEnt_Entry 00549 (0X0225) 
MIO_mmioCFDelEnt_Exit 00677 (0X02A5) 
MIO_mmioCFFndEnt_Entry 00551 (0X0227) 
MIO_mmioCFFndEnt_Exit 00679 (0X02A7) 
MIO_mmioCFGetlnfo_Entry 00543 (0X021 F) 
MIO_mmioCFGetlnfo_Exit 00671 (0X029F) 
MIO_mmioCFOpen_Entry 00538 (0X021 A) 
MIO_mmioCFOpen_Exit 00666 (0X029A) 
MIO_mmioCFOpnTmpElem_Exit 00672 (0X02A0) 
MIO_mmioCFOpnTmpElem_Entry 00544 (0X0220) 
MIO_mmioCFRmvShrEnt_Entry 00540 (0X021 C) 
MIO_mmioCFRmvShrEnt_Exit 00668 (0X029C) 
MIO_mmioCFSetlnfo_Entry 00542 (0X021 E) 
MIO_mmioCFSetlnfo_Exit 00670 (0X029E) 
MIO_mmioClose_Entry 00525 (0X020D) 
MIO_mmioClose_Exit 00653 (0X028D) 
MIO_mmioCreateChunk_Entry 00537 (0X0219) 
MIO_mmioCreateChunk_Exit 00665 (0X0299) 
MIO_mmioDescend_Entry 00531 (0X0213) 
MIO_mmioDescend_Exit 00659 (0X0293) 
MIO_mmioDiscardSem_Exit 00664 (0X0298) 
MIO_mmioDiscardSem_Entry 00536 (0X0218) 
MIO_mmioFlush_Entry 00529 (0X0211) 
MIO_mmioFlush_Exit 00657 (0X0291) 
MIO_mmioldentFile_Entry 00552 (0X0228) 
MIO_mmioldentFile_Exit 00680 (0X02A8) 
MIO_mmiolnstlOProc_Exit 00661 (0X0295) 
MIO_mmiolnstlOProc_Entry 00533 (0X0215) 
MIO_mmioOpen_Entry 00524 (0X020C) 
MIO_mmioOpen_Exit 00652 (0X028C) 
MIO_mmioRead_Entry 00526 (0X020E) 
MIO_mmioRead_Exit 00654 (0X028E) 
MIO_mmioSeek_Entry 00528 (0X0210) 
MIO_mmioSeek_Exit 00656 (0X0290) 
MIO_mmioSendMsg_Entry 00534 (0X0216) 
MIO_mmioSendMsg_Exit 00662 (0X0296) 
MIO_mmioWrite_Entry 00527 (0X020F) 
MIO_mmioWrite_Exit 00655 (0X028F) 
MSH_RdPlayList_Entry 00576 (0X0240) 
MSH_RdPlayList_Exit 00704 (0X02C0) 
MSH_WrPlayList_Entry 00577 (0X0241) 


MSH_WrPlayList_Exit 00705 (0X02C1) 
MTSH_GetEmptyEntry 00324 (0X0144) 
MTSH_GetEmptyExit 00452 (0X01 C4) 
MTSH_ReturnFullEntry 00325 (0X0145) 
MTSH_ReturnFullExit 00453 (0X01 C5) 
RET_EMPTY_Entry 00029 (0X001 D) 
RET_EMPTY_Exit 00157 (0X009D) 
RET_FULL_Entry 00030 (0X001 E) 
RET_FULL_Exit 00158 (0X009E) 
SMH_ReportEventO 00032 (0X0020) 
SSM_AppEvent3_Entry 00060 (0X003C) 
SSM_AppEvent3_Exit 00188 (OXOOBC) 
SSM_AppEventQ_Entry 00061 (0X003D) 
SSM_AppEventQ_Exit 00189 (OXOOBD) 
SSM_CreateBDS 00064 (0X0040) 
SSM_CreateBDSNotMax 00192 (OXOOCO) 

SSM IDCDeRegEntry 00025 (0X0019) 

SSM IDCDeRegExit 00153 (0X0099) 
SSM_IDCNotifyEntry 00024 (0X0018) 
SSMJDCNotifyExit 00152 (0X0098) 
SSM_IDCRptEvtEntry 00026 (0X001 A) 
SSMJDCRptEvtExit 00154 (0X009A) 
SSM_IDC_Call_To_SHC 00023 (0X0017) 
SSM_IDC_Ret_From_SHC 00151 (0X0097) 
SSM_loctl_Entry 00022 (0X0016) 
SSM_loctl_Exit 00150 (0X0096) 
SSM_Negotiate_error 00160 (OXOOAO) 
SSM_ProcBlock_Entry 00021 (0X0015) 
SSM_ProcBlock_Exit 00149 (0X0095) 
SSM_ProcRun_Entry 00020 (0X0014) 
SSM_ProcRun_Exit 00148 (0X0094) 
SSM_QueueEventlOCtl_Entry 00063 (0X003F) 
SSM_QueueEventlOCtl_Exit 00191 (OXOOBF) 
SSM_ShcAssociate_Entry 00001 (0X0001) 
SSM_ShcAssociate_Exit 00129 (0X0081) 
SSM_ShcClose_Entry 00002 (0X0002) 
SSM_ShcClose_Exit 00130 (0X0082) 
SSM_ShcCreate_Entry 00003 (0X0003) 
SSM_ShcCreate_Exit 00131 (0X0083) 
SSM_ShcDestroy_Entry 00004 (0X0004) 
SSM_ShcDestroy_Exit 00132 (0X0084) 
SSM_ShcDisableEvt_Entry 00009 (0X0009) 
SSM_ShcDisableEvt_Exit 00137 (0X0089) 
SSM_ShcDisableSync_Exit 00139 (0X008B) 
SSM_ShcDisableSync_Entry 0001 1 (OXOOOB) 
SSM_ShcEnableEvt_Entry 00008 (0X0008) 
SSM_ShcEnableEvt_Exit 00136 (0X0088) 
SSM_ShcEnableSync_Entry 00010 (OXOOOA) 
SSM_ShcEnableSync_Exit 00138 (0X008A) 
SSM_ShcEnumProtocol_Exit 00143 (0X008F) 
SSM_ShcEnumProtocol_Entry 00015 (OXOOOF) 
SSM_ShcGetProtocol_Exit 00141 (0X008D) 
SSM_ShcGetProtocol_Entry 00013 (OXOOOD) 
SSM_ShcGetTime_Entry 00012 (OXOOOC) 
SSM_ShcGetTime_Exit 00140 (0X0O8C) 
SSM_ShclnstProtocol_Exit 00142 (0X008E) 
SSM_ShclnstProtocol_Entry 00014 (OXOOOE) 
SSM_ShcNegotReslt_Entry 00016 (0X0010) 
SSM_ShcNegotReslt_Exit 00144 (0X0090) 
SSM_ShcRouterRing3_Entry 00058 (0X003A) 
SSM_ShcRouterRing3_Exit 00186 (OXOOBA) 
SSM_ShcRouter_Entry 00057 (0X0039) 
SSM_ShcRouter_Exit 00185 (0X00B9) 
SSM_ShcSeek_Entry 00007 (0X0007) 
SSM_ShcSeek_Exit 00135 (0X0087) 
SSM_ShcSendMsg_Entry 00017 (0X0011) 
SSM_ShcSendMsg_Exit 00145 (0X0091) 
SSM_ShcStart_Entry 00005 (0X0005) 
SSM_ShcStart_Exit 00133 (0X0085) 
SSM_ShcStop_Entry 00006 (0X0006) 
SSM_ShcStop_Exit 00134 (0X0086) 
SSM_SmhDeRegister_Entry 00039 (0X0027) 
SSM_SmhDeRegister_Exit 00167 (0X00A7) 


SSM_SmhLockMem_Entry 00040 (0X0028) 
SSM_SmhLockMem_Exit 00168 (0X00A8) 
SSM_SmhNotifylOCtl_Entry 00062 (0X003E) 
SSM_SmhNotifylOCtl_Exit 00190 (0X00BE) 
SSM_SmhNotify_Entry 00038 (0X0026) 
SSM_SmhNotify_Exit 00166 (0X00A6) 
SSM_SmhRegister_Entry 00036 (0X0024) 
SSM_SmhRegister_Exit 00164 (0X00A4) 
SSM_SmhReportEvnt_Entry 00037 (0X0025) 
SSM_SmhReportEvnt_Exit 00165 (0X00A5) 
SSM_SmhRing3_Entry 00035 (0X0023) 
SSM_SmhRing3_Exit 00163 (0X00A3) 
SSM_SmhRptEventSync_Entry 00059 ( 0X003B) 
SSM_SpiAddStrConn Entry 00071 (0X0047) 
SSM_SpiAddStrConn Exit 00199 (0X00C7) 
SSM_SpiAssociate_Entry 00041 (0X0029) 
SSM_SpiAssociate_Exit 00169 (0X00A9) 
SSM_SpiAssStrNetEntry 00067 (0X0043) 
SSM_SpiAssStrNetExit 00195 (OXOOC3) 
SSM_SpiCloseStrNetEntry 00068 (0X0044) 
SSM_SpiCloseStrNetExit 00196 (0X00C4) 
SSM_SpiConnStrEntry 00069 (0X0045) 
SSM_SpiConnStrExit 00197 (0X00C5) 
SSM_SpiCreate_Entry 00042 (0X002A) 
SSM_SpiCreate_Exit 00170 (OXOOAA) 
SSM_SpiDeactStrEntry 00070 (0X0046) 
SSM_SpiDeactStrExit 00198 (0X00C6) 
SSM_SpiDestroy_Entry 00043 (0X0O2B) 
SSM_SpiDestroy_Exit 00171 (OXOOAB) 
SSM_SpiDetSyncMaster_Entry 00065 (0X0041) 
SSM_SpiDetSyncMaster_Exit 00193 (0X00C1) 
SSM_SpiDisableEvent_Entry 00054 (0X0036) 
SSM_SpiDisableEvent_Exit 00182 (0X00B6) 
SSM_SpiDisableSync_Exit 00184 (0X00B8) 
SSM_SpiDisableSync_Entry 00056 (0X0038) 
SSM_SpiEnableEvent_Entry 00053 (0X0035) 
SSM_SpiEnableEvent_Exit 00181 (0X00B5) 
SSM_SpiEnableSync_Entry 00055 (0X0037) 
SSM_SpiEnableSync_Exit 00183 (OXOOB7) 
SSM_SpiEnumHndlr_Entry 00045 (0X002D) 
SSM_SpiEnumHndlr_Exit 00173 (OXOOAD) 
SSM_SpiEnumProtocoi_Entry 00044 (0X002C) 
SSM_SpiEnumProtocol_Exit 00172 (OXOOAC) 
SSM_SpiGetHndlr_Entry 00046 (0X002E) 
SSM_SpiGetHndlr_Exit 00174 (OXOOAE) 
SSM_SpiGetProtocol_Exit 00175 (OXOOAF) 
SSM_SpiGetProtocol_Entry 00047 (0X002F) 
SSM_SpiGetTime_Entry 00048 (0X0030) 
SSM_SpiGetTime_Exit 00176 (OXOOBO) 
SSM_SpilnstProtocol_Exit 00177 (0X00B1) 
SSM_SpilnstProtocol_Entry 00049 (0X0031) 
SSM_SpiOpenStrNetEntry 00072 (0X0048) 
SSM_SpiOpenStrNetExit 00200 (0X00C8) 
SSM_SpiReactStrEntry 00073 (0X0049) 
SSM_SpiReactStrExit 00201 (0X00C9) 
SSM_SpiRemStrConnEntry 00074 (0X004A) 
SSM_SpiRemStrConnExit 00202 (OXOOCA) 
SSM_SpiSeekStrm_Entry 00050 (0X0032) 
SSM_SpiSeekStrm_Exit 00178 (0X00B2) 
SSM_SpiSeekStrNetEntry 00075 (0X004B) 
SSM_SpiSeekStrNetExit 00203 (OXOOCB) 
SSM_SpiSendMsg_Entry 00066 (0X0042) 
SSM_SpiSendMsg_Exit 00194 (0X00C2) 
SSM_SpiStartStrm_Entry 00051 (0X0033) 
SSM_SpiStartStrm_Exit 00179 (0X00B3) 
SSM_SpiStartStrNetEntry 00076 (0X004C) 
SSM_SpiStartStrNetExit 00204 (OXOOCC) 
SSM_SpiStopStrm_Entry 00052 (0X0034) 
SSM_SpiStopStrm_Exit 00180 (0X00B4) 
SSM_SpiStopStrNetEntry 00077 (0X004D) 
SSM_SpiStopStrNetExit 00205 (OXOOCD) 
SSM_SpiUnassStrNetEntry 00078 (0X004E) 
SSM_SpiUnassStrNetExit 00206 (OXOOCE) 


SSM_xxxllnused1 00187 (0X00BB) 
SVMC_BitBltEntry 00618 (0X026A) 
SVMC_BitBltExit 00746 (0X02EA) 
SVMC_BlitUpEntry 00619 (0X026B) 
SVMC_BlitUpExit 00747 (0X02EB) 
SVMC_SetBitmapEntry 00617 (0X0269) 
SVMC_SetBitmapExit 00745 (0X02E9) 
SVMC_SpiMoveCoorEntry 00620 (0X026C) 
SVMC_SpiMoveCoorExit 00748 (0X02EC) 
SVSH_DecompBufferEntry 00612 (0X0264) 
SVSH_DecompBufferExit 00740 (0X02E4) 
SWVR_BufferWriteDoneExit 00728 (0X02D8) 
SWVR_BufferWriteStartEntry 00600 (0X0258) 
SWVR_ComplndxFrameEntry 00593 (0X0251) 
SWVR_ComplndxFrameExit 00721 (0X02D1) 
SWVR_CompRefrFrameEntry 00594 (0X0252) 
SWVR_CompRefrFrameExit 00722 (0X02D2) 
SWVR_GetlmageEntry 00592 (0X0250) 
SWVR_GetlmageExit 00720 (0X02D0) 
SWVR_PostBufferEmptyEntry 00596 (0X0254) 
SWVR_PostBufferEmptyExit 00724 (0X02D4) 
SWVR_PostBufferFullExit 00723 (0X02D3) 
SWVR_PostBufferFullEntry 00595 (0X0253) 
SWVR_PostCountErrorExit 00727 (0X02D7) 
SWVR_PostCountErrorEntry 00599 (0X0257) 
SWVR_VCA640CopyEntry 00605 (0X025D) 
SWVR_VCA640CopyExit 00733 (0X02DD) 
SWVR_VCABufferCopyEntry 00602 (0X025A) 
SWVR_VCABufferCopyExit 00730 (0X02DA) 
SWVR_VCADosDevlOCTLExit 00729 (0X02D9) 
SWVR_VCADosDevlOCTLEntry 00601 (0X0259) 
SWVR_VCAtoX2CopyEntry 00604 (0X025C) 
SWVR_VCAtoX2CopyExit 00732 (0X02DC) 
SWVR_VCAtoX4CopyEntry 00603 (0X025B) 
SWVR_VCAtoX4CopyExit 00731 (0X02DB) 
SWVR_WaitMsgBufferEmptyExit 00726 (0X02D6) 
SWVR_WaitMsgBufferEmptyEntry 00598 (0X0256) 
SWVR_WaitMsgBufferFullEntry 00597 (0X0255) 
SWVR_WaitMsgBufferFullExit 00725 (0X02D5) 
ULDC_DLLDroppedEntry 00613 (0X0265) 
ULDC_DLLDroppedExit 00741 (0X02E5) 
UNUSED_HOOK_109_01 8 00018 (0X0012) 
UNUSED_HOOK_109_01 9 00019 (0X0013) 
UNUSED_HOOK_109_033 00033 (0X0021) 
UNUSED_HOOK_109_034 00034 (0X0022) 
UNUSED_HOOK_109_146 00146 (0X0092) 
UNUSED_HOOK_109_147 00147 (0X0093) 
UNUSED_HOOK_109_161 00161 (OXOOAI) 
UNUSED_HOOK_109_162 00162 (0X00A2) 


Multi-Media Extensions Major Code: 0X006D Minor Code: 1 
(0X0001) 


Description 

SSM_ShcAssociate_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

1 (0X0001) 

Trace Groups 


SSMSRV 


Trace Types 
Traced Parameters 


No types assigned. 


hstream=%F hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 2 
(0X0002) 

Description 

SSM_ShcClose_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

2 (0X0002) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 3 
(0X0003) 

Description 

SSM_ShcCreate_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

3 (0X0003) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F DataType=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 4 
(0X0004) 


Description 

SSM_ShcDestroy_Entry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

4 (0X0004) 

Trace Groups 

SSMSRV 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hstream=%F hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 5 
(0X0005) 

Description 

SSM_ShcStart_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

5 (0X0005) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 6 
(0X0006) 



Description 


SSM_ShcStop_Entry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

6 (0X0006) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 7 
(0X0007) 

Description 

SSM_ShcSeek_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

7 (0X0007) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 8 
(0X0008) 


Description 

SSM_ShcEnableEvt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

8 (0X0008) 


Trace Groups 



SSMSRV 


Trace Types 
Traced Parameters 


No types assigned. 


hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 9 
(0X0009) 

Description 

SSM_ShcDisableEvt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

9 (0X0009) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F hevent=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 10 
(0X000A) 

Description 

SSM_ShcEnableSync_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

10 (0X0O0A) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F ulFlags=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 1 1 
(0X000B) 


Description 

SSM_ShcDisableSync_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

11 (OXOOOB) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 12 
(0X000C) 

Description 

SSM_ShcGetTime_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

12 (0X000C) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 13 
(0X000D) 



Description 


SSM_ShcGetProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

13 (OXOOOD) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F FtingLvl=%F DataType=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 14 
(0X000E) 

Description 

SSM_ShclnstProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

14 (OXOOOE) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RingLvl=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 15 
(0X000F) 


Description 

SSM_ShcEnumProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

15 (OXOOOF) 


Trace Groups 



SSMSRV 


Trace Types 
Traced Parameters 


No types assigned. 


hid=%F RingLvl=%F NumKeys=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 16 
(0X0010) 

Description 

SSM_ShcNegotReslt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

16 (0X0010) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 17 
(0X0011) 

Description 

SSM_ShcSendMsg_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

17 (0X0011) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RingLvl=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 18 
(0X0012) 


Description 

UNUSED_HOOK_1 09_01 8 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

18 (0X0012) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 19 
(0X0013) 

Description 

UNUSED_HOOK_1 09_01 9 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

19 (0X0013) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 20 
(0X0014) 



Description 


SSM_ProcRun_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

20 (0X0014) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


ProcKey=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 21 
(0X0015) 

Description 

SSM_ProcBlock_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

21 (0X0015) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 22 
(0X0016) 


Description 

SSM_loctl_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

22 (0X0016) 


Trace Groups 



SSMDD 


Trace Types 
Traced Parameters 


No types assigned. 


Funct/Catg=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 23 
(0X0017) 

Description 

SSM_IDC_Call_To_SHC 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

23 (0X0017) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F Function=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 24 
(0X0018) 

Description 

SSMJDCNotifyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

24 (0X0018) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F Flags=%F ulGetNumEn=%F ulRetNumEn=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 25 
(0X0019) 


Description 

SSM_IDCDeRegEntry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

25 (0X0019) 

Trace Groups 

SSMDD 

Trace Tvpes 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 26 
(0X001 A) 

Description 

SSMJDCRptEvtEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

26 (0X001 A) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F ulType=%F ulSubType=%F hstream=%F ulStatus=%F LowParm1=%F FlighParm1=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 27 
(0X001 B) 



Description 


GET_EMPTY_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

27 (0X001 B) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hstreamOwner=%F hbcbFull=%F hbcbEmpty=%F ulBDSFIag=%F ulSCBFIag=%F ulNumFull=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 28 
(0X001 C) 

Description 

GET_FULL_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

28 (0X001 C) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hstreamOwner=%F hbcbFull=%F hbcbEmpty=%F ulBDSFIag=%F ulSCBFIag=%F ulNumFull=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 29 
(0X001 D) 


Description 

RET_EMPTY_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

29 (0X001 D) 


Trace Groups 



SSMNOTIC 


Trace Types 
Traced Parameters 


No types assigned. 


hstream=%F pBuffer=%F pRecord=%F ulLength=%F ulBDSFIag=%F ulSCBFIag=%F ulNumFull=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 30 
(0X001 E) 

Description 

FtET_FULL_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

30 (0X001 E) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F pBuffer=%F pRecord=%F ulLength=%F ulBDSFIag=%F ulSCBFIag=%F ulNumFull=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 31 
(0X001 F) 

Description 

BUF_Record_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

31 (0X001 F) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


ulNumllsers=%F ulNumRecords=%F rcbFlead=%F rcbFull=%F NumAIIFull=%F NumSrcOwn=%F NumTgtOwn=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 32 
(0X0020) 


Description 

SM FI_ReportEventO 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

32 (0X0020) 

Trace Groups 

SSMEVDDC 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hstream=%F hid=%F ulType=%F ulSubType=%F ulStatus=%F ulParm1=%F ulParm2=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 33 
(0X0021) 

Description 

UNUSED_HOOK_1 09_033 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

33 (0X0021) 

Trace Groups 

SSMEVDDC 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 34 
(0X0022) 



Description 


UNUSED_HOOK_1 09_034 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

34 (0X0022) 

Trace Groups 

SSMEVDDC 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 35 
(0X0023) 

Description 

SSM_SmhRing3_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

35 (0X0023) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Function#=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 36 
(0X0024) 


Description 

SSM_SmhRegister_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

36 (0X0024) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


Function#=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 37 
(0X0025) 

Description 

SSM_Smh ReportEvnt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

37 (0X0025) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hevent=%F hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 38 
(0X0026) 

Description 

SSM_SmhNotify_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

38 (0X0026) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F Flags=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 39 
(0X0027) 


Description 

SSM_SmhDeRegister_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

39 (0X0027) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Function#=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 40 
(0X0028) 

Description 

SSM_SmhLockMem_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

40 (0X0028) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Function#=%F Flags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 41 
(0X0029) 



Description 


SSM_SpiAssociate_Entry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

41 (0X0029) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 42 
(0X002A) 

Description 

SSM_SpiCreate_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

42 (0X0O2A) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstreamBuf=%F hidSrc=%F hidTgt=%F DataType=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 43 
(0X002B) 


Description 

SSM_SpiDestroy_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

43 (0X0O2B) 


Trace Groups 



SSMAPI 


Trace Types 

No types assigned. 

Traced Parameters 

hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 44 
(0X002C) 

Description 

SSM_SpiEnumProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

44 (0X0O2C) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 45 
(0X002D) 

Description 

SSM_SpiEnumFlndlr_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

45 (0X0O2D) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 46 
(0X002E) 


Description 

SSM_SpiGetHndlr_Entry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

46 (0X0O2E) 

Trace Groups 

SSMAPI 

Trace Tvpes 

No types assigned. 

Traced Parameters 



N=%F A=%F M=%F E=%F !=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 47 
(0X002F) 

Description 

SSM_SpiGetProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

47 (0X002F) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F Datatype=%F DataSubType=%F ullntKey=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 48 
(0X0030) 



Description 


SSM_SpiGetTime_Entry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

48 (0X0030) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 49 
(0X0031) 

Description 

SSM_SpilnstProtocol_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

49 (0X0031) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F Datatype=%F DataSubType=%F ullntKey=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 50 
(0X0032) 


Description 

SSM_SpiSeekStrm_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

50 (0X0032) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hstream=%F Flags=%F ISeekFI=%F ISeekL=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 51 
(0X0033) 

Description 

SSM_SpiStartStrm_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

51 (0X0033) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F Flags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 52 
(0X0034) 

Description 

SSM_SpiStopStrm_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

52 (0X0034) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F Flags=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 53 
(0X0035) 


Description 

SSM_SpiEnableEvent_Entry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

53 (0X0035) 

Trace Groups 

SSMAPI 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hstream=%F hid=%F ulType=%F ulSubType=%F Parm1=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 54 
(0X0036) 

Description 

SSM_SpiDisableEvent_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

54 (0X0036) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hevent=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 55 
(0X0037) 



Description 


SSM_SpiEnableSync_Entry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

55 (0X0037) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstreamMast=%F #slaves=%F mmtimeSync=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 56 
(0X0038) 

Description 

SSM_SpiDisableSync_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

56 (0X0038) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 57 
(0X0039) 


Description 

SSM_ShcRouter_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

57 (0X0039) 


Trace Groups 



SSMSRV 


Trace Types 

No types assigned. 

Traced Parameters 


hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 58 
(0X003A) 

Description 

SSM_ShcRouterRing3_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

58 (0X0O3A) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 59 
(0X003B) 

Description 

SSM_SmhRptEventSync_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

59 (0X0O3B) 

Trace Groups 

SSMEVDLL 

Trace Types 

No types assigned. 

Traced Parameters 


hstreamSlave=%F mmtimeSlave=%F hstreamMast=%F hidMast=%F mmtimeMast=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 60 
(0X003C) 


Description 

SSM_AppEvent3_Entry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

60 (0X0O3C) 

Trace Groups 

SSMEVDLL 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hstream=%F hevent=%F ulType=%F ulSubType=%F ulStatus=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 61 
(0X003D) 

Description 

SSM_AppEventQ_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

61 (0X0O3D) 

Trace Groups 

SSMEVDLL 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hevent=%F ulType=%F ulSubType=%F ulStatus=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 62 
(0X003E) 



Description 


SSM_SmhNotifylOCtl_Entry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

62 (0X0O3E) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F Flags=%F ulGetNumEn=%F ulFtetNumEn=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 63 
(0X003F) 

Description 

SSM_QueueEventlOCtl_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

63 (0X0O3F) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F ulType=%F ulSubType=%F hstream=%F ulStatus=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 64 
(0X0040) 


Description 

SSM_CreateBDS 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

64 (0X0040) 


Trace Groups 



SSMBUFF 


Trace Types 
Traced Parameters 


No types assigned. 


ulMinBuf=%F ulMaxBuf=%F ulNumBCB=%F ulFleapSize=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 65 
(0X0041) 

Description 

SSM_SpiDetSyncMaster_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

65 (0X0041) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


#masters=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 66 
(0X0042) 

Description 

SSM_SpiSendMsg_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

66 (0X0042) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F ulMsgType=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 67 
(0X0043) 


Description 

SSM_SpiAssStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

67 (0X0043) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 68 
(0X0044) 

Description 

SSM_SpiCloseStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

68 (0X0044) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 69 
(0X0045) 



Description 


SSM_SpiConnStrEntry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

69 (0X0045) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hidSrc=%F hidTgt=%F datatype=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 70 
(0X0046) 

Description 

SSM_SpiDeactStrEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

70 (0X0046) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 71 
(0X0047) 


Description 

SSM_SpiAddStrConnEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

71 (0X0047) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hnetwork=%F hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 72 
(0X0048) 

Description 

SSM_SpiOpenStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

72 (0X0048) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 73 
(0X0049) 

Description 

SSM_SpiReactStrEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

73 (0X0049) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 74 
(0X004A) 


Description 

SSM_SpiRemStrConnEntry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

74 (OX004A) 

Trace Groups 

SSMAPI 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 75 
(0X004B) 

Description 

SSM_SpiSeekStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

75 (OX004B) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F ulFlags=%F ISeekPoint=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 76 
(0X004C) 



Description 


SSM_SpiStartStrNetEntry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

76 (OX004C) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 77 
(0X004D) 

Description 

SSM_SpiStopStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

77 (OX004D) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 78 
(0X004E) 


Description 

SSM_SpiUnassStrNetEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

78 (OX004E) 


Trace Groups 



SSMAPI 


Trace Types 

No types assigned. 

Traced Parameters 

hnetwork=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 80 
(0X0050) 

Description 

ACP_ACPADevintEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

80 (0X0050) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Card=%F ID=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 81 
(0X0051) 

Description 

ADH_ADSHIntHandlerEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

81 (0X0051) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F pBuffer=%F ulFlag=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 82 
(0X0052) 


Description 

ADH_SHCCreateEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

82 (0X0052) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 83 
(0X0053) 

Description 

ADH_SHCStartEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

83 (0X0053) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 84 
(0X0054) 



Description 


ADH_SHCStopEntry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

84 (0X0054) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 85 
(0X0055) 

Description 

ADFI_GetEmptyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

85 (0X0055) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 86 
(0X0056) 


Description 

ADH_FteturnFullEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

86 (0X0056) 


Trace Groups 



ADSH 


Trace Types 
Traced Parameters 


No types assigned. 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 87 
(0X0057) 

Description 

ADFI_GetFullEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

87 (0X0057) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 88 
(0X0058) 

Description 

AD H_Retu rn E mpty Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

88 (0X0058) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 89 
(0X0059) 


Description 

ADFI_ReportEOSEntry 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

89 (0X0059) 

Trace Groups 

ADSH 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 90 
(0X005A) 

Description 

ADFI_ReportErrorEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

90 (0X005A) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 91 
(0X005B) 


Description 



ADH_ReportPLCueEntry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

91 (0X0O5B) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 92 
(0X005C) 

Description 

ADH_ReportCueTimeEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

92 (0X0O5C) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 93 
(0X005D) 


Description 

ADH_ReportCueDataEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

93 (0X0O5D) 

Trace Groups 

ADSH 

Trace Types 


No types assigned. 



Traced Parameters 


No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 94 
(0X005E) 

ADH_ReportDatallnderEntry 
Static trace point in Multi-Media Extensions. 

94 (0X005E) 

ADSH 

No types assigned. 

hStream=%F ulStatus=%F ulStateFlg=%F CurrBuflndex=%F EOSBuflndex=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 95 
(0X005F) 

ADFI_ReportSyncOverEntry 
Static trace point in Multi-Media Extensions. 

95 (0X0O5F) 

ADSH 

No types assigned. 

hStream=%F ulStatus=%F ulStateFlg=%F CurrBuflndex=%F EOSBuflndex=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 96 





(0X0060) 


Description 

ADH_EventFlandlerEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

96 (0X0060) 

Trace Groups 

ADSH 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hStream=%F ulStreamTime=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 97 
(0X0061) 

Description 

ACP_DevReportError 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

97 (0X0061) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Error(DSP/MME)=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
101 (0X0065) 


Description 


ADSH_AddBufEntry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

101 (0X0065) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
102 (0X0066) 

Description 

ADSH_RemoveBufEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

102 (0X0066) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
103(0X0067) 


Description 

ADSHJDCWriteEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

103 (0X0067) 

Trace Groups 

ADSH 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
104 (0X0068) 

ADSH_GetBufferEntry 
Static trace point in Multi-Media Extensions. 

104 (0X0068) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 05 (0X0069) 

ADSH_RetBufferEntry 
Static trace point in Multi-Media Extensions. 

105 (0X0069) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





1 06 (0X006A) 


Description 

ADSH_DLLIntEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

106 (0X006A) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
107 (0X006B) 

Description 

ADSHJDCControlEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

107 (0X006B) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
108 (0X006C) 


Description 


ADSHJDCSetupEntry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

108 (0X006C) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
109 (0X006D) 

Description 

ADSH_SendBufferEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

109 (0X006D) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 1 2 (0X0070) 


Description 

CDSH_StartCdReadloctl 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

112 (0X0070) 

Trace Groups 

CD 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
113 (0X0071) 

CDSH_StartCddaRead 
Static trace point in Multi-Media Extensions. 

113 (0X0071) 

CD 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
114 (0X0072) 

CDSH_StartCddaWrite 
Static trace point in Multi-Media Extensions. 

114(0X0072) 

CD 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





129 (0X0081) 


Description 

SSM_ShcAssociate_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

129 (0X0081) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
130 (0X0082) 

Description 

SSM_ShcClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

130 (0X0082) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
131 (0X0083) 


Description 


SSM_ShcCreate_Exit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

131 (0X0083) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
132 (0X0084) 

Description 

SSM_ShcDestroy_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

132 (0X0084) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
133(0X0085) 


Description 

SSM_ShcStart_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

133 (0X0085) 

Trace Groups 

SSMSRV 

Trace Types 


No types assigned. 



Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
134 (0X0086) 

Description 

SSM_ShcStop_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

134 (0X0086) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
135 (0X0087) 

Description 

SSM_ShcSeek_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

135 (0X0087) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



136 (0X0088) 


Description 

SSM_ShcEnableEvt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

136 (0X0088) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
137 (0X0089) 

Description 

SSM_ShcDisableEvt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

137 (0X0089) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 38 (0X008A) 


Description 


SSM_ShcEnableSync_Exit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

138 (0X008A) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
139 (0X008B) 

Description 

SSM_ShcDisableSync_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

139 (0X008B) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
140 (0X008C) 


Description 

SSM_ShcGetTime_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

140 (0X008C) 

Trace Groups 

SSMSRV 

Trace Types 


No types assigned. 



Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
141 (0X008D) 

Description 

SSM_ShcGetProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

141 (0X008D) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
142 (0X008E) 

Description 

SSM_ShclnstProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

142 (0X008E) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



143 (0X008F) 


Description 

SSM_ShcEnumProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

143 (0X008F) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
144 (0X0090) 

Description 

SSM_ShcNegotReslt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

144 (0X0090) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
145(0X0091) 


Description 


SSM_ShcSendMsg_Exit 


Tracepoint 



Static trace point in Multi-Media Extensions. 
145 (0X0091) 

SSMSRV 
No types assigned. 

hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
146 (0X0092) 

UNUSED_HOOK_1 09_1 46 
Static trace point in Multi-Media Extensions. 

146 (0X0092) 

SSMSRV 
No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
147 (0X0093) 

UNUSED_HOOK_1 09_1 47 
Static trace point in Multi-Media Extensions. 

147 (0X0093) 

SSMSRV 





No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
148 (0X0094) 

SSM_ProcRun_Exit 

Static trace point in Multi-Media Extensions. 

148 (0X0094) 

SSMDD 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
149 (0X0095) 

SSM_ProcBlock_Exit 

Static trace point in Multi-Media Extensions. 

149 (0X0095) 

SSMDD 

No types assigned. 

UnblockFlag=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





150 (0X0096) 


Description 

SSM_loctl_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

150 (0X0096) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


Funct/Catg=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
151 (0X0097) 

Description 

SSM_iDC_Ret_From_SHC 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

151 (0X0097) 

Trace Groups 

SSMDD 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F Function=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
152(0X0098) 


Description 


SSMJDCNotifyExit 


Tracepoint 



Static trace point in Multi-Media Extensions. 

152 (0X0098) 

SSMDD 

No types assigned. 

hstream=%F hid=%F Flags=%F ulGetNumEn=%F ulRetNumEn=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
153 (0X0099) 

SSMJDCDeRegExit 

Static trace point in Multi-Media Extensions. 

153 (0X0099) 

SSMDD 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 54 (0X009A) 

SSMJDCRptEvtExit 

Static trace point in Multi-Media Extensions. 

154 (0X009A) 

SSMDD 





No types assigned. 



Traced Parameters 


hid=%F RC=%F LowParm2=%F FlighParm2=%F LowParm3=%F FlighParm3=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
155 (0X009B) 

Description 

GET_EMPTY_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

155 (0X009B) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F pBufferP=%F pBuffer=%F pRecord=%F ulLength=%F hbcbFull=%F hbcbEmpty=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
156 (0X009C) 

Description 

GET_FULL_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

156 (0X009C) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F pBufferP=%F pBuffer=%F pRecord=%F ulLength=%F hbcbFull=%F hbcbEmpty=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



157 (0X009D) 


Description 

RET_EMPTY_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

157 (0X009D) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hstreamOwner=%F pBufferP=%F hbcbThis=%F hbcbFull=%F hbcbEmpty=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
158 (0X009E) 

Description 

FtET_FULL_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

158 (0X009E) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hstreamOwner=%F pBufferP=%F hbcbThis=%F hbcbFull=%F hbcbEmpty=%F rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
159 (0X009F) 


Description 


BUF_Ftecord_Exit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

159 (0X009F) 

Trace Groups 

SSMNOTIC 

Trace Types 

No types assigned. 

Traced Parameters 


ulNumllsers=%F ulNumFtecords=%F rcbFlead=%F rcbFull=%F NumAIIFull=%F NumSrcOwn=%F 
NumATgtOwn=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 60 (0X00A0) 

Description 

SSM_Negotiate_error 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

160 (0X00A0) 

Trace Groups 

SSMEVDDC 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F ErrorStatus=%F KeyDataType=%F KeySubType=%F KeylntKey=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
161 (0X00A1 ) 


Description 

UNUSED_HOOK_1 09_1 61 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

161 (0X00A1) 

Trace Groups 

SSMEVDDC 


Trace Types 



No types assigned. 


Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 62 (0X00A2) 

Description 

UNUSED_HOOK_1 09_1 62 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

162 (0X00A2) 

Trace Groups 

SSMEVDDC 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 63 (0X00A3) 

Description 

SSM_SmhRing3_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

163 (0X00A3) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Function#=%F FtC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 64 (0X00A4) 


Description 

SSM_SmhRegister_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

164 (0X00A4) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hidSrc=%F hidTgt=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 65 (0X00A5) 

Description 

SSM_SmhReportEvnt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

165 (0X00A5) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hevent=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 66 (0X00A6) 


Description 



SSM_SmhNotify_Exit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

166 (0X00A6) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
167 (0X00A7) 

Description 

SSM_SmhDeRegister_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

167 (0X00A7) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


Function#=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 68 (0X00A8) 


Description 

SSM_SmhLockMem_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

168 (0X00A8) 

Trace Groups 


SSMAPI 



Trace Types 
Traced Parameters 


No types assigned. 


Function#=%F Flags=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 69 (0X00A9) 

Description 

SSM_SpiAssociate_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

169 (0X00A9) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 70 (0X00AA) 

Description 

SSM_SpiCreate_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

170 (0X00AA) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstreamBuf=%F hstream=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
171 (0X00AB) 


Description 

SSM_SpiDestroy_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

171 (0X00AB) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
1 72 (0X00AC) 

Description 

SSM_SpiEnumProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

172 (0X00AC) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F FtC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
173 (0X00AD) 



Description 


SSM_SpiEnumHndlr_Exit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

173 (0X00AD) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


#Handlers=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
174 (0X00AE) 

Description 

SSM_SpiGetHndlr_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

174 (0X00AE) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hidSrc=%F hidTgt=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
175 (0X00AF) 


Description 

SSM_SpiGetProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

175 (0X00AF) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hid=%F Datatype=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
176 (0X00B0) 

Description 

SSM_SpiGetTime_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

176 (0X00B0) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F mmtimeFI=%F mmtimeL=%F FtC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
177 (0X00B1 ) 

Description 

SSM_SpilnstProtocol_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

177 (0X00B1) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F Datatype=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
178 (0X00B2) 


Description 

SSM_SpiSeekStrm_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

178 (0X00B2) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
179 (0X00B3) 

Description 

SSM_SpiStartStrm_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

179 (0X00B3) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F FtC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
180 (0X00B4) 



Description 


SSM_SpiStopStrm_Exit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

180 (0X00B4) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
181 (0X00B5) 

Description 

SSM_SpiEnableEvent_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

181 (0X00B5) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hevent=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
182 (0X00B6) 


Description 

SSM_SpiDisableEvent_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

182 (0X00B6) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hevent=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
183 (0X00B7) 

Description 

SSM_SpiEnableSync_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

183 (0X00B7) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstreamMast=%F #slaves=%F FtC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
184 (0X00B8) 

Description 

SSM_SpiDisableSync_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

184 (0X00B8) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
185 (0X00B9) 


Description 

SSM_ShcRouter_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

185 (0X00B9) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
186 (0X00BA) 

Description 

SSM_ShcRouterRing3_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

186 (0X00BA) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
187 (0X00BB) 



Description 


SSM_xxxllnused1 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

187 (0X00BB) 

Trace Groups 

SSMEVDLL 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
188 (0X00BC) 

Description 

SSM_AppEvent3_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

188 (0X00BC) 

Trace Groups 

SSMEVDLL 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hevent=%F hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
189 (0X00BD) 


Description 

SSM_AppEventQ_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

189 (0X00BD) 


Trace Groups 



SSMEVDLL 


Trace Types 
Traced Parameters 


No types assigned. 


hstream=%F hevent=%F hid=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
190 (0X00BE) 

Description 

SSM_SmhNotifylOCtl_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

190 (0X00BE) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hidO/RC3=%F Flags=%F ulGetNumEn=%F ulRetNumEn=%F RC0=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
191 (0X00BF) 

Description 

SSM_QueueEventlOCtl_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

191 (0X00BF) 

Trace Groups 

SSMSRV 

Trace Types 

No types assigned. 

Traced Parameters 


hid=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code 
192 (0X00C0) 


Description 

SSM_CreateBDSNotMax 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

192 (0X00C0) 

Trace Groups 

SSMBUFF 

Trace Types 

No types assigned. 

Traced Parameters 


ulMinBuf=%F ulMaxBuf=%F ulNumBCB=%F ulHeapSize=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
193 (0X00C1) 

Description 

SSM_SpiDetSyncMaster_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

193 (0X00C1) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


#masters=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 94 (0X00C2) 



Description 


SSM_SpiSendMsg_Exit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

194 (0X00C2) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F hid=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
195 (0X00C3) 

Description 

SSM_SpiAssStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

195 (0X00C3) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F FtC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
1 96 (0X00C4) 


Description 

SSM_SpiCloseStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

196 (0X00C4) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hnetwork=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
197 (0X00C5) 

Description 

SSM_SpiConnStrExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

197 (0X00C5) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hidSrc=%F hidTgt=%F hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
198 (0X00C6) 

Description 

SSM_SpiDeactStrExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

198 (0X00C6) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
199 (0X00C7) 


Description 

SSM_SpiAddStrConn Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

199 (0X00C7) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
200 (0X00C8) 

Description 

SSM_SpiOpenStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

200 (0X00C8) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
201 (0X00C9) 



Description 


SSM_SpiReactStrExit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

201 (0X00C9) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
202 (0X00CA) 

Description 

SSM_SpiRemStrConnExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

202 (0X00CA) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
203 (0X00CB) 


Description 

SSM_SpiSeekStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

203 (0X00CB) 


Trace Groups 



SSMAPI 


Trace Types 
Traced Parameters 


No types assigned. 


hnetwork=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
204 (0X00CC) 

Description 

SSM_SpiStartStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

204 (0X00CC) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
205 (0X00CD) 

Description 

SSM_SpiStopStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

205 (0X00CD) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F RC=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
206 (0X00CE) 


Description 

SSM_SpiUnassStrNetExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

206 (0X00CE) 

Trace Groups 

SSMAPI 

Trace Types 

No types assigned. 

Traced Parameters 


hnetwork=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
208 (0X00D0) 

Description 

ACP_ACPADevlntExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

208 (0X00D0) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Card=%F ID=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
209 (0X00D1 ) 



Description 


ADH_ADSHIntHandlerExit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

209 (0X00D1) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F ulStateFlg=%F CurrBuflndex=%F EOSBuflndex=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
210 (0X00D2) 

Description 

ADFI_SFICCreateExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

210 (0X00D2) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
211 (0X00D3) 


Description 

ADH_SHCStartExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

21 1 (0X00D3) 


Trace Groups 



ADSH 


Trace Types 
Traced Parameters 


No types assigned. 


hStream=%F RC=%F ulStateFlg=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
212 (0X00D4) 

Description 

ADH_SHCStopExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

212 (0X00D4) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F ulStateFlg=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
213 (0X00D5) 

Description 

ADH_GetEmptyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

213 (0X00D5) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
214 (0X00D6) 


Description 

ADFI_ReturnFullExit 

Traceooint 

Static trace point in Multi-Media Extensions. 

Minor Code 

214 (0X00D6) 

Trace Groups 

ADSH 

Trace Tvpes 

No types assigned. 

Traced Parameters 



hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
215 (0X00D7) 

Description 

ADFI_GetFullExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

215 (0X00D7) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
216 (0X00D8) 



Description 


ADH_ReturnEmptyExit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

216 (0X00D8) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F pBuffer=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
217 (0X00D9) 

Description 

ADFI_ReportEOSExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

21 7 (0X00D9) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
218 (0X00DA) 


Description 

ADH_ReportErrorExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

218 (0X00DA) 


Trace Groups 



ADSH 


Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
219 (0X00DB) 

Description 

ADH_ReportPLCueExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

219 (0X00DB) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
220 (0X00DC) 

Description 

ADH_ReportCueTimeExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

220 (0X00DC) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 



221 (OXOODD) 


ADH_ReportCueDataExit 

Static trace point in Multi-Media Extensions. 

221 (OXOODD) 

ADSH 

No types assigned. 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
222 (0X00DE) 

ADH_ReportDatallnderExit 
Static trace point in Multi-Media Extensions. 

222 (OXOODE) 

ADSH 

No types assigned. 
hStream=%F ulStatus=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
223 (0X00DF) 

ADH_ReportSyncOverExit 
Static trace point in Multi-Media Extensions. 






Minor Code 


223 (0X00DF) 


Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F ulStatus=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
224 (0X00E0) 

Description 

ADFI_EventFlandlerExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

224 (0X00E0) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F ulStreamTime=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
225 (0X00E1 ) 

Description 

ACP_DevReportError 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

225 (0X00E1) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 



Error(DSP/MME)=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
229 (0X00E5) 

ADSH_AddBufExit 

Static trace point in Multi-Media Extensions. 

229 (0X00E5) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
230 (0X00E6) 

ADSH_RemoveBufExit 
Static trace point in Multi-Media Extensions. 

230 (0X00E6) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





231 (0X00E7) 


Description 

ADSHJDCWriteExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

231 (0X00E7) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
232 (0X00E8) 

Description 

ADSH_GetBufferExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

232 (0X00E8) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
233 (0X00E9) 


Description 


ADSH_RetBufferExit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

233 (0X00E9) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
234 (0X00EA) 

Description 

ADSH_DLLIntExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

234 (0X00EA) 

Trace Groups 

ADSH 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
235 (0X00EB) 


Description 

ADSHJDCControlExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

235 (0X00EB) 

Trace Groups 

ADSH 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
236 (0X00EC) 

ADSHJDCSetupExit 

Static trace point in Multi-Media Extensions. 

236 (0X00EC) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
237 (0X00ED) 

ADSH_SendBufferExit 
Static trace point in Multi-Media Extensions. 

237 (0X00ED) 

ADSH 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





240 (0X00F0) 


Description 

CDSH_StopCdReadloctl 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

240 (OXOOFO) 

Trace Groups 

CD 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
241 (0X00F1) 

Description 

CDSH_StopCddaRead 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

241 (0X00F1) 

Trace Groups 

CD 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
242 (0X00F2) 


Description 


CDSFi_StopCddaWrite 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

242 (0X00F2) 

Trace Groups 

CD 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
257 (0X0101) 

Description 

MDM_mciSendStringEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

257 (0X0101) 

Trace Groups 

MMSNDSTR 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
258 (0X0102) 

Description 

MDM_mciSendCommandEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

258 (0X0102) 

Trace Groups 

MMSNDCMD 

Trace Types 


No types assigned. 



Traced Parameters 


ID=%F Message=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
259 (0X0103) 

Description 

MDM_mciOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

259 (0X0103) 

Trace Groups 

MCIOPEN 

Trace Types 

No types assigned. 

Traced Parameters 


UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
260 (0X0104) 

Description 

MDM_MCDOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

260 (0X0104) 

Trace Groups 

MCIOPEN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



261 (0X0105) 


Description 

M D M_mci MakeActi ve_E ntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

261 (0X0105) 

Trace Groups 

MCIOPEN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F RU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
262 (0X0106) 

Description 

MDM_mciClose_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

262 (0X0106) 

Trace Groups 

MCICLOSE 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
263(0X0107) 


Description 


MDM_RESTORE_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

263 (0X0107) 

Trace Groups 

MMRESMAN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F RU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
264 (0X0108) 

Description 

MDM_SAVE_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

264 (0X0108) 

Trace Groups 

MMRESMAN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F RU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
265(0X0109) 


Description 

M D M_Th read_call_E ntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

265 (0X0109) 

Trace Groups 

MMRESMAN 

Trace Types 


No types assigned. 



Traced Parameters 


ID=%F Message=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
324 (0X0144) 

Description 

MTSH_GetEmptyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

324 (0X0144) 

Trace Groups 

MTSHREAD 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
325 (0X0145) 

Description 

MTSH_ReturnFullEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

325 (0X0145) 

Trace Groups 

MTSHREAD 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



385 (0X0181) 


Description 

MDM_mciSendStringExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

385 (0X0181) 

Trace Groups 

MMSNDSTR 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
386 (0X0182) 

Description 

MDM_mciSendCommandExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

386 (0X0182) 

Trace Groups 

MMSNDCMD 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F RC=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
387(0X0183) 


Description 


MDM_mciOpen_Exit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

387 (0X0183) 

Trace Groups 

MCIOPEN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F RC=%F UserParm=%F rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
388 (0X0184) 

Description 

MDM_MCDOpen_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

388 (0X0184) 

Trace Groups 

MCIOPEN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F RU=%F Class=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
389(0X0185) 


Description 

M D M_mci MakeActi ve_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

389 (0X0185) 

Trace Groups 

MCIOPEN 

Trace Types 


No types assigned. 



Traced Parameters 


ID=%F Type=%F RU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
390 (0X0186) 

Description 

MDM_mciClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

390 (0X0186) 

Trace Groups 

MCICLOSE 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F FiC=%F UserParm=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
391 (0X0187) 

Description 

MDM_RESTORE_EXIT 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

391 (0X0187) 

Trace Groups 

MMRESMAN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F RU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



392 (0X0188) 


Description 

MDM_SAVE_EXIT 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

392 (0X0188) 

Trace Groups 

MMRESMAN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Type=%F FtU=%F Class=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
393 (0X0189) 

Description 

M D M_Th read_call_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

393 (0X0189) 

Trace Groups 

MMRESMAN 

Trace Types 

No types assigned. 

Traced Parameters 


ID=%F Message=%F UserParm=%F RC=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
452 (0X01 C4) 


Description 


MTSH_GetEmptyExit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

452 (0X01 C4) 

Trace Groups 

MTSHREAD 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
453 (0X01 C5) 

Description 

MTSFI_ReturnFullExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

453 (0X01 C5) 

Trace Groups 

MTSHREAD 

Trace Types 

No types assigned. 

Traced Parameters 


hstream=%F RC=%F ulFlags=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
513(0X0201) 


Description 

MIO_DosOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

513 (0X0201) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
514 (0X0202) 

MIO_DosRead_Entry 

Static trace point in Multi-Media Extensions. 

514(0X0202) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
515 (0X0203) 

MIO_DosWrite_Entry 

Static trace point in Multi-Media Extensions. 

515 (0X0203) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





516 (0X0204) 


Description 

MIO_DosSeek_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

516 (0X0204) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
517 (0X0205) 

Description 

MIO_DosClose_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

517(0X0205) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
518(0X0206) 


Description 


MIO_DosDelete_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

518 (0X0206) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
519 (0X0207) 

Description 

MIO_MemOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

519 (0X0207) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
520 (0X0208) 


Description 

MIO_MemRead_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

520 (0X0208) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
521 (0X0209) 

MIO_MemWrite_Entry 
Static trace point in Multi-Media Extensions. 

521 (0X0209) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
522 (0X020A) 

MIO_MemSeek_Entry 
Static trace point in Multi-Media Extensions. 

522 (0X020A) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





523 (0X020B) 


Description 

MIO_MemClose_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

523 (OX020B) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
524 (0X020C) 

Description 

MIO_mmioOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

524 (0X020C) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
525 (0X020D) 


Description 


MIO_mmioClose_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

525 (OX020D) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
526 (0X020E) 

Description 

MIO_mmioRead_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

526 (0X020E) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


cch=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
527 (0X020F) 


Description 

MIO_mmioWrite_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

527 (OX020F) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


cch=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
528 (0X0210) 

Description 

MIO_mmioSeek_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

528 (0X0210) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


IOffset=%F IOrigin=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
529 (0X0211) 

Description 

MIO_mmioFlush_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

529 (0X0211) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 



530 (0X0212) 


Description 

MIO_mmioAscend_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

530 (0X0212) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
531 (0X0213) 

Description 

MIO_mmioDescend_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

531 (0X0213) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
532(0X0214) 


Description 


MIO_mmioAdvance_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

532 (0X0214) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
533 (0X0215) 

Description 

MIO_mmiolnstlOProc_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

533 (0X0215) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
534(0X0216) 


Description 

MIO_mmioSendMsg_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

534 (0X0216) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
535 (0X0217) 

MIO_mmioAquireSem_Entry 
Static trace point in Multi-Media Extensions. 

535 (0X0217) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
536 (0X0218) 

MIO_mmioDiscardSem_Entry 
Static trace point in Multi-Media Extensions. 

536 (0X0218) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





537 (0X0219) 


Description 

MIO_mmioCreateChunk_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

537 (0X0219) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
538 (0X021 A) 

Description 

MIO_mmioCFOpen_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

538 (0X021 A) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
539 (0X021 B) 


Description 


MIO_mmioCFCIose_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

539 (0X021 B) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
540 (0X021 C) 

Description 

MIO_mmioCFRmvShrEnt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

540 (0X021 C) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
541 (0X021 D) 


Description 

MIO_mmioCFAddShrEnt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

541 (0X021 D) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
542 (0X021 E) 

MIO_mmioCFSetlnfo_Entry 
Static trace point in Multi-Media Extensions. 

542 (0X021 E) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
543 (0X021 F) 

MIO_mmioCFGetlnfo_Entry 
Static trace point in Multi-Media Extensions. 

543 (0X021 F) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





544 (0X0220) 


Description 

MIO_mmioCFOpnTmpElem_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

544 (0X0220) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
545 (0X0221) 

Description 

MIO_mmioCFCIsTmpElem_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

545 (0X0221) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
546 (0X0222) 


Description 


MIO_mmioCFAddEnt_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

546 (0X0222) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
547 (0X0223) 

Description 

MIO_mmioCFChgEnt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

547 (0X0223) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
548 (0X0224) 


Description 

MIO_mmioCFCopy_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

548 (0X0224) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
549 (0X0225) 

MIO_mmioCFDelEnt_Entry 
Static trace point in Multi-Media Extensions. 

549 (0X0225) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
550 (0X0226) 

MIO_mmioCFAddElem_Entry 
Static trace point in Multi-Media Extensions. 

550 (0X0226) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





551 (0X0227) 


Description 

MIO_mmioCFFndEnt_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

551 (0X0227) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
552 (0X0228) 

Description 

MIO_mmioldentFile_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

552 (0X0228) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
553 (0X0229) 


Description 


MIO_MidiOpen_Entry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

553 (0X0229) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
554 (0X022A) 

Description 

MIO_MidiRead_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

554 (0X022A) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
555 (0X022B) 


Description 

MIO_MidiWrite_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

555 (0X022B) 

Trace Groups 

MMIO 

Trace Types 


No types assigned. 



Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
556 (0X022C) 

MIO_MidiSeek_Entry 

Static trace point in Multi-Media Extensions. 

556 (0X022C) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
557 (0X022D) 

MIO_MidiClose_Entry 

Static trace point in Multi-Media Extensions. 

557 (0X022D) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 





576 (0X0240) 


Description 

MSH_RdPlayList_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

576 (0X0240) 

Trace Groups 

MSH 

Trace Types 

No types assigned. 

Traced Parameters 


Operation=%F Operand1=%F Operand2=%F Operand3=%F Entry#=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
577 (0X0241) 

Description 

MSPI_WrPlayList_Entry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

577 (0X0241) 

Trace Groups 

MSH 

Trace Types 

No types assigned. 

Traced Parameters 


Operation=%F Operand1=%F Operand2=%F Operand3=%F Entry#=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
592 (0X0250) 


Description 


SWVR_GetlmageEntry 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

592 (0X0250) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
593 (0X0251) 

Description 

SWVR_ComplndxFrameEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

593 (0X0251) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
594 (0X0252) 

Description 

SWVR_CompRefrFrameEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

594 (0X0252) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



Multi-Media Extensions Major Code: 0X006D Minor Code 
595 (0X0253) 


Description 

SWVR_PostBufferFullEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

595 (0X0253) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
596 (0X0254) 

Description 

SWVR_PostBufferEmptyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

596 (0X0254) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
597 (0X0255) 


Description 


SWVR_WaitMsgBufferFuilEntry 



Tracepoint 


Static trace point in Multi-Media Extensions. 


Minor Code 

597 (0X0255) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
598 (0X0256) 

Description 

SWVR_WaitMsgBufferEmptyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

598 (0X0256) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
599 (0X0257) 

Description 

SWVR_PostCountErrorEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

599 (0X0257) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



PostCount=%d=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
600 (0X0258) 

SWVR_BufferWriteStartEntry 
Static trace point in Multi-Media Extensions. 

600 (0X0258) 

MMIO 

No types assigned. 

ByteCount=%d=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
601 (0X0259) 

SWVR_VCADosDevlOCTLEntry 
Static trace point in Multi-Media Extensions. 

601 (0X0259) 

MMIO 

No types assigned. 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
602 (0X025A) 





Description 


SWVR_VCABufferCopyEntry 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

602 (0X025A) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
603 (0X025B) 

Description 

SWVR_VCAtoX4CopyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

603 (0X025B) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
604 (0X025C) 


Description 

SWVR_VCAtoX2CopyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

604 (0X025C) 

Trace Groups 


MMIO 



Trace Types 


No types assigned. 


Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
605 (0X025D) 

Description 

SWVR_VCA640CopyEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

605 (0X025D) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
612 (0X0264) 

Description 

SVSH_DecompBufferEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

612 (0X0264) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F Frame#=%F mmtSlave=%F mmtMaster=%F Framlntvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 



613 (0X0265) 


ULDC_DLLDroppedEntry 

Static trace point in Multi-Media Extensions. 

613 (0X0265) 

SVSHSYNC 
No types assigned. 

Frame#=%F Tolerance=%F mmtNxtFrame=%F mmtCurrent=%F SyncMethod=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
617 (0X0269) 

SVMC_SetBitmapEntry 
Static trace point in Multi-Media Extensions. 

617(0X0269) 

SVSHSYNC 
No types assigned. 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
618 (0X026A) 

SVMC_BitBltEntry 

Static trace point in Multi-Media Extensions. 






Minor Code 


618 (0X026A) 


Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
619 (0X026B) 

Description 

SVMC_BlitUpEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

619 (0X026B) 

Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
620 (0X026C) 

Description 

SVMC_SpiMoveCoorEntry 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

620 (0X026C) 

Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
621 (0X026D) 


Description 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

621 (0X026D) 

Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
641 (0X0281) 

Description 

MIO_DosOpen_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

641 (0X0281) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
642 (0X0282) 


Description 


MIO DosRead Exit 



Tracepoint 


Static trace point in Multi-Media Extensions. 


Minor Code 

642 (0X0282) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
643 (0X0283) 

Description 

M 1 0_Dos Write_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

643 (0X0283) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
644 (0X0284) 


Description 

MIO_DosSeek_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

644 (0X0284) 

Trace Groups 


MMIO 



Trace Types 


No types assigned. 


Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
645 (0X0285) 

Description 

MIO_DosClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

645 (0X0285) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
646 (0X0286) 

Description 

MIO_DosDelete_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

646 (0X0286) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
647 (0X0287) 

MIO_MemOpen_Exit 

Static trace point in Multi-Media Extensions. 

647 (0X0287) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
648 (0X0288) 

MIO_MemRead_Exit 

Static trace point in Multi-Media Extensions. 

648 (0X0288) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
649 (0X0289) 





Description 


MIO_MemWrite_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

649 (0X0289) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
650 (0X028A) 

Description 

MIO_MemSeek_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

650 (0X028A) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
651 (0X028B) 


Description 

MIO_MemClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

651 (0X028B) 

Trace Groups 



MMIO 


Trace Types 
Traced Parameters 


No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
652 (0X028C) 

Description 

MIO_mmioOpen_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

652 (0X028C) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
653 (0X028D) 

Description 

MIO_mmioClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

653 (0X028D) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
654 (0X028E) 

MIO_mmioRead_Exit 

Static trace point in Multi-Media Extensions. 

654 (0X028E) 

MMIO 

No types assigned. 
rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
655 (0X028F) 

MIO_mmioWrite_Exit 

Static trace point in Multi-Media Extensions. 

655 (0X028F) 

MMIO 

No types assigned. 
rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
656 (0X0290) 





Description 


MIO_mmioSeek_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

656 (0X0290) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


IFilePos=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
657 (0X0291) 

Description 

MIO_mmioFlush_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

657 (0X0291) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
658 (0X0292) 


Description 

MIO_mmioAscend_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

658 (0X0292) 

Trace Groups 



MMIO 


Trace Types 
Traced Parameters 


No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
659 (0X0293) 

Description 

MIO_mmioDescend_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

659 (0X0293) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
660 (0X0294) 

Description 

MIO_mmioAdvance_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

660 (0X0294) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
661 (0X0295) 

MIO_mmiolnstlOProc_Exit 
Static trace point in Multi-Media Extensions. 

661 (0X0295) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
662 (0X0296) 

MIO_mmioSendMsg_Exit 
Static trace point in Multi-Media Extensions. 

662 (0X0296) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
663 (0X0297) 





MIO_mmioAquireSem_Exit 

Static trace point in Multi-Media Extensions. 

663 (0X0297) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
664 (0X0298) 

MIO_mmioDiscardSem_Exit 
Static trace point in Multi-Media Extensions. 

664 (0X0298) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
665 (0X0299) 

MIO_mmioCreateChunk_Exit 
Static trace point in Multi-Media Extensions. 





665 (0X0299) 



MMIO 


Trace Types 
Traced Parameters 


No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
666 (0X029A) 

Description 

MIO_mmioCFOpen_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

666 (0X029A) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
667 (0X029B) 

Description 

MIO_mmioCFCIose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

667 (0X029B) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
668 (0X029C) 

MIO_mmioCFRmvShrEnt_Exit 
Static trace point in Multi-Media Extensions. 

668 (0X029C) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
669 (0X029D) 

MIO_mmioCFAddShrEnt_Exit 
Static trace point in Multi-Media Extensions. 

669 (0X029D) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
670 (0X029E) 





Description 


MIO_mmioCFSetlnfo_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

670 (0X029E) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
671 (0X029F) 

Description 

MIO_mmioCFGetlnfo_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

671 (0X029F) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
672 (0X02A0) 


Description 

MIO_mmioCFOpnTmpElem_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

672 (0X02A0) 

Trace Groups 



MMIO 


Trace Types 
Traced Parameters 


No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
673 (0X02A1 ) 

Description 

MIO_mmioCFCIsTmpElem_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

673 (0X02A1) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
674 (0X02A2) 

Description 

MIO_mmioCFAddEnt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

674 (0X02A2) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
675 (0X02A3) 

MIO_mmioCFChgEnt_Exit 
Static trace point in Multi-Media Extensions. 

675 (0X02A3) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
676 (0X02A4) 

MIO_mmioCFCopy_Exit 
Static trace point in Multi-Media Extensions. 

676 (0X02A4) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
677 (0X02A5) 





Description 


MIO_mmioCFDelEnt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

677 (0X02A5) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
678 (0X02A6) 

Description 

MIO_mmioCFAddElem_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

678 (0X02A6) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
679 (0X02A7) 


Description 

MIO_mmioCFFndEnt_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

679 (0X02A7) 

Trace Groups 



MMIO 


Trace Types 
Traced Parameters 


No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
680 (0X02A8) 

Description 

MIO_mmioldentFile_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

680 (0X02A8) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
681 (0X02 A9) 

Description 

MIO_MidiOpen_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

681 (0X02A9) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
682 (0X02AA) 

M 1 0_M idi Read_Exit 

Static trace point in Multi-Media Extensions. 

682 (0X02AA) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
683 (0X02AB) 

MIO_MidiWrite_Exit 

Static trace point in Multi-Media Extensions. 

683 (0X02AB) 

MMIO 

No types assigned. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
684 (0X02AC) 





Description 


MIO_MidiSeek_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

684 (0X02AC) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
685 (0X02AD) 

Description 

MIO_MidiClose_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

685 (0X02AD) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


Multi-Media Extensions Major Code: 0X006D Minor Code 
704 (0X02C0) 


Description 

MSH_RdPlayList_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

704 (OX02CO) 

Trace Groups 



MSH 


Trace Types 
Traced Parameters 


No types assigned. 


Operation=%F Operand1=%F Operand2=%F Operand3=%F rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
705 (0X02C1) 

Description 

MSH_WrPlayList_Exit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

705 (0X02C1) 

Trace Groups 

MSH 

Trace Types 

No types assigned. 

Traced Parameters 


Operation=%F Operand1=%F Operand2=%F Operand3=%F rc=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
720 (0X02D0) 

Description 

SWVR_GetlmageExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

720 (0X02D0) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



Multi-Media Extensions Major Code: 0X006D Minor Code 
721 (0X02D1 ) 


Description 

SWVR_ComplndxFrameExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

721 (0X02D1) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
722 (0X02D2) 

Description 

SWVR_CompRefrFrameExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

722 (0X02D2) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
723 (0X02D3) 


Description 


SWVR_PostBufferFullExit 


Tracepoint 



Static trace point in Multi-Media Extensions. 


Minor Code 

723 (0X02D3) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
724 (0X02D4) 

Description 

SWVR_PostBufferEmptyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

724 (0X02D4) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
725 (0X02D5) 

Description 

SWVR_WaitMsgBufferFullExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

725 (0X02D5) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



Multi-Media Extensions Major Code: 0X006D Minor Code: 
726 (0X02D6) 


Description 

SWVR_WaitMsgBufferEmptyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

726 (0X02D6) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
727 (0X02D7) 

Description 

SWVR_PostCountErrorExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

727 (0X02D7) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


PostCount=%d=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code: 
728 (0X02D8) 


Description 



SWVR_BufferWriteDoneExit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

728 (0X02D8) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


ByteCount=%d=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
729 (0X02D9) 

Description 

SWVR_VCADosDevlOCTLExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

729 (0X02D9) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
730 (0X02DA) 


Description 

SWVR_VCABufferCopyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

730 (0X02DA) 

Trace Groups 

MMIO 

Trace Types 



No types assigned. 


Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
731 (0X02DB) 

Description 

SWVR_VCAtoX4CopyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

731 (0X02DB) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
732 (0X02DC) 

Description 

SWVR_VCAtoX2CopyExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

732 (0X02DC) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
733 (0X02DD) 



Description 


SWVR_VCA640CopyExit 


Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

733 (0X02DD) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
740 (0X02E4) 

Description 

SVSH_DecompBufferExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

740 (0X02E4) 

Trace Groups 

MMIO 

Trace Types 

No types assigned. 

Traced Parameters 


hStream=%F rc=%F BufLen=%F Blocklntvl=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
741 (0X02E5) 


Description 


ULDC_DLLDroppedExit 


Tracepoint 


Static trace point in Multi-Media Extensions. 


Minor Code 


741 (0X02E5) 



Trace Groups 


SVSHSYNC 


Trace Types 
Traced Parameters 


No types assigned. 


PulseCount=%F ulFrameDiff=%F mmtError=%F fWait=%F fDropFrame=%F 


Multi-Media Extensions Major Code: 0X006D Minor Code 
745 (0X02E9) 

Description 

SVMC_SetBitmapExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

745 (0X02E9) 

Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
746 (0X02 E A) 

Description 

SVMC_BitBltExit 

Tracepoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

746 (0X02EA) 

Trace Groups 

SVSHSYNC 

Trace Types 

No types assigned. 

Traced Parameters 


No parameters traced. 



Multi-Media Extensions Major Code: 0X006D Minor Code 
747 (0X02EB) 


DescriDtion 

SVMC_BlitUpExit 

TraceDoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

747 (0X02EB) 

Trace GrouDS 

SVSHSYNC 

Trace TvDes 

No types assigned. 

Traced Parameters 

No parameters traced. 


Multi-Media Extensions Major Code: 0X006D Minor Code 
748 (0X02EC) 


DescriDtion 

SVMC_SpiMoveCoorExit 

TraceDoint 

Static trace point in Multi-Media Extensions. 

Minor Code 

748 (0X02EC) 

Trace GrouDS 

SVSHSYNC 

Trace TvDes 

No types assigned. 

Traced Parameters 

No parameters traced. 


PMSHAPI.DLL Trace Events 

The tracepoints for the PMSHAPI.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 


Trace events for PMSHAPI Major Code: 0X00C0, sorted by minor code. 


Trace events for PMSHAPI Major Code: 0X00C0 .sorted by tracepoint. 


Trace Events for PMSHAPI Major Code: 0X00C0, Sorted by 
Minor Code 

00001 (0X0001) ShePI Initialise Pre-Invocation 

00002 (0X0002) WinQueryProfilelnt Pre-Invocation 

00003 (0X0003) WinQueryProfileString Pre-Invocation 

00004 (0X0004) WinWriteProfileString Pre-Invocation 

00005 (0X0005) WinQueryProfileSize Pre-Invocation 

00006 (0X0006) WinQueryProfileData Pre-Invocation 

00007 (0X0007) WinWriteProfileData Pre-Invocation 

00008 (0X0008) WinlnitSessionMgr Pre-Invocation 

00009 (0X0009) Win16SetFgndWindow Pre-Invocation 

00018 (0X0012) WinAddProgram Pre-Invocation 

00019 (0X0013) WinRemoveProgram Pre-Invocation 

00020 (0X0014) WinChangeProgram Pre-Invocation 

00021 (0X0015) WinQueryDefinition Pre-Invocation 

00022 (0X0016) WinQueryProgramTitles Pre-Invocation 

00023 (0X0017) WinCreateGroup Pre-Invocation 

00024 (0X0018) WinlnitializePL Pre-Invocation 
00032 (0X0020) WinQueryProgramllse Pre-Invocation 
00035 (0X0023) WinDestroyGroup Pre-Invocation 

00037 (0X0025) ShILoadFont Pre-Invocation 

00038 (0X0026) WinQueryProgramType Pre-Invocation 

00039 (0X0027) EntryProc Pre-Invocation 

00040 (0X0028) PMExecRegister Pre-Invocation 

00041 (0X0029) ExitProc Pre-Invocation 
00048 (0X0030) InitMinimizelcon Pre-Invocation 

00051 (0X0033) WSHInit Pre-Invocation 

00052 (0X0034) SheVioModeWait Pre-Invocation 

00053 (0X0035) SheVioSavRedrawWait Pre-Invocation 

00054 (0X0036) StartSaveWaitThreads Pre-Invocation 

00055 (0X0037) CreateThreadStack Pre-Invocation 

00056 (0X0038) RemoveOS2INI Pre-Invocation 

00065 (0X0041) ReportNoFlardErrors Pre-Invocation 

00066 (0X0042) SwitchToNextSession Pre-Invocation 

00067 (0X0043) ActivateSession Pre-Invocation 

00068 (0X0044) WinlnstStartApp Pre-Invocation 

00069 (0X0045) WinTerminateApp Pre-Invocation 

00070 (0X0046) WinCreateSwitchEntry Pre-Invocation 

00071 (0X0047) WinQuerySessionTitle Pre-Invocation 

00072 (0X0048) WinAddSwitchEntry Pre-Invocation 

00073 (0X0049) WinChangeSwitchEntry Pre-Invocation 

00086 (0X0056) WinQuerySwitchEntry Pre-Invocation 

00087 (0X0057) ShelnitializelniFile Pre-Invocation 

00088 (0X0058) InitialiselniFile Pre-Invocation 

00089 (0X0059) SetDosWarning Pre-Invocation 

00096 (0X0060) Cleanup Pre-Invocation 

00097 (0X0061) ShellPostMessage Pre-Invocation 

00098 (0X0062) ShellSendMessage Pre-Invocation 

00099 (0X0063) strtrn Pre-Invocation 

00100 (0X0064) BadSwitch Pre-Invocation 

00101 (0X0065) WinQueryTaskTitle Pre-Invocation 

00102 (0X0066) WinQueryTaskSizePos Pre-Invocation 

00103 (0X0067) WinQuerySwitchList Pre-Invocation 

00104 (0X0068) WinRemoveSwitchEntry Pre-Invocation 

00105 (0X0069) WinSwitchToProgram Pre-Invocation 

00112 (0X0070) WinSwitchProgramRegister Pre-Invocation 

00113 (0X0071) FindSwitchEntry Pre-Invocation 

00115 (0X0073) WinEndProgram Pre-Invocation 

00116 (0X0074) WinStopProgram Pre-Invocation 

00117 (0X0075) WinEndWindowSession Pre-Invocation 

00118 (0X0076) IpfnShellWndProc Pre-Invocation 


00119 (0X0077) 

00120 (0X0078) 

00121 (0X0079) 

00128 (0X0080) 

00129 (0X0081) 

00130 (0X0082) 

00131 (0X0083) 

00132 (0X0084) 

00133 (0X0085) 

00134 (0X0086) 

00135 (0X0087) 

00136 (0X0088) 

00137 (0X0089) 

00144 (0X0090) 

00145 (0X0091) 

00147 (0X0093) 

00148 (0X0094) 

00149 (0X0095) 

00150 (0X0096) 

00151 (0X0097) 

00257 (0X0101) 

00258 (0X0102) 

00259 (0X0103) 

00260 (0X0104) 

00261 (0X0105) 

00262 (0X0106) 

00263 (0X0107) 

00264 (0X0108) 

00265 (0X0109) 

00272 (0X0110) 

00273 (0X0111) 

00274 (0X0112) 

00275 (0X0113) 

00277 (0X0115) 

00278 (0X0116) 
00280 (0X0118) 
00306 (0X0132) 
04375 (0X1117) 

32769 (0X8001) 

32770 (0X8002) 

32771 (0X8003) 

32772 (0X8004) 

32773 (0X8005) 

32774 (0X8006) 

32775 (0X8007) 

32776 (0X8008) 

32777 (0X8009) 

32786 (0X8012) 

32787 (0X8013) 

32788 (0X8014) 

32789 (0X8015) 

32790 (0X8016) 

32791 (0X8017) 

32792 (0X8018) 
32800 (0X8020) 
32803 (0X8023) 

32805 (0X8025) 

32806 (0X8026) 

32807 (0X8027) 
32809 (0X8029) 
32816 (0X8030) 

32819 (0X8033) 

32820 (0X8034) 

32821 (0X8035) 

32822 (0X8036) 

32823 (0X8037) 

32824 (0X8038) 
32833 (0X8041) 

32834 (0X8042) 

32835 (0X8043) 

32836 (0X8044) 

32837 (0X8045) 

32838 (0X8046) 


IpfnlconWndProc Pre-Invocation 
WinSwitchToTaskManager Pre-Invocation 
fnBadAppDIgProc Pre-Invocation 
WinSwitchToProgram2 Pre-Invocation 
WinProcessHotKey Pre-Invocation 
WinlnitSession Pre-Invocation 
WinEndSession Pre-Invocation 
WinlnitSwEntry Pre-Invocation 
WinSetSwEntry Pre-Invocation 
WinQueryExtldFocus Pre-Invocation 
WinSetExtldFocus Pre-Invocation 
SheSystemShutdown Pre-Invocation 
Startl 6SystemExecutables Pre-Invocation 
ShILoadPublicFonts Pre-Invocation 
WinNoShutdown Pre-Invocation 
WinSetTitle Pre-Invocation 
WinCPLRegister Pre-Invocation 
WinPMFILERegister Pre-Invocation 
InitialiseSessionManager Pre-Invocation 
SetKBDHotKey Pre-Invocation 
PrfQueryProfileSize Pre-Invocation 
PrfOpen Profile Pre-Invocation 
PrfCloseProfile Pre-Invocation 
PrfRemoveProgram Pre-Invocation 
PrfCreateGroup Pre-Invocation 
PrfDestroyGroup Pre-Invocation 
PrfQueryProfile Pre-Invocation 
PrfReset Pre-Invocation 
PrfAddProgram Pre-Invocation 
PrfChangeProgram Pre-Invocation 
PrfQueryDefinition Pre-Invocation 
PrfQueryProgramPlandle Pre-Invocation 
PrfQueryProgramTitles Pre-Invocation 
PrfQueryProfileString Pre-Invocation 
PrfWriteProfileString Pre-Invocation 
PrfWriteProfileData Pre-Invocation 
PrfQueryProgramCategory Pre-Invocation 
PrfQueryProfileData Pre-Invocation 
ShePI Initialise Post-Invocation 
WinQueryProfilelnt Post-Invocation 
WinSetFgndWindow Post-invocation 
WinWriteProfileString Post-Invocation 
WinSetFgndWindow Post-invocation 
WinQueryProfileData Post-Invocation 
WinWriteProfileData Post-Invocation 
WinlnitSessionMgr Post-invocation 
WinSetFgndWindow Post-invocation 
WinAddProgram Post-Invocation 
WinRemoveProgram Post-Invocation 
WinChangeProgram Post-Invocation 
WinQueryDefinition Post-Invocation 
WinQueryProgramTitles Post-Invocation 
WinCreateGroup Post-Invocation 
WinlnitializePL Post-Invocation 
WinQueryProgramllse Post-Invocation 
WinDestroyGroup Post-Invocation 
ShILoadFont Post-invocation 
WinQueryProgramType Post-Invocation 
EntryProc Post-invocation 
ExitProc Post-invocation 
InitMinimizelcon Post-invocation 
WSHInit Post-invocation 
SheVioModeWait Post-invocation 
SheVioSavRedrawWait Post-invocation 
StartSaveWaitThreads Post-invocation 
CreateThreadStack Post-invocation 
RemoveOS2INI Post-invocation 
ReportNoHardErrors Post-invocation 
SwitchToNextSession Post-Invocation 
ActivateSession Post-Invocation 
WinlnstStartApp Post-Invocation 
WinTerminateApp Post-Invocation 
WinCreateSwitchEntry Post-Invocation 


32839 (0X8047) 

32840 (0X8048) 

32841 (0X8049) 

32854 (0X8056) 

32855 (0X8057) 

32856 (0X8058) 

32857 (0X8059) 

32864 (0X8060) 

32865 (0X8061) 

32866 (0X8062) 

32867 (0X8063) 

32868 (0X8064) 

32869 (0X8065) 

32870 (0X8066) 

32871 (0X8067) 

32872 (0X8068) 

32873 (0X8069) 

32880 (0X8070) 

32881 (0X8071) 

32883 (0X8073) 

32884 (0X8074) 

32885 (0X8075) 

32886 (0X8076) 

32887 (0X8077) 

32888 (0X8078) 

32889 (0X8079) 
32896 (0X8080) 

32898 (0X8082) 

32899 (0X8083) 

32900 (0X8084) 

32901 (0X8085) 

32902 (0X8086) 

32903 (0X8087) 

32904 (0X8088) 

32905 (0X8089) 

32912 (0X8090) 

32913 (0X8091) 

32915 (0X8093) 

32916 (0X8094) 
32917(0X8095) 

32918 (0X8096) 

32919 (0X8097) 


WinQuerySessionTitle Post-Invocation 
WinAddSwitchEntry Post-Invocation 
WinChangeSwitchEntry Post-Invocation 
WinQuerySwitchEntry Post-Invocation 
ShelnitializelniFile Post-Invocation 
InitialiselniFile Post-Invocation 
SetDosWarning Post-Invocation 
Cleanup Post-Invocation 
ShellPostMessage Post-Invocation 
ShellSendMessage Post-Invocation 
strtrn Post-Invocation 
BadSwitch Post-Invocation 
WinQueryTaskTitle Post-Invocation 
WinQueryTaskSizePos Post-Invocation 
WinQuerySwitchList Post-Invocation 
WinRemoveSwitchEntry Post-Invocation 
WinSwitchToProgram Post-Invocation 
WinSwitchProgramRegister Post-invocation 
FindSwitchEntry Post-Invocation 
WinEndProgram Post-Invocation 
WinStopProgram Post-Invocation 
WinEndWindowSession Post-Invocation 
IpfnShellWndProc Post-invocation 
IpfnlconWndProc Post-invocation 
WinSwitchToTaskManager Post-Invocation 
fnBadAppDIgProc Post-Invocation 
WinSwitchToProgram2 Post-Invocation 
WinlnitSession Post-Invocation 
WinEndSession Post-Invocation 
WinlnitSwEntry Post-Invocation 
WinSetSwEntry Post-Invocation 
WinQueryExtldFocus Post-invocation 
WinSetExtldFocus Post-invocation 
SheSystemShutdown Post-Invocation 
StartSystemExecutables Post-invocation 
Shll 6LoadPublicFonts Post-invocation 
WinNoShutdown Post-Invocation 
WinSetTitle Post-Invocation 
WinCPLRegister Post-invocation 
WinPMFILERegister Post-invocation 
InitialiseSessionManager Post-Invocation 
SetKBDHotKey Post-Invocation 


Trace Events for PMSHAPI Major Code: 0X00C0, Sorted by 
Tracepoint 


ACTIVATESESSION 00067 (0X0043) 
ActivateSession 32835 (0X8043) 

BADSWITCH 00100 (0X0064) 

BadSwitch 32868 (0X8064) 

CLEANUP 00096 (0X0060) 
CREATETHREADSTACK 00055 (0X0037) 
Cleanup 32864 (0X8060) 

CreateThreadStack 32823 (0X8037) 
ENTRYPROC 00039 (0X0027) 

EXITPROC 00041 (0X0029) 

EntryProc 32807 (0X8027) 

ExitProc 32809 (0X8029) 

FINDSWITCHENTRY 00113 (0X0071) 
FNBADAPPDLGPROC 00121 (0X0079) 
FindSwitchEntry 32881 (0X8071) 
INITIALISEINIFILE 00088 (0X0058) 
INITIALISESESSIONMANAGER 00150 (0X0096) 
INITMINIMIZEICON 00048 (0X0030) 


InitMinimizelcon 32816 (0X8030) 

InitialiselniFile 32856 (0X8058) 

InitialiseSessionManager 32918 (0X8096) 
LPFNICONWNDPROC 00119 (0X0077) 
LPFNSHELLWNDPROC 001 1 8 (0X0076) 
PM16EXECREGISTER 00040 (0X0028) 
PRF32ADDPROGRAM 00265 (0X0109) 
PRF32CHANGEPROGRAM 00272 (0X0110) 
PRF32CLOSEPROFILE 00259 (0X0103) 
PRF32CREATEGROUP 00261 (0X0105) 
PRF32DESTROYGROUP 00262 (0X0106) 
PRF320PENPR0FILE 00258 (0X0102) 
PRF32QUERYDEFINITION 00273 (0X0111) 
PRF32QUERYPROFILE 00263 (0X0107) 
PRF32QUERYPROFILEDATA 04375 (0X1 117) 
PRF32QUERYPROFILESIZE 00257 (0X0101) 
PRF32QUERYPROFILESTRING 00277 (0X0115) 
PRF32QUERYPROGRAMCATEGORY 00306 (0X0132) 
PRF32QUERYPROGRAMHANDLE 00274 (0X0112) 
PRF32QUERYPROGRAMTITLES 00275 (0X0113) 
PRF32REMOVEPROGRAM 00260 (0X0104) 
PRF32RESET 00264 (0X0108) 
PRF32WRITEPROFILEDATA 00280 (0X0118) 
PRF32WRITEPROFILESTRING 00278 (0X0116) 
REMOVEOS2INI 00056 (0X0038) 
REPORTNOHARDERRORS 00065 (0X0041) 
RemoveOS2INI 32824 (0X8038) 

ReportNoHardErrors 32833 (0X8041) 
SETDOSWARNING 00089 (0X0059) 

SETKBDHOTKEY 00151 (0X0097) 

SHE1 6INITIALIZEINIFILE 00087 (0X0057) 

SHE1 6PIINITIALISE 00001 (0X0001) 
SHE16SYSTEMSHUTDOWN 00136 (0X0088) 
SHELLPOSTMESSAGE 00097 (0X0061) 
SHELLSENDMESSAGE 00098 (0X0062) 
SHEVIOMODEWAIT 00052 (0X0034) 
SHEVIOSAVREDRAWWAIT 00053 (0X0035) 
SHL16LOADPUBLICFONTS 00144 (0X0090) 
SHLLOADFONT 00037 (0X0025) 
START16SYSTEMEXECUTABLES 00137 (0X0089) 
STARTSAVEWAITTHREADS 00054 (0X0036) 

STRTRN 00099 (0X0063) 

SWITCHTONEXTSESSION 00066 (0X0042) 
SetDosWarning 32857 (0X8059) 

SetKBDHotKey 32919 (0X8097) 

Shel 6lnitializelniFile 32855 (0X8057) 

Shel 6Pllnitialise 32769 (0X8001) 
She16SystemShutdown 32904 (0X8088) 
SheVioModeWait 32820 (0X8034) 
SheVioSavRedrawWait 32821 (0X8035) 
ShellPostMessage 32865 (0X8061) 

ShellSendMessage 32866 (0X8062) 
Shl16LoadPublicFonts 32912 (0X8090) 

ShILoadFont 32805 (0X8025) 

Startl 6System Executables 32905 (0X8089) 
StartSaveWaitThreads 32822 (0X8036) 
SwitchToNextSession 32834 (0X8042) 

WIN1 6ADDPROGRAM 00018 (0X0012) 
WIN16ADDSWITCHENTRY 00072 (0X0048) 
WIN16CHANGEPROGRAM 00020 (0X0014) 
WIN16CHANGESWITCHENTRY 00073 (0X0049) 
WIN16CPLREGISTER 00148 (0X0094) 
WIN16CREATEGROUP 00023 (0X0017) 
WIN16CREATESWITCHENTRY 00070 (0X0046) 
WIN16DESTROYGROUP 00035 (0X0023) 
WIN16ENDPROGRAM 001 1 5 (0X0073) 
WIN16INITIALIZEPL 00024 (0X0018) 
WIN16INITSESSIONMGR 00008 (0X0008) 
WIN16INSTSTARTAPP 00068 (0X0044) 
WIN16NOSHUTDOWN 00145 (0X0091) 
WIN16PMFILEREGISTER 00149 (0X0095) 
WIN16QUERYDEFINITION 00021 (0X0015) 
WIN16QUERYPROFILEDATA 00006 (0X0006) 


WIN16QUERYPR0FILEINT 00002 (0X0002) 
WIN16QUERYPROFILESIZE 00005 (0X0005) 
WIN16QUERYPROFILESTRING 00003 (0X0003) 
WIN16QUERYPROGRAMTITLES 00022 (0X0016) 
WIN16QUERYPROGRAMTYPE 00038 (0X0026) 
WIN16QUERYPROGRAMUSE 00032 (0X0020) 
WIN16QUERYSESSIONTITLE 00071 (0X0047) 
WIN16QUERYSWITCHENTRY 00086 (0X0056) 
WIN16QUERYSWITCHLIST 00103 (0X0067) 
WIN16QUERYTASKSIZEPOS 00102 (0X0066) 
WIN16QUERYTASKTITLE 00101 (0X0065) 
WIN16REMOVEPROGRAM 00019 (0X0013) 
WIN16REMOVESWITCHENTRY 00104 (0X0068) 
WIN16SETFGNDWINDOW 00009 (0X0009) 
WIN16STOPPROGRAM 001 1 6 (0X0074) 
WIN16SWITCHPROGRAMREGISTER 00112 (0X0070) 
WIN16SWITCHTOPROGRAM 00105 (0X0069) 
WIN16TERMINATEAPP 00069 (0X0045) 
WIN16WRITEPROFILEDATA 00007 (0X0007) 
WIN16WRITEPROFILESTRING 00004 (0X0004) 
WINENDSESSION 00131 (0X0083) 
WINENDWINDOWSESSION 001 1 7 (0X0075) 
WININITSESSION 00130 (0X0082) 

WININITSWENTRY 00132 (0X0084) 
WINPROCESSHOTKEY 00129 (0X0081) 
WINQUERYEXTIDFOCUS 00134 (0X0086) 
WINSETEXTIDFOCUS 00135 (0X0087) 
WINSETSWENTRY 00133 (0X0085) 

WINSETTITLE 00147 (0X0093) 
WINSWITCHTOPROGRAM2 00128 (0X0080) 
WINSWITCHTOTASKMANAGER 00120 (0X0078) 
WSHINIT 00051 (0X0033) 

WSHInit 32819 (0X8033) 

Win16AddProgram 32786 (0X8012) 

Winl 6AddSwitchEntry 32840 (0X8048) 

Winl 6CPLRegister 3291 6 (0X8094) 

Winl 6ChangeProgram 32788 (0X8014) 

Winl 6ChangeSwitch Entry 32841 (0X8049) 

Winl 6CreateGroup 32791 (0X8017) 
Win16CreateSwitchEntry 32838 (0X8046) 

Winl 6DestroyGroup 32803 (0X8023) 
Win16EndProgram 32883 (0X8073) 

Winl 6lnitSessionMgr 32776 (0X8008) 

Winl 6lnitializePL 32792 (0X8018) 

Win16lnstStartApp 32836 (0X8044) 

Win16NoShutdown 32913 (0X8091) 

Winl 6PMFILERegister 32917 (0X8095) 

Winl 6QueryDefinition 32789 (0X8015) 

Winl 6QueryProfileData 32774 (0X8006) 
Win16QueryProfilelnt 32770 (0X8002) 

Winl 6QueryProfileSize 32773 (0X8005) 

Winl 6QueryProfileString 32771 (0X8003) 

Winl 6QueryProgramTitles 32790 (0X8016) 

Winl 6QueryProgramType 32806 (0X8026) 

Winl 6QueryProgramllse 32800 (0X8020) 

Winl 6QuerySessionTitle 32839 (0X8047) 

Winl 6QuerySwitch Entry 32854 (0X8056) 
Win16QuerySwitchList 32871 (0X8067) 

Winl 6QueryTaskSizePos 32870 (0X8066) 

Winl 6QueryTaskTitle 32869 (0X8065) 
Win16RemoveProgram 32787 (0X8013) 
Win16RemoveSwitchEntry 32872 (0X8068) 

Winl 6SetFgndWindow 32777 (0X8009) 
Win16StopProgram 32884 (0X8074) 

Winl 6SwitchProgramRegister 32880 (0X8070) 

Winl 6SwitchToProgram 32873 (0X8069) 

Winl 6TerminateApp 32837 (0X8045) 

Winl 6WriteProfileData 32775 (0X8007) 

Winl 6WriteProfileString 32772 (0X8004) 
WinEndSession 32899 (0X8083) 
WinEndWindowSession 32885 (0X8075) 

WinlnitSession 32898 (0X8082) 

WinlnitSwEntry 32900 (0X8084) 


WinQueryExtldFocus 32902 (0X8086) 
WinSetExtldFocus 32903 (0X8087) 
WinSetSwEntry 32901 (0X8085) 
WinSetTitle 32915(0X8093) 
WinSwitchToProgram2 32896 (0X8080) 
WinSwitchToTaskManager 32888 (0X8078) 
fnBadAppDIgProc 32889 (0X8079) 
IpfnlconWndProc 32887 (0X8077) 
IpfnShellWndProc 32886 (0X8076) 
strtrn 32867 (0X8063) 


PMSHAPI Major Code: 0X00C0 Minor Code: 1 (0X0001) 


Description 

ShePllnitialise Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.SFHE1 6PIINITIALISE 

Minor Code 

1 (0X0001) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pPILocation = %a 
pPILocation -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 2 (0X0002) 


Description 

WinQueryProfilelnt Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSFIAPI.WIN16QUERYPROFILEINT 

Minor Code 

2 (0X0002) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Default = %w, pKeyName = %a 


pAppIName = %a, hab = %a 


pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 3 (0X0003) 


Description 

WinQueryProfileString Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16QUERYPROFILESTRING 

Minor Code 

3 (0X0003) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


BuffSize = %w, pBuffer = %a 
pDefault = %a, pKeyName = %a 
pAppIName = %a, hab = %a 
pDefault -> %s 
pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 4 (0X0004) 


Description 

WinWriteProfileString Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16WRITEPROFILESTRING 

Minor Code 

4 (0X0004) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pASCIIz = %a, pKeyName = %a 



pAppIName = %a, hab = %a 
pASCIIz -> %s 
pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 5 (0X0005) 


Description 

WinQueryProfileSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYPROFILESIZE 

Minor Code 

5 (0X0005) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pSize = %a, pKeyName = %a 
pAppIName = %a, hab = %a 
pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 6 (0X0006) 


Description 

WinQueryProfileData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYPROFILEDATA 

Minor Code 

6 (0X0006) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pBufferSize = %a, pBuffer = %a, pKeyName = %a 



pAppIName = %a, hab = %a 
pBufferSize -> %w 
pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 7 (0X0007) 


Description 

WinWriteProfileData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16WRITEPROFILEDATA 

Minor Code 

7 (0X0007) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Length = %w, pData = %a, pKeyName = %a 
pAppIName = %a, hab = %a 
pKeyName -> %s 
pAppIName -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 8 (0X0008) 


Description 

WinlnitSessionMgr Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16INITSESSIONMGR 

Minor Code 

8 (0X0008) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 



PMSHAPI Major Code: 0X00C0 Minor Code: 9 (0X0009) 


Description 

Winl 6SetFgndWindow Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16SETFGNDWINDOW 

Minor Code 

9 (0X0009) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


sgid = %w, hwndfocus=%d 


PMSHAPI Major Code: 0X00C0 Minor Code: 18 (0X0012) 


Description 

WinAddProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16ADDPROGRAM 

Minor Code 

18 (0X0012) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


GrpHandle = %a, BufPtr = %a, hab = %a 
progt -> %w, Title/Icon/Exec = %u 


PMSHAPI Major Code: 0X00C0 Minor Code: 19 (0X0013) 


Description 


WinRemoveProgram Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSHAPI. WIN16REMOVEPROGRAM 


Minor Code 

19 (0X0013) 

Trace Groups 

SHAPI 


Trace Types 

PRE 


Traced Parameters 


PrgHandle = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 20 (0X0014) 


Description 

WinChangeProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16CHANGEPROGRAM 

Minor Code 

20 (0X0014) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


BufPtr = %a, TrgHandle = %a 
progt -> %w, Title/lcon/Exec = %u 


PMSHAPI Major Code: 0X00C0 Minor Code: 21 (0X0015) 


Description 

WinQueryDefinition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYDEFINITION 

Minor Code 

21 (0X0015) 

Trace Groups 

SHAPI 

Trace Types 


PRE 



Traced Parameters 


InLength = %w, pibble = %a 
TargetHandle = %a, hab = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 22 (0X0016) 


Description 

ExecuteStartUp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. EXECUTESTARTUP 

Minor Code 

22 (0X0016) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


%Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 22 (0X0016) 


Description 

WinQueryProgramTitles Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYPROGRAMTITLES 

Minor Code 

22 (0X0016) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pTotal = %a, cbBuffer = %w, pBuffer = %a 
TargetHandle = %a, hab = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 23 (0X0017) 



Description 

WinCreateGroup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16CREATEGROUP 

Minor Code 

23 (0X0017) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Rhlp = %d, Rth = %d, vis = %w, InString = %a 
hab = %a 
InString -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 24 (0X0018) 


Description 

WinlnitiaiizePL Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16INITIALIZEPL 

Minor Code 

24 (0X0018) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


flOptions=%F 


PMSHAPI Major Code: 0X00C0 Minor Code: 32 (0X0020) 


Description 

WinQueryProgramUse Pre-Invocation 

Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMSHAPI. WIN1 6QUERYPROGRAMUSE 



32 (0X0020) 


Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Exe = %a 
Exe -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 35 (0X0023) 


Description 

WinDestroyGroup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16DESTROYGROUP 

Minor Code 

35 (0X0023) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


GrpHandle = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 37 (0X0025) 


Description 

ShILoadFont Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHLLOADFONT 

Minor Code 

37 (0X0025) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pFontName -> %s 



PMSHAPI Major Code: 0X00C0 Minor Code: 38 (0X0026) 


Description 

WinQueryProgramType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYPROGRAMTYPE 

Minor Code 

38 (0X0026) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Exe = %a 
Exe -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 39 (0X0027) 


Description 

EntryProc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ENTRYPROC 

Minor Code 

39 (0X0027) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


fForeGround = %w, hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 40 (0X0028) 


Description 


PMExecRegister Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSHAPI.PM16EXECREGISTER 


Minor Code 

40 (0X0028) 

Trace Groups 

SHAPI 


Trace Types 

PRE 


Traced Parameters 


hwnd = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 41 (0X0029) 


Description 

ExitProc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. EXITPROC 

Minor Code 

41 (0X0029) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


mp2 = %d, mpl = %d, message = %w, hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 48 (0X0030) 


Description 

InitMinimizelcon Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. INITMINIMIZEICON 

Minor Code 

48 (0X0030) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 



pswctl = %w, pszIconFile = %a 


pszIconFile -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 51 (0X0033) 


Description 

WSHInit Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WSHINIT 

Minor Code 

51 (0X0033) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pStack_AR = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 52 (0X0034) 


Description 

SheVioModeWait Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHEVIOMODEWAIT 

Minor Code 

52 (0X0034) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 53 (0X0035) 



Description 


SheVioSavRedrawWait Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHEVIOSAVREDRAWWAIT 

Minor Code 

53 (0X0035) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 54 (0X0036) 


Description 

StartSaveWaitThreads Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. STARTSAVEWAITTHREADS 

Minor Code 

54 (0X0036) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 55 (0X0037) 


Description 

CreateThreadStack Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. CREATETHREADSTACK 

Minor Code 

55 (0X0037) 

Trace Groups 

SHAPI 

Trace Types 


PRE 



Traced Parameters 


StackSize = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 56 (0X0038) 


Description 

RemoveOS2INI Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. REMOVEOS2INI 

Minor Code 

56 (0X0038) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 65 (0X0041) 


Description 

ReportNoHardErrors Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. REPORTNOHARDERRORS 

Minor Code 

65 (0X0041) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pszTitle = %a, hwnd = %d 
pszTitle -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 66 (0X0042) 



Description 


SwitchToNextSession Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SWITCHTONEXTSESSION 

Minor Code 

66 (0X0042) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


fPrev = %w, fsln = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 67 (0X0043) 


Description 

ActivateSession Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ACTIVATESESSION 

Minor Code 

67 (0X0043) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


fs = %w, hwndToBottom = %d, pswi = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 68 (0X0044) 


Description 

WinlnstStartApp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16INSTSTARTAPP 

Minor Code 

68 (0X0044) 

Trace Groups 


SHAPI 



Trace Types 

PRE 

Traced Parameters 

fsOptions = %w, pData = %a, pszCmdLine = %a, aszApplication = %a 
cCount = %w, hwndNotifyWindow = %d, hini = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 69 (0X0045) 


Description 

WinTerminateApp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16TERMINATEAPP 

Minor Code 

69 (0X0045) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


happ = %d %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 70 (0X0046) 


Description 

WinCreateSwitchEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16CREATESWITCHENTRY 

Minor Code 

70 (0X0046) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Ipswctl = %a, hablgnored = %w 



PMSHAPI Major Code: 0X00C0 Minor Code: 71 (0X0047) 


Description 

WinQuerySessionTitle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16QUERYSESSIONTITLE 

Minor Code 

71 (0X0047) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


cbNameBufferLength = %d, 
szNameBuffer = %a, sid = %w, 
szNameBuffer -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 72 (0X0048) 


Description 

WinAddSwitchEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16ADDSWITCHENTRY 

Minor Code 

72 (0X0048) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Ipswctl = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 73 (0X0049) 


Description 


WinChangeSwitchEntry Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMSHAPI.WIN16CHANGESWITCHENTRY 


Minor Code 

73 (0X0049) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Ipswctl = %a, hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 86 (0X0056) 


Description 

WinQuerySwitchEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16QUERYSWITCHENTRY 

Minor Code 

86 (0X0056) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Ipswctl = %a, hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 87 (0X0057) 


Description 

ShelnitializelniFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHE1 6INITIALIZEINIFILE 

Minor Code 

87 (0X0057) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 



Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 88 (0X0058) 


Description 

InitialiselniFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. INITIALISEINIFILE 

Minor Code 

88 (0X0058) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 89 (0X0059) 


Description 

SetDosWarning Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SETDOSWARNING 

Minor Code 

89 (0X0059) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Rc = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 96 (0X0060) 


Description 


Cleanup Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSHAPI. CLEANUP 


Minor Code 

96 (0X0060) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Rc = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 97 (0X0061) 


Description 

ShellPostMessage Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHELLPOSTMESSAGE 

Minor Code 

97 (0X0061) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pswi = %w, mpl = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 98 (0X0062) 


Description 

ShellSendMessage Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHELLSENDMESSAGE 

Minor Code 

98 (0X0062) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 



pswi = %d, mpl = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 99 (0X0063) 


Description 

strtrn Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. STRTRN 

Minor Code 

99 (0X0063) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


cch = %w, pszTo = %a, pszFrom = %a 
pszTo -> %s 
pszFrom -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 100 (0X0064) 


Description 

BadSwitch Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. BADSWITCH 

Minor Code 

100 (0X0064) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 101 (0X0065) 



Description 


WinQueryTaskTitle Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16QUERYTASKTITLE 

Minor Code 

101 (0X0065) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


cbNameBufferLength = %w, 
szNameBuffer = %a, sid = %w 
szNameBuffer -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 102 (0X0066) 


Description 

WinQueryTaskSizePos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16QUERYTASKSIZEPOS 

Minor Code 

102 (0X0066) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pswp = %a, sid = %w, hablgnored = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 103 (0X0067) 


Description 

WinQuerySwitchList Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16QUERYSWITCHLIST 

Minor Code 


103 (0X0067) 



Trace Groups 


SHAPI 


Trace Types 

PRE 

Traced Parameters 


cbBufferLength = %w, pswBlock = %a, 


PMSHAPI Major Code: 0X00C0 Minor Code: 104 (0X0068) 


Description 

WinRemoveSwitchEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16REMOVESWITCHENTRY 

Minor Code 

104 (0X0068) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 105 (0X0069) 


Description 

WinSwitchToProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16SWITCHTOPROGRAM 

Minor Code 

105 (0X0069) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hswitch = %d 



PMSHAPI Major Code: 0X00C0 Minor Code: 112 (0X0070) 

WinSwitchProgramRegister Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI.WIN16SWITCHPROGRAMREGISTER 
112 (0X0070) 

SHAPI 
PRE 

pfnwp = %a, hmq = %d, hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 1 1 3 (0X0071 ) 

FindSwitchEntry Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. FINDSWITCPIENTRY 
113 (0X0071) 

SHAPI 
PRE 

fs = %w, sid = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 115 (0X0073) 

WinEndProgram Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16ENDPROGRAM 





Minor Code 



115 (0X0073) 


Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


idProcess = %w, hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 116 (0X0074) 


Description 

WinStopProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16STOPPROGRAM 

Minor Code 

1 1 6 (0X0074) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


idProcess = %w, hswitch = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 117 (0X0075) 


Description 

WinEndWindowSession Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WINENDWINDOWSESSION 

Minor Code 

1 1 7 (0X0075) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hwnd = %d 



PMSHAPI Major Code: 0X00C0 Minor Code: 118 (0X0076) 

IpfnShellWndProc Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. LPFNSHELLWNDPROC 
118 (0X0076) 

SHAPI 
PRE 

mp2 = %d, mpl = %d, message = %w, hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 119 (0X0077) 

IpfnlconWndProc Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. LPFNICONWNDPROC 
119 (0X0077) 

SHAPI 
PRE 

mp2 = %d, mpl = %d, message = %w, hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 120 (0X0078) 

WinSwitchToTaskManager Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. WINSWITCHTOTASKMANAGER 






Minor Code 


120 (0X0078) 


Trace Groups 
Trace Types 
Traced Parameters 


SHAPI 

PRE 

Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 121 (0X0079) 


Description 

fnBadAppDIgProc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. FNBADAPPDLGPROC 

Minor Code 

121 (0X0079) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


mp2 = %d, mpl = %d, message = %w, hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 128 (0X0080) 


Description 

WinSwitchToProgram2 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WINSWITCHTOPROGRAM2 

Minor Code 

128 (0X0080) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


fs = %w, hswitch = %d 



PMSHAPI Major Code: 0X00C0 Minor Code: 129 (0X0081) 

WinProcessHotKey Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. WINPROCESSHOTKEY 
129 (0X0081) 

SHAPI 
PRE 

fProcess = %w, pqmsg = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 130 (0X0082) 

WinlnitSession Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. WININITSESSION 
130 (0X0082) 

SHAPI 
PRE 

pReqBlock = %a, ppfn = %a 


PMSHAPI Major Code: 0X00C0 Minor Code: 131 (0X0083) 

WinEndSession Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSHAPI. WINENDSESSION 






Minor Code 


131 (0X0083) 


Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


sidEnded = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 132 (0X0084) 


Description 

WinlnitSwEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WININITSWENTRY 

Minor Code 

132 (0X0084) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 133 (0X0085) 


Description 

WinSetSwEntry Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WINSETSWENTRY 

Minor Code 

133 (0X0085) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pReqBlock = %a, ppfn = %a 



PMSHAPI Major Code: 0X00C0 Minor Code: 134 (0X0086) 


Description 

WinQueryExtldFocus Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI.WINQUERYEXTIDFOCUS 

Minor Code 

134 (0X0086) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pSessionld = %F 


PMSHAPI Major Code: 0X00C0 Minor Code: 135 (0X0087) 


Description 

WinSetExtldFocus Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WINSETEXTIDFOCUS 

Minor Code 

135 (0X0087) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hSwitch = %d 
sid = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 136 (0X0088) 


Description 

SheSystemShutdown Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMSHAPI.SHE1 6SYSTEMSHUTDOWN 


Minor Code 

136 (0X0088) 

Trace Groups 

SHAPI 


Trace Types 

PRE 


Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 137 (0X0089) 


Description 

Startl 6System Executables Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. START 1 6SYSTEMEXECUTABLES 

Minor Code 

137 (0X0089) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


%Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 144 (0X0090) 


Description 

ShILoadPublicFonts Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SHL16LOADPUBLICFONTS 

Minor Code 

144 (0X0090) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 



pszFontDLL -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 145 (0X0091) 


Description 

WinNoShutdown Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16NOSHUTDOWN 

Minor Code 

145 (0X0091) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


flag = %w, sid = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 147 (0X0093) 


Description 

WinSetTitle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WINSETTITLE 

Minor Code 

147 (0X0093) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


pNewTitle = %a 
pNewTitle -> %s 


PMSHAPI Major Code: 0X00C0 Minor Code: 148 (0X0094) 


Description 



WinCPLRegister Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16CPLREGISTER 

Minor Code 

148 (0X0094) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 149 (0X0095) 


Description 

WinPMFILERegister Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WIN16PMFILEREGISTER 

Minor Code 

149 (0X0095) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hwnd = %d 


PMSHAPI Major Code: 0X00C0 Minor Code: 150 (0X0096) 


Description 

InitialiseSessionManager Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. INITIALISESESSIONMANAGER 

Minor Code 

150 (0X0096) 

Trace Groups 

SHAPI 

Trace Types 


PRE 



Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 151 (0X0097) 


Description 

SetKBDHotKey Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SETKBDHOTKEY 

Minor Code 

151 (0X0097) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


Return Address = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 257 (0X0101) 


Description 

PrfQueryProfileSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROFILESIZE 

Minor Code 

257 (0X0101) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, pszApp =%f, pszKey=%f, pulReqLen=%F 
App=%s, Key=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 258 (0X0102) 



Description 


PrfOpenProfile Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF320PENPR0FILE 

Minor Code 

258 (0X0102) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hab =%F, pszFileName=%f, FileName=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 259 (0X0103) 


Description 

PrfCloseProfile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32CLOSEPROFILE 

Minor Code 

259 (0X0103) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini = %F 


PMSHAPI Major Code: 0X00C0 Minor Code: 260 (0X0104) 


Description 

PrfRemoveProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32REMOVEPROGRAM 

Minor Code 

260 (0X0104) 

Trace Groups 


SHAPI 



Trace Types 
Traced Parameters 


PRE 


hini=%F, ProgHandle=%F 


PMSHAPI Major Code: 0X00C0 Minor Code: 261 (0X0105) 


Description 

PrfCreateGroup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32CREATEGROUP 

Minor Code 

261 (0X0105) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, pszTitle=%F, chVisibility=%b, Title=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 262 (0X0106) 


Description 

PrfDestroyGroup Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32DESTROYGROUP 

Minor Code 

262 (0X0106) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini = %F, hprogGroup=%F 


PMSHAPI Major Code: 0X00C0 Minor Code: 263 (0X0107) 



Description 


PrfQueryProfile Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROFILE 

Minor Code 

263 (0X0107) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hab=%F, pPrfProfile=%f 


PMSHAPI Major Code: 0X00C0 Minor Code: 264 (0X0108) 


Description 

PrfReset Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32RESET 

Minor Code 

264 (0X0108) 

Trace Groups 

SHAPI 

Trace Tvpes 

PRE 

Traced Parameters 

hab =%f, pPrfProfile=%f 


cchUserName=%F, pszllserName=%F 


cchSysName =%F, pszSysName=%F 


UserName=%s, SysName=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 265 (0X0109) 


Description 

Tracepoint 


PrfAddProgram Pre-Invocation 


Public symbol defined dynamic tracepoint: PMSHAPI. PRF32ADDPROGRAM 



Minor Code 


265 (0X0109) 


Trace Groups 

SHAPI 


Trace Types 

PRE 


Traced Parameters 


hini =%F, pDetails =%F, hprogGroup =%F 
pDetails. length=%F, progt.category=%F, progt.fbVisible=%F 
pszTitie =%F, pszExecutable=%F, pszParameters =%F 
pszStartupDir =%F, pszlcon =%F, pszEnvironment =%F 
swplnit.fi =%F, cy =%F, cx =%F 

y =%F, x =%F, hwndlnsertB =%F 

hwnd =%F, ulResI =%F, ulRes2 =%F 
Title =%s, Executable=%s, Parameters=%s 
StartupDir=%s, lcon=%s, Environment=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 272 (0X0110) 


Description 

PrfChangeProgram Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSFIAPI.PRF32CFIANGEPROGRAM 

Minor Code 

272 (0X0110) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini =%F, pDetails =%F, hprogGroup =%F 
pDetails. length=%F, progt.category=%F, progt.fbVisible=%F 
pszTitie =%F, pszExecutable=%F, pszParameters =%F 
pszStartupDir =%F, pszlcon =%F, pszEnvironment =%F 
swplnit.fi =%F, cy =%F, cx =%F 

y =%F, x =%F, hwndlnsertB =%F 


hwnd 


=%F, ulResI 


=%F, ulRes2 


=%F 



Title =%s, Executable=%s, Parameters=%s 
StartupDir=%s, lcon=%s, Environment=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 273 (0X01 1 1 ) 


Description 

PrfQueryDefinition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYDEFINITION 

Minor Code 

273 (0X0111) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, hprog=%F, pDetails=%F, cchBufferMax=%F 


PMSHAPI Major Code: 0X00C0 Minor Code: 274 (0X0112) 


Description 

PrfQueryProgramHandle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROGRAMHANDLE 

Minor Code 

274 (0X0112) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, pszExeName=%F, phpga=%F, cb=%F 
pcHandles=%F, ExeName=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 275 (0X0113) 



Description 


PrfQueryProgramTitles Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROGRAMTITLES 

Minor Code 

275 (0X0113) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini = %F, hprogGroup = %F, pTitles = %F 
cchBufferMax = %F, pulCount = %F 


PMSHAPI Major Code: 0X00C0 Minor Code: 277 (0X0115) 


Description 

PrfQueryProfileString Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROFILESTRING 

Minor Code 

277 (0X0115) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini =%F, pszApp =%f, pszKey =%f 
pszDefault =%f, pBuffer=%f, cchBufferMax=%F 
App=%s, Key=%s, Default=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 278 (0X0116) 


Description 

PrfWriteProfileString Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32WRITEPROFILESTRING 

Minor Code 


278 (0X0116) 



Trace Groups 


SHAPI 


Trace Types 

PRE 

Traced Parameters 

hini=%F, pszApp=%f, pszKey=%f, pszData=%F 
App =%s 
Key =%s 
Data=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 280 (0X0118) 


Description 

PrfWriteProfileData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32WRITEPROFILEDATA 

Minor Code 

280 (0X0118) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, pszApp=%f, pszKey=%f, pBuf=%F, cchDataLen=%F 

App=%s, Key=%s 

Data=%u 


PMSHAPI Major Code: 0X00C0 Minor Code: 306 (0X0132) 


Description 

PrfQueryProgramCategory Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROGRAMCATEGORY 

Minor Code 

306 (0X0132) 

Trace Groups 


SHAPI 



Trace Types 
Traced Parameters 


PRE 


hini=%F, pszExe=%F, Exe=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 4375 (0X1 117) 


Description 

PrfQueryProfileData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. PRF32QUERYPROFILEDATA 

Minor Code 

4375 (0X1117) 

Trace Groups 

SHAPI 


Trace Types 

PRE 

Traced Parameters 


hini=%F, pszApp=%f, pszKey=%f, pBuf=%F, pulBuflen=%F 
Buflen=%F, App=%s, Key=%s 


PMSHAPI Major Code: 0X00C0 Minor Code: 32769 (0X8001) 


Description 

ShePllnitialise Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Shel 6Pllnitialise 

Minor Code 

32769 (0X8001) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32770 (0X8002) 



Description 


WinQueryProfilelnt Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QueryProfilelnt 

Minor Code 

32770 (0X8002) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32771 (0X8003) 


Description 

WinSetFgndWindow Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QueryProfileString 

Minor Code 

32771 (0X8003) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32772 (0X8004) 


Description 

WinWriteProfileString Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6WriteProfileString 

Minor Code 

32772 (0X8004) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32773 (0X8005) 


Description 

WinSetFgndWindow Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QueryProfileSize 

Minor Code 

32773 (0X8005) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32774 (0X8006) 


Description 

WinQueryProfileData Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QueryProfileData 

Minor Code 

32774 (0X8006) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32775 (0X8007) 



Description 


WinWriteProfileData Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6WriteProfileData 

Minor Code 

32775 (0X8007) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32776 (0X8008) 


Description 

WinlnitSessionMgr Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6lnitSessionMgr 

Minor Code 

32776 (0X8008) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32777 (0X8009) 


Description 

WinSetFgndWindow Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6SetFgndWindow 

Minor Code 

32777 (0X8009) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32786 (0X8012) 


Description 

WinAddProgram Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6AddProgram 

Minor Code 

32786 (0X8012) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32787 (0X8013) 


Description 

WinRemoveProgram Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6RemoveProgram 

Minor Code 

32787 (0X8013) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32788 (0X8014) 



Description 


WinChangeProgram Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6ChangeProgram 

Minor Code 

32788 (0X8014) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32789 (0X8015) 


Description 

WinQueryDefinition Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QueryDefinition 

Minor Code 

32789 (0X8015) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32790 (0X8016) 


Description 

WinQueryProgramTitles Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QueryProgramTitles 

Minor Code 

32790 (0X8016) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32791 (0X8017) 


Description 

WinCreateGroup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6CreateGroup 

Minor Code 

32791 (0X8017) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32792 (0X8018) 


Description 

WinlnitializePL Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6lnitializePL 

Minor Code 

32792 (0X8018) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32800 (0X8020) 



Description 


WinQueryProgramUse Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QueryProgramllse 

Minor Code 

32800 (0X8020) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32803 (0X8023) 


Description 

WinDestroyGroup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6DestroyGroup 

Minor Code 

32803 (0X8023) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32805 (0X8025) 


Description 

ShILoadFont Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ShILoadFont 

Minor Code 

32805 (0X8025) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32806 (0X8026) 


Description 

WinQueryProgramType Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QueryProgramType 

Minor Code 

32806 (0X8026) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32807 (0X8027) 


Description 

EntryProc Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. EntryProc 

Minor Code 

32807 (0X8027) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32809 (0X8029) 



Description 


ExitProc Post-invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ExitProc 

Minor Code 

32809 (0X8029) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32816 (0X8030) 


Description 

InitMinimizelcon Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. InitMinimizelcon 

Minor Code 

32816 (0X8030) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32819 (0X8033) 


Description 

WSHInit Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WSHInit 

Minor Code 

32819 (0X8033) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32820 (0X8034) 


Description 

SheVioModeWait Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SheVioModeWait 

Minor Code 

32820 (0X8034) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32821 (0X8035) 


Description 

SheVioSavRedrawWait Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SheVioSavRedrawWait 

Minor Code 

32821 (0X8035) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32822 (0X8036) 



Description 


StartSaveWaitThreads Post-invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. StartSaveWaitThreads 

Minor Code 

32822 (0X8036) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32823 (0X8037) 


Description 

CreateThreadStack Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. CreateThreadStack 

Minor Code 

32823 (0X8037) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32824 (0X8038) 


Description 

RemoveOS2INI Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. RemoveOS2INI 

Minor Code 

32824 (0X8038) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32833 (0X8041) 


Description 

ReportNoHardErrors Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ReportNoHardErrors 

Minor Code 

32833 (0X8041) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32834 (0X8042) 


Description 

SwitchToNextSession Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SwitchToNextSession 

Minor Code 

32834 (0X8042) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32835 (0X8043) 



Description 


ActivateSession Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ActivateSession 

Minor Code 

32835 (0X8043) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32836 (0X8044) 


Description 

WinlnstStartApp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6lnstStartApp 

Minor Code 

32836 (0X8044) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32837 (0X8045) 


Description 

WinTerminateApp Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6TerminateApp 

Minor Code 

32837 (0X8045) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32838 (0X8046) 


Description 

WinCreateSwitchEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Win16CreateSwitchEntry 

Minor Code 

32838 (0X8046) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32839 (0X8047) 


Description 

WinQuerySessionTitle Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QuerySessionTitle 

Minor Code 

32839 (0X8047) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32840 (0X8048) 



Description 


WinAddSwitchEntry Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6AddSwitchEntry 

Minor Code 

32840 (0X8048) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32841 (0X8049) 


Description 

WinChangeSwitchEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6ChangeSwitch Entry 

Minor Code 

32841 (0X8049) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32854 (0X8056) 


Description 

WinQuerySwitchEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6QuerySwitch Entry 

Minor Code 

32854 (0X8056) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32855 (0X8057) 


Description 

ShelnitializelniFile Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Shel 6lnitializelniFile 

Minor Code 

32855 (0X8057) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32856 (0X8058) 


Description 

InitialiselniFile Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. InitialiselniFile 

Minor Code 

32856 (0X8058) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32857 (0X8059) 



Description 


SetDosWarning Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SetDosWarning 

Minor Code 

32857 (0X8059) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32864 (0X8060) 


Description 

Cleanup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Cleanup 

Minor Code 

32864 (0X8060) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32865 (0X8061) 


Description 

ShellPostMessage Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ShellPostMessage 

Minor Code 

32865 (0X8061) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32866 (0X8062) 


Description 

ShellSendMessage Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. ShellSendMessage 

Minor Code 

32866 (0X8062) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32867 (0X8063) 


Description 

strtrn Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. strtrn 

Minor Code 

32867 (0X8063) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32868 (0X8064) 



Description 


BadSwitch Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. BadSwitch 

Minor Code 

32868 (0X8064) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32869 (0X8065) 


Description 

WinQueryTaskTitle Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QueryTaskTitle 

Minor Code 

32869 (0X8065) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32870 (0X8066) 


Description 

WinQueryTaskSizePos Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QueryTaskSizePos 

Minor Code 

32870 (0X8066) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32871 (0X8067) 


Description 

WinQuerySwitchList Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6QuerySwitchList 

Minor Code 

32871 (0X8067) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32872 (0X8068) 


Description 

WinRemoveSwitchEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6RemoveSwitchEntry 

Minor Code 

32872 (0X8068) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32873 (0X8069) 



Description 


WinSwitchToProgram Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Win16SwitchToProgram 

Minor Code 

32873 (0X8069) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32880 (0X8070) 


Description 

WinSwitchProgramRegister Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6SwitchProgramRegister 

Minor Code 

32880 (0X8070) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32881 (0X8071) 


Description 

FindSwitchEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. FindSwitchEntry 

Minor Code 

32881 (0X8071) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32883 (0X8073) 


Description 

WinEndProgram Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6EndProgram 

Minor Code 

32883 (0X8073) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32884 (0X8074) 


Description 

WinStopProgram Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6StopProgram 

Minor Code 

32884 (0X8074) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32885 (0X8075) 



Description 


WinEndWindowSession Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinEndWindowSession 

Minor Code 

32885 (0X8075) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32886 (0X8076) 


Description 

IpfnShellWndProc Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. IpfnShellWndProc 

Minor Code 

32886 (0X8076) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32887 (0X8077) 


Description 

IpfnlconWndProc Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. IpfnlconWndProc 

Minor Code 

32887 (0X8077) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32888 (0X8078) 


Description 

WinSwitchToTaskManager Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinSwitchToTaskManager 

Minor Code 

32888 (0X8078) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32889 (0X8079) 


Description 

fnBadAppDIgProc Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. fnBadAppDIgProc 

Minor Code 

32889 (0X8079) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32896 (0X8080) 



Description 


WinSwitchToProgram2 Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinSwitchToProgram2 

Minor Code 

32896 (0X8080) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32898 (0X8082) 


Description 

WinlnitSession Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinlnitSession 

Minor Code 

32898 (0X8082) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32899 (0X8083) 


Description 

WinEndSession Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinEndSession 

Minor Code 

32899 (0X8083) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32900 (0X8084) 


Description 

WinlnitSwEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinlnitSwEntry 

Minor Code 

32900 (0X8084) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32901 (0X8085) 


Description 

WinSetSwEntry Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinSetSwEntry 

Minor Code 

32901 (0X8085) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32902 (0X8086) 



Description 


WinQueryExtldFocus Post-invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinQueryExtldFocus 

Minor Code 

32902 (0X8086) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32903 (0X8087) 


Description 

WinSetExtldFocus Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinSetExtldFocus 

Minor Code 

32903 (0X8087) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32904 (0X8088) 


Description 

SheSystemShutdown Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Shel 6SystemShutdown 

Minor Code 

32904 (0X8088) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32905 (0X8089) 


Description 

StartSystem Executables Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Start16System Executables 

Minor Code 

32905 (0X8089) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32912 (0X8090) 


Description 

Shl16LoadPublicFonts Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Shl16LoadPublicFonts 

Minor Code 

32912 (0X8090) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32913 (0X8091) 



Description 


WinNoShutdown Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6NoShutdown 

Minor Code 

32913 (0X8091) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32915 (0X8093) 


Description 

WinSetTitle Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. WinSetTitle 

Minor Code 

32915 (0X8093) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32916 (0X8094) 


Description 

WinCPLRegister Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPl.Winl 6CPLRegister 

Minor Code 

32916 (0X8094) 

Trace Groups 


SHAPI 



Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32917 (0X8095) 


Description 

WinPMFILERegister Post-invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. Winl 6PMFILERegister 

Minor Code 

32917 (0X8095) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32918 (0X8096) 


Description 

InitialiseSessionManager Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. InitialiseSessionManager 

Minor Code 

32918 (0X8096) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMSHAPI Major Code: 0X00C0 Minor Code: 32919 (0X8097) 



Description 


SetKBDHotKey Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSHAPI. SetKBDHotKey 

Minor Code 

32919 (0X8097) 

Trace Groups 

SHAPI 


Trace Types 

POST 

Traced Parameters 


Return Code = %w 


PMWIN.DLL Trace Events 


The tracepoints for the PMWIN.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for PMWIN Major Code: 0X00C2, sorted by minor code. 

Trace events for PMWIN Major Code: 0X00C2 .sorted by tracepoint. 


Trace Events for PMWIN Major Code: 0X00C2, Sorted by 
Minor Code 

00100 (0X0064) WINREGISTERCLASS PRE-INVOCATION 

00101 (0X0065) WINDEFWINDOWPROC PRE-INVOCATION 

00102 (0X0066) WINDESTROYWINDOW PRE-INVOCATION 

00103 (0X0067) WINSHOWWINDOW PRE-INVOCATION 

00104 (0X0068) WINQUERYWINDOWRECT PRE-INVOCATION 

00105 (0X0069) WINCREATEWINDOW PRE-INVOCATION 

00106 (0X006A) WINCREATESTDWINDOW PRE-INVOCATION 

00107 (0X006B) WINENABLEWINDOW PRE-INVOCATION 

00108 (0X006C) WINISWINDOWENABLED PRE-INVOCATION 

00109 (0X006D) WINISWINDOWVISIBLE PRE-INVOCATION 

00110 (0X006E) WINQUERYWINDOWTEXT PRE-INVOCATION 

001 1 1 (0X006F) WINSETWINDOWTEXT PRE-INVOCATION 

00112 (0X0070) WINQUERYWINDOWTEXTLENGTH PRE-INVOCATION 

00113 (0X0071) WINWINDOWFROMID PRE-INVOCATION 
00114(0X0072) WINMULTWINDOWFROMIDS PRE-INVOCATION 

00115 (0X0073) WINISWINDOW PRE-INVOCATION 

00116 (0X0074) WINQUERYWINDOW PRE-INVOCATION 

001 1 7 (0X0075) WINISCHILD PRE-INVOCATION 

00118 (0X0076) WINQUERYWINDOWPROCESS PRE-INVOCATION 

00119 (0X0077) WINQUERYOBJECTWINDOW PRE-INVOCATION 


00120 (0X0078) WINQUERYDESKTOPWINDOW PRE-INVOCATION 

00121 (0X0079) WINSUBCLASSWINDOW PRE-INVOCATION 

00122 (0X007A) WINQUERYCLASSNAME PRE-INVOCATION 

00123 (0X007B) WINQUERYCLASSINFO PRE-INVOCATION 

00124 (0X007C) WINQUERYACTIVEWINDOW PRE-INVOCATION 

00125 (0X007D) WINQUERYSYSMODALWINDOW PRE-INVOCATION 

00126 (0X007E) WINSETSYSMODALWINDOW PRE-INVOCATION 

00127 (0X007F) WINLOCKWINDOW PRE-INVOCATION 

00128 (0X0080) WINREGISTERWINDOWDESTROY PRE-INVOCATION 

00129 (0X0081) WINQUERYWINDOWLOCKCOUNT PRE-INVOCATION 

00130 (0X0082) WINQUERYWINDOWUSHORT PRE-INVOCATION 

00131 (0X0083) WINSETWINDOWUSHORT PRE-INVOCATION 

00132 (0X0084) WINQUERYWINDOWULONG/WINQUERYWINDOWPTR PRE-INVOCATION 

00133 (0X0085) WINSETWINDOWULONG/WINSETWINDOWPTR PRE-INVOCATION 

00134 (0X0086) WINSETWINDOWBITS PRE-INVOCATION 

00135 (0X0087) WINCANCELSHUTDOWN PRE-INVOCATION 

00150 (0X0096) WINLISTBOXWNDPROC PRE-INVOCATION 

00151 (0X0097) WINDEFQUEUEPROC PRE-INVOCATION 

00152 (0X0098) WINDESKTOPWNDPROC PRE-INVOCATION 

00153 (0X0099) WINQUEUEWNDPROC PRE-INVOCATION 

00154 (0X009A) WINSETQUEUEPROC PRE-INVOCATION 

00156 (0X009C) WINDOWUPDATERECT PRE-INVOCATION 

00157 (0X009D) WINSAVEWINDOWPOS PRE-INVOCATION 

00158 (0X009E) WINSYSTEMSHUTDOWN PRE-INVOCATION 

00162 (0X00A2) COPYWINDOWRECT PRE-INVOCATION 

00163 (0X00A3) FINDTOPWINDOW PRE-INVOCATION 

00200 (0X00C8) WINREGISTERCLASS POST-INVOCATION 

00201 (0X00C9) WINDEFWINDOWPROC POST-INVOCATION 

00202 (0X00CA) WINDESTROYWINDOW POST-INVOCATION 

00203 (0X00CB) WINSHOWWINDOW POST-INVOCATION 

00204 (0X00CC) WINQUERYWINDOWRECT POST-INVOCATION 

00205 (0X00CD) WINBEGINPAINT POST-INVOCATION 

00206 (0X00CE) WINENDPAINT POST-INVOCATION 

00207 (0X00CF) WINGETPS POST-INVOCATION 

00208 (0X00D0) WINGETCLIPPS POST-INVOCATION 

00209 (0X00D1) WINRELEASEPS POST-INVOCATION 

00210 (0X00D2) WINOPENWINDOWDC POST-INVOCATION 

0021 1 (0X00D3) WINSCROLLWINDOW POST-INVOCATION 

00212 (0X00D4) WINFILLRECT POST-INVOCATION 

00213 (0X00D5) WINCREATEWINDOW POST-INVOCATION 

00214 (0X00D6) WINCREATESTDWINDOW POST-INVOCATION 

00215 (0X00D7) WINENABLEWINDOW POST-INVOCATION 

00216 (0X00D8) WINISWINDOWENABLED POST-INVOCATION 

00217 (0X00D9) WINENABLEWINDOWUPDATE POST-INVOCATION 

00218 (0X00DA) WINISWINDOWVISIBLE POST-INVOCATION 

00219 (0X00DB) WINQUERYWINDOWTEXT POST-INVOCATION 

00220 (0X00DC) WINSETWINDOWTEXT POST-INVOCATION 

00221 (0X00DD) WINQUERYWINDOWTEXTLENGTH POST-INVOCATION 

00222 (0X00DE) WINWINDOWFROMID POST-INVOCATION 

00223 (0X00DF) WINMULTWINDOWFROMIDS POST-INVOCATION 

00224 (0X00E0) WINISWINDOW POST-INVOCATION 

00225 (0X00E1) WINQUERYWINDOW POST-INVOCATION 

00226 (0X00E2) WINSETPARENT POST-INVOCATION 

00227 (0X00E3) WINISCHILD POST-INVOCATION 

00228 (0X00E4) WINSETOWNER POST-INVOCATION 

00229 (0X00E5) WINQUERYWINDOWPROCESS POST-INVOCATION 

00230 (0X00E6) WINQUERYOBJECTWINDOW POST-INVOCATION 

00231 (0X00E7) WINQUERYDESKTOPWINDOW POST-INVOCATION 

00232 (0X00E8) WINLOADSTRING POST-INVOCATION 

00233 (0X00E9) WINLOADMESSAGE POST-INVOCATION 

00234 (0X00EA) WINQUERYVERSION POST-INVOCATION 

00235 (0X00EB) WININITIALIZE POST-INVOCATION 

00236 (0X00EC) WINTERMINATE POST-INVOCATION 

00300 (0X01 2C) WINSETWINDOWPOS PRE-INVOCATION 

00301 (0X01 2D) WINQUERYWINDOWPOS PRE-INVOCATION 

00302 (0X01 2E) WINSETMULTWINDOWPOS PRE-INVOCATION 

00303 (0X01 2F) WINSETPARENT PRE-INVOCATION 

00304 (0X0130) WINSETOWNER PRE-INVOCATION 

00305 (0X0131) WINUPDATEWINDOW PRE-INVOCATION 

00306 (0X0132) WININVALIDATERECT PRE-INVOCATION 

00307 (0X0133) WININVALIDATEREGION PRE-INVOCATION 

00308 (0X0134) WINDRAWTEXT PRE-INVOCATION 

00309 (0X0135) WINVALIDATERECT PRE-INVOCATION 


00310 (0X0136) WINVALIDATEREGION PRE-INVOCATION 

00311 (0X0137) WINWINDOWFROMDC PRE-INVOCATION 

00312 (0X0138) WINQUERYWINDOWDC PRE-INVOCATION 

00313 (0X0139) WINGETSCREENPS PRE-INVOCATION 

00314 (0X01 3A) WINQUERYUPDATERECT PRE-INVOCATION 

00315 (0X01 3B) WINQUERYUPDATEREGION PRE-INVOCATION 

00316 (0X01 3C) WINEXCLUDEUPDATEREGION PRE-INVOCATION 

00317 (0X01 3D) WINLOCKWINDOWUPDATE PRE-INVOCATION 

00318 (0X01 3E) WIN LOCKVISREG IONS PRE-INVOCATION 

00319 (0X013F) WINBEGINPAINT PRE-INVOCATION 

00320 (0X0140) WINENDPAINT PRE-INVOCATION 

00321 (0X0141) WINGETPS PRE-INVOCATION 

00322 (0X0142) WINGETCLIPPS PRE-INVOCATION 

00323 (0X0143) WINRELEASEPS PRE-INVOCATION 

00324 (0X0144) WINOPENWINDOWDC PRE-INVOCATION 

00325 (0X0145) WINSCROLLWINDOW PRE-INVOCATION 

00326 (0X0146) WINFILLRECT PRE-INVOCATION 

00327 (0X0147) WINENABLEWINDOWUPDATE PRE-INVOCATION 

00400 (0X0190) WINSETWINDOWPOS POST-INVOCATION 

00401 (0X0191) WINQUERYWINDOWPOS POST-INVOCATION 

00402 (0X0192) WINSETMULTWINDOWPOS POST-INVOCATION 

00403 (0X0193) WINUPDATEWINDOW POST-INVOCATION 

00404 (0X0194) WININVALIDATERECT POST-INVOCATION 

00405 (0X0195) WININVALIDATEREGION POST-INVOCATION 

00406 (0X0196) WININVERTRECT POST-INVOCATION 

00407 (0X0197) WINDRAWBITMAP POST-INVOCATION 

00408 (0X0198) WINDRAWTEXT POST-INVOCATION 

00409 (0X0199) WINDRAWBORDER POST-INVOCATION 

00410 (0X01 9A) WINVALIDATERECT POST-INVOCATION 

00411 (0X019B) WINVALIDATEREGION POST-INVOCATION 

00412 (0X01 9C) WINWINDOWFROMDC POST-INVOCATION 

00413 (0X01 9D) WINQUERYWINDOWDC POST-INVOCATION 

00414 (0X01 9E) WINGETSCREENPS POST-INVOCATION 

00415 (0X01 9F) WINQUERYUPDATERECT POST-INVOCATION 

00416 (0X01 A0) WINQUERYUPDATEREGION POST-INVOCATION 

00417 (0X01 A1) WINEXCLUDEUPDATEREGION POST-INVOCATION 

00418 (0X01 A2) WINLOCKWINDOWUPDATE POST-INVOCATION 

00419 (0X01 A3) WIN LOCKVISREG IONS POST-INVOCATION 

00500 (0X01 F4) WINBEGINENUMWINDOWS PRE-INVOCATION 

00501 (0X01 F5) WINGETNEXTWINDOW PRE-INVOCATION 

00502 (0X01 F6) WINENDENUMWINDOWS PRE-INVOCATION 

00503 (0X01 F7) WINWINDOWFROMPOINT PRE-INVOCATION 

00504 (0X01 F8) WINMAPWINDOWPOINTS PRE-INVOCATION 

00600 (0X0258) WINSETACTIVEWINDOW POST-INVOCATION 

00601 (0X0259) WINSUBCLASSWINDOW POST-INVOCATION 

00602 (0X025A) WINQUERYCLASSNAME POST-INVOCATION 

00603 (0X025B) WINQUERYCLASSINFO POST-INVOCATION 

00604 (0X025C) WINQUERYACTIVEWINDOW POST-INVOCATION 

00605 (0X025D) WINISTHREADACTIVE POST-INVOCATION 

00606 (0X025E) WINQUERYSYSMODALWINDOW POST-INVOCATION 

00607 (0X025F) WINSETSYSMODALWINDOW POST-INVOCATION 

00608 (0X0260) WINLOCKWINDOW POST-INVOCATION 

00609 (0X0261) WINREGISTERWINDOWDESTROY POST-INVOCATION 

00610 (0X0262) WINQUERYWINDOWLOCKCOUNT POST-INVOCATION 

0061 1 (0X0263) WINQUERYWINDOWUSHORT POST-INVOCATION 

00612 (0X0264) WINSETWINDOWUSHORT POST-INVOCATION 

0061 3 (0X0265) WINQUERYWINDOWUSHORT/WINQUERYWINDOWULONG/WINQUERYWINDOWPTR 
POST-INVOCATION 

00614 (0X0266) WINSETWINDOWUSHORT/WINSETWINDOWULONG/WINSETWINDOWPTR POST-INVOCATION 

00615 (0X0267) WINSETWINDOWBITS POST-INVOCATION 

00650 (0X028A) WINBEGINENUMWINDOWS POST-INVOCATION 

00651 (0X028B) WINGETNEXTWINDOW POST-INVOCATION 

00652 (0X028C) WINENDENUMWINDOWS POST-INVOCATION 

00653 (0X028D) WINWINDOWFROMPOINT POST-INVOCATION 

00654 (0X028E) WINMAPWINDOWPOINTS POST-INVOCATION 

00700 (0X02BC) WINQUERYQUEUEINFO PRE-INVOCATION 

00701 (0X02BD) WINCREATEMSGQUEUE PRE-INVOCATION 

00702 (0X02BE) WINDESTROYMSGQUEUE PRE-INVOCATION 

00703 (0X02BF) WINGETMSG PRE-INVOCATION 

00704 (0X02C0) WINPEEKMSG PRE-INVOCATION 

00705 (0X02C1) WINDISPATCHMSG PRE-INVOCATION 

00706 (0X02C2) WINPOSTMSG PRE-INVOCATION 

00707 (0X02C3) WININSENDMSG PRE-INVOCATION 


00708 (0X02C4) WINBROADCASTMSG PRE-INVOCATION 

00709 (0X02C5) WINWAITMSG PRE-INVOCATION 

00710 (0X02C6) WINQUERYQUEUESTATUS PRE-INVOCATION 

00711 (0X02C7) WINPOSTQUEUEMSG PRE-INVOCATION 

00712 (0X02C8) WINQUERYMSGPOS PRE-INVOCATION 

00713 (0X02C9) WINQUERYMSGTIME PRE-INVOCATION 

00714 (0X02CA) WINMSGSEMWAIT PRE-INVOCATION 

00715 (0X02CB) WINMSGMUXSEMWAIT PRE-INVOCATION 

00717 (0X02CD) WINSETMSGINTEREST PRE-INVOCATION 

00718 (0X02CE) WINSENDMSG PRE-INVOCATION 

00751 (0X02EF) WINSENDQUEUEMSG PRE-INVOCATION 

00752 (0X02F0) CREATEQUEUE PRE-INVOCATION 

00753 (0X02F1 ) FREEQUEUE PRE-INVOCATION 

00754 (0X02F2) CLEARQUEUEGLOBALS PRE-INVOCATION 

00755 (0X02F3) REASSIGNINPUT PRE-INVOCATION 

00756 (0X02F4) ASSOCIATEQUEUE PRE-INVOCATION 

00757 (0X02F5) READMESSAGE PRE-INVOCATION 

00800 (0X0320) WINQUERYQUEUEINFO POST-INVOCATION 

00801 (0X0321) WINCREATEMSGQUEUE POST-INVOCATION 

00802 (0X0322) WINDESTROYMSGQUEUE POST-INVOCATION 

00803 (0X0323) WINCANCELSHUTDOWN POST-INVOCATION 

00804 (0X0324) WINGETMSG/WINPEEKMSG POST-INVOCATION 

00805 (0X0325) WINPEEKMSG POST-INVOCATION 

00806 (0X0326) WINDISPATCHMSG POST-INVOCATION 

00807 (0X0327) WINPOSTMSG/WINPOSTQUEUEMSG POST-INVOCATION 

00808 (0X0328) WININSENDMSG POST-INVOCATION 

00809 (0X0329) WINBROADCASTMSG POST-INVOCATION 

00810 (0X032A) WINWAITMSG POST-INVOCATION 

00811 (0X032B) WINQUERYQUEUESTATUS POST-INVOCATION 

00812 (0X032C) WINPOSTQUEUEMSG POST-INVOCATION 

00813 (0X032D) WINQUERYMSGPOS POST-INVOCATION 

00814 (0X032E) WINQUERYMSGTIME POST-INVOCATION 

00815 (0X032F) WINMSGSEMWAIT POST-INVOCATION 

00816 (0X0330) WINMSGSEMWAIT/WINMSGMUXSEMWAIT POST-INVOCATION 

00817 (0X0331) WINSETMSGINTEREST POST-INVOCATION 

00818 (0X0332) WINSENDMSG/WINSENDQUEUEMSG POST-INVOCATION 

00900 (0X0384) WINSETFOCUS PRE-INVOCATION 

00901 (0X0385) WINFOCUSCHANGE PRE-INVOCATION 

00902 (0X0386) WINSETCAPTURE PRE-INVOCATION 

00903 (0X0387) WINQUERYCAPTURE PRE-INVOCATION 

00904 (0X0388) WINQUERYFOCUS PRE-INVOCATION 

00905 (0X0389) WINSETACTIVEWINDOW PRE-INVOCATION 

00906 (0X038A) WINISTHREADACTIVE PRE-INVOCATION 

00907 (0X038B) WINGETKEYSTATE PRE-INVOCATION 

00908 (0X038C) WINGETPHYSKEYSTATE PRE-INVOCATION 

00909 (0X038D) WINENABLEPHYSINPUT PRE-INVOCATION 

00910 (0X038E) WINISPHYSINPUTENABLED PRE-INVOCATION 

00911 (0X038F) WINSETKEYBOARDSTATETABLE PRE-INVOCATION 

00912 (0X0390) WINTRACKRECT PRE-INVOCATION 

00913 (0X0391) WINSHOWTRACKRECT PRE-INVOCATION 

01000 (0X03E8) WINSETFOCUS POST-INVOCATION 

01001 (0X03E9) WINFOCUSCHANGE POST-INVOCATION 

01002 (0X03EA) WINSETCAPTURE POST-INVOCATION 

01003 (0X03EB) WINQUERYCAPTURE POST-INVOCATION 

01004 (0X03EC) WINQUERYFOCUS/WINQUERYSYSMODALWINDOW POST-INVOCATION 

01005 (0X03ED) WINGETKEYSTATE POST-INVOCATION 

01006 (0X03EE) WINGETPHYSKEYSTATE POST-INVOCATION 

01007 (0X03EF) WINENABLEPHYSINPUT POST-INVOCATION 

01008 (0X03F0) WINISPHYSINPUTENABLED POST-INVOCATION 

01009 (0X03F1) WINSETKEYBOARDSTATETABLE POST-INVOCATION 

01100 (0X044C) WINLOADDLG PRE-INVOCATION 

01101 (0X044D) WINDLGBOX PRE-INVOCATION 

01102 (0X044E) WINDISMISSDLG PRE-INVOCATION 

01103 (0X044F) WINSETDLGITEMSHORT PRE-INVOCATION 

01104 (0X0450) WINQUERYDLGITEMSHORT PRE-INVOCATION 

01105 (0X0451) WINSETDLGITEMTEXT PRE-INVOCATION 

01106 (0X0452) WINQUERYDLGITEMTEXT PRE-INVOCATION 

01107 (0X0453) WINDEFDLGPROC PRE-INVOCATION 

01108 (0X0454) WINALARM PRE-INVOCATION 

01109 (0X0455) WINMESSAGEBOX PRE-INVOCATION 
OHIO (0X0456) WINPROCESSDLG PRE-INVOCATION 

01111 (0X0457) WINSENDDLGITEMMSG PRE-INVOCATION 

01112 (0X0458) WINMAPDLGPOINTS PRE-INVOCATION 


01113 (0X0459) WINSUBSTITUTESTRINGS PRE-INVOCATION 

01 1 14 (0X045A) WINENUMDLGITEM PRE-INVOCATION 

01115 (0X045B) WINCREATEDLG PRE-INVOCATION 
01150 (0X047E) WINEDITWNDPROC PRE-INVOCATION 

01200 (0X04B0) WINLOADDLG POST-INVOCATION 

01201 (0X04B1) WINDLGBOX POST-INVOCATION 

01202 (0X04B2) WINDISMISSDLG POST-INVOCATION 

01203 (0X04B3) WINSETDLGITEMSHORT POST-INVOCATION 

01204 (0X04B4) WINQUERYDLGITEMSHORT POST-INVOCATION 

01205 (0X04B5) WINSETDLGITEMTEXT POST-INVOCATION 

01206 (0X04B6) WINQUERYDLGITEMTEXT POST-INVOCATION 

01207 (0X04B7) WINDEFDLGPROC POST-INVOCATION 

01208 (0X04B8) WINALARM POST-INVOCATION 

01209 (0X04B9) WINMESSAGEBOX POST-INVOCATION 

01210 (0X04BA) WINPROCESSDLG POST-INVOCATION 

01211 (0X04BB) WINSENDDLGITEMMSG POST-INVOCATION 

01212 (0X04BC) WINMAPDLGPOINTS POST-INVOCATION 

01213 (0X04BD) WINSUBSTITUTESTRINGS POST-INVOCATION 

01214 (0X04BE) WINENUMDLGITEM POST-INVOCATION 

01215 (0X04BF) WINCREATEDLG POST-INVOCATION 

01300 (0X0514) WINLOADMENU PRE-INVOCATION 

01301 (0X0515) WINCREATEMENU PRE-INVOCATION 

01302 (0X0516) WINFLASHWINDOW PRE-INVOCATION 

01303 (0X0517) WINCREATEFRAMECONTROLS PRE-INVOCATION 

01304 (0X0518) WINFORMATFRAME PRE-INVOCATION 

01305 (0X0519) WINCALCFRAMERECT PRE-INVOCATION 

01306 (0X051 A) WINDRAWBITMAP PRE-INVOCATION 

01307 (0X051 B) WINDRAWBORDER PRE-INVOCATION 

01308 (0X051 C) WING ETMIN POSITION PRE-INVOCATION 

01309 (0X051 D) WINGETMAXPOSITION PRE-INVOCATION 

01350 (0X0546) WINFRAMEWNDPROC PRE-INVOCATION 

01351 (0X0547) WINSCROLLBARWNDPROC PRE-INVOCATION 

01352 (0X0548) WINTITLEBARWNDPROC PRE-INVOCATION 

01353 (0X0549) WINSTATICWNDPROC PRE-INVOCATION 

01354 (0XO54A) WINICONTEXTWNDPROC PRE-INVOCATION 

01355 (0X054B) WINCALLHELPHOOK PRE-INVOCATION 

01356 (0X054C) DESTROYLIST PRE-INVOCATION 

01357 (0X054D) INSERTLISTITEM PRE-INVOCATION 

01358 (0X054E) DELETELISTITEM PRE-INVOCATION 

01359 (0X054F) GETLISTITEMLENGTH PRE-INVOCATION 

01360 (0X0550) GETLISTITEM PRE-INVOCATION 
01362 (0X0552) SETLISTITEM PRE-INVOCATION 

01400 (0X0578) WINLOADMENU POST-INVOCATION 

01401 (0X0579) WINCREATEMENU POST-INVOCATION 

01402 (0X057A) WINFLASHWINDOW POST-INVOCATION 

01403 (0X057B) WINCREATEFRAMECONTROLS POST-INVOCATION 

01404 (0X057C) WINFORMATFRAME POST-INVOCATION 

01405 (0X057D) WINCALCFRAMERECT POST-INVOCATION 

01406 (0X057E) WINGETMINPOSITION POST-INVOCATION 

01407 (0X057F) WINGETMAXPOSITION POST-INVOCATION 

01500 (0X05DC) WINSETRECT PRE-INVOCATION 

01501 (0X05DD) WINISRECTEMPTY PRE-INVOCATION 

01502 (0X05DE) WINCOPYRECT PRE-INVOCATION 

01503 (0X05DF) WINEQUALRECT PRE-INVOCATION 

01504 (0X05E0) WINSETRECTEMPTY PRE-INVOCATION 

01505 (0X05E1) WINOFFSETRECT PRE-INVOCATION 

01506 (0X05E2) WININFLATERECT PRE-INVOCATION 

01507 (0X05E3) WINPTINRECT PRE-INVOCATION 

01508 (0X05E4) WININTERSECTRECT PRE-INVOCATION 

01509 (0X05E5) WINUNIONRECT PRE-INVOCATION 

01510 (0X05E6) WINSUBTRACTRECT PRE-INVOCATION 

01511 (0X05E7) WININVERTRECT PRE-INVOCATION 

01512 (0X05E8) WINMAKERECT PRE-INVOCATION 

01513 (0X05E9) WINMAKEPOINTS PRE-INVOCATION 

01600 (0X0640) WINSETRECT POST-INVOCATION 

01601 (0X0641) WINISRECTEMPTY POST-INVOCATION 

01602 (0X0642) WINCOPYRECT POST-INVOCATION 

01603 (0X0643) WINEQUALRECT POST-INVOCATION 

01604 (0X0644) WINSETRECTEMPTY POST-INVOCATION 

01605 (0X0645) WINOFFSETRECT POST-INVOCATION 

01606 (0X0646) WININFLATERECT POST-INVOCATION 

01607 (0X0647) WINPTINRECT POST-INVOCATION 

01608 (0X0648) WININTERSECTRECT POST-INVOCATION 


01609 (0X0649) WINUNIONRECT POST-INVOCATION 

01610 (0X064A) WINSUBTRACTRECT POST-INVOCATION 

01611 (0X064B) WINMAKERECT POST-INVOCATION 

01612 (0X064C) WINMAKEPOINTS POST-INVOCATION 

01613 (0X064D) WINTRACKRECT POST-INVOCATION 

01614 (0X064E) WINSHOWTRACKRECT POST-INVOCATION 

01700 (0X06A4) WINQUERYVERSION PRE-INVOCATION 

01701 (0X06A5) WININITIALIZE PRE-INVOCATION 

01702 (0X06A6) WINTERMINATE PRE-INVOCATION 

01703 (0X06A7) WINQUERYSYSTEMATOMTABLE PRE-INVOCATION 

01704 (0X06A8) WINQUERYSYSVALUE PRE-INVOCATION 

01705 (0X06A9) WINSETSYSVALUE PRE-INVOCATION 

01706 (0X06AA) WINQUERYSYSCOLOR PRE-INVOCATION 

01707 (0X06AB) WINSETSYSCOLORS PRE-INVOCATION 

01708 (0X06AC) WINCATCH PRE-INVOCATION 

01709 (0X06AD) WINTHROW PRE-INVOCATION 

01710 (0X06AE) WINGETLASTERROR PRE-INVOCATION 

01711 (0X06AF) WINGETERRORINFO PRE-INVOCATION 

01712 (0X06B0) WINFREEERRORINFO PRE-INVOCATION 

01713 (0X06B1) WINSTARTTIMER PRE-INVOCATION 

01714 (0X06B2) WINSTOPTIMER PRE-INVOCATION 

01715 (0X06B3) WINGETCURRENTTIME PRE-INVOCATION 

01750 (0X06D6) WINSETERRORINFO PRE-INVOCATION 

01751 (0X06D7) WINSETLASTERROR PRE-INVOCATION 

01800 (0X0708) WINQUERYSYSVALUE POST-INVOCATION 

01801 (0X0709) WINSETSYSVALUE POST-INVOCATION 

01802 (0X070A) WINQUERYSYSCOLOR POST-INVOCATION 

01803 (0X070B) WINSETSYSCOLORS POST-INVOCATION 

01804 (0X070C) WINCATCH POST-INVOCATION 

01805 (0X070D) WINTHROW POST-INVOCATION 

01806 (0X070E) WINGETLASTERROR POST-INVOCATION 

01807 (0X070F) WINGETERRORINFO POST-INVOCATION 

01808 (0X0710) WINFREEERRORINFO POST-INVOCATION 

01809 (0X0711) WINSTARTTIMER POST-INVOCATION 

01810 (0X0712) WINSTOPTIMER POST-INVOCATION 

01811 (0X0713) WINGETCURRENTTIME POST-INVOCATION 

01900 (0X076C) WINLOADACCELTABLE PRE-INVOCATION 

01901 (0X076D) WINCREATEACCELTABLE PRE-INVOCATION 

01902 (0X076E) WINDESTROYACCELTABLE PRE-INVOCATION 

01903 (0X076F) WINCOPYACCELTABLE PRE-INVOCATION 

01904 (0X0770) WINTRANSLATEACCEL PRE-INVOCATION 

01905 (0X0771) WINSETACCELTABLE PRE-INVOCATION 

01906 (0X0772) WINQUERYACCELTABLE PRE-INVOCATION 

02000 (0X07D0) WINLOADACCELTABLE POST-INVOCATION 

02001 (0X07D1) WINCREATEACCELTABLE POST-INVOCATION 

02002 (0X07D2) WINDESTROYACCELTABLE POST-INVOCATION 

02003 (0X07D3) WINCOPYACCELTABLE POST-INVOCATION 

02004 (0X07D4) WINTRANSLATEACCEL POST-INVOCATION 

02005 (0X07D5) WINSETACCELTABLE POST-INVOCATION 

02006 (0X07D6) WINQUERYACCELTABLE POST-INVOCATION 

02100 (0X0834) WINOPENCLIPBRD PRE-INVOCATION 

02101 (0X0835) WINCLOSECLIPBRD PRE-INVOCATION 

02102 (0X0836) WINEMPTYCLIPBRD PRE-INVOCATION 

02103 (0X0837) WINSETCLIPBRDOWNER PRE-INVOCATION 

02104 (0X0838) WINQUERYCLIPBRDOWNER PRE-INVOCATION 

02105 (0X0839) WINSETCLIPBRDDATA PRE-INVOCATION 

02106 (0X083A) WINQUERYCLIPBRDDATA PRE-INVOCATION 

02107 (0X083B) WINENUMCLIPBRDFMTS PRE-INVOCATION 

02108 (0X083C) WINQUERYCLIPBRDFMTINFO PRE-INVOCATION 

02109 (0X083D) WINSETCLIPBRDVIEWER PRE-INVOCATION 

02110 (0X083E) WINQUERYCLIPBRDVIEWER PRE-INVOCATION 

02200 (0X0898) WINOPENCLIPBRD POST-INVOCATION 

02201 (0X0899) WINCLOSECLIPBRD POST-INVOCATION 

02202 (0X089A) WINEMPTYCLIPBRD POST-INVOCATION 

02203 (0X089B) WINSETCLIPBRDOWNER POST-INVOCATION 

02204 (0X089C) 

WINQUERYCLIPBRDOWNER/WINQUERYCIPBRDVIEWER/WINQUERYFOCUS/WINQUERYSYSMODALWINDOW 

POST-INVOCATION 

02205 (0X089D) WINSETCLIPBRDDATA POST-INVOCATION 

02206 (0X089E) WINQUERYCLIPBRDDATA POST-INVOCATION 

02207 (0X089F) WINENUMCLIPBRDFMTS POST-INVOCATION 

02208 (0X08A0) WINQUERYCLIPBRDFMTINFO POST-INVOCATION 

02209 (0X08A1) WINSETCLIPBRDVIEWER POST-INVOCATION 


02210 (0XO8A2) WINQUERYCLIPBRDVIEWER POST-INVOCATION 

02300 (0X08FC) WINDESTROYCURSOR PRE-INVOCATION 

02301 (0X08FD) WINSHOWCURSOR PRE-INVOCATION 

02302 (0X08FE) WINCREATECURSOR PRE-INVOCATION 

02303 (0X08FF) WINQUERYCURSORINFO PRE-INVOCATION 

02304 (0X0900) WINSETPOINTER PRE-INVOCATION 

02305 (0X0901) WINSHOWPOINTER PRE-INVOCATION 

02306 (0X0902) WINQUERYSYSPOINTER PRE-INVOCATION 

02307 (0X0903) WINLOADPOINTER PRE-INVOCATION 

02308 (0X0904) WINCREATEPOINTER PRE-INVOCATION 

02309 (0X0905) WINDESTROYPOINTER PRE-INVOCATION 

02310 (0X0906) WINQUERYPOINTER PRE-INVOCATION 

02311 (0X0907) WINSETPOINTERPOS PRE-INVOCATION 

02312 (0X0908) WINQUERYPOINTERPOS PRE-INVOCATION 

02313 (0X0909) WINQUERYPOINTERINFO PRE-INVOCATION 

02314 (0X090A) WINDRAWPOINTER PRE-INVOCATION 

02315 (0X090B) WINGETSYSBITMAP PRE-INVOCATION 

02400 (0X0960) WINDESTROYCURSOR POST-INVOCATION 

02401 (0X0961) WINSHOWCURSOR POST-INVOCATION 

02402 (0X0962) WINCREATECURSOR POST-INVOCATION 

02403 (0X0963) WINQUERYCURSORINFO POST-INVOCATION 

02404 (0X0964) WINSETPOINTER POST-INVOCATION 

02405 (0X0965) WINSHOWPOINTER POST-INVOCATION 

02406 (0X0966) WINQUERYSYSPOINTER POST-INVOCATION 

02407 (0X0967) WINLOADPOINTER POST-INVOCATION 

02408 (0X0968) WINCREATEPOINTER POST-INVOCATION 

02409 (0X0969) WINDESTROYPOINTER POST-INVOCATION 

0241 0 (0X096A) WINQUERYPOINTER POST-INVOCATION 

02411 (0X096B) WINSETPOINTERPOS POST-INVOCATION 

02412 (0X096C) WINQUERYPOINTERPOS POST-INVOCATION 

02413 (0X096D) WINQUERYPOINTERINFO POST-INVOCATION 

02414 (0X096E) WINDRAWPOINTER POST-INVOCATION 

02415 (0X096F) WINGETSYSBITMAP POST-INVOCATION 

02500 (0X09C4) WINSETHOOK PRE-INVOCATION 

02501 (0X09C5) WINRELEASEHOOK PRE-INVOCATION 

02502 (0X09C6) WINCALLMSGFILTER PRE-INVOCATION 

02552 (0X09F8) FARCALLHOOK PRE-INVOCATION 

02553 (0X09F9) FREEQUEUEWINDOWHOOKS PRE-INVOCATION 

02600 (0X0A28) WINSETHOOK POST-INVOCATION 

02601 (0X0A29) WINRELEASEHOOK POST-INVOCATION 

02602 (0XOA2A) WINCALLMSGFILTER POST-INVOCATION 

02700 (0X0A8C) WINSETCP PRE-INVOCATION 

02701 (0XOA8D) WINQUERYCP PRE-INVOCATION 

02702 (0X0A8E) WINQUERYCPLIST PRE-INVOCATION 

02703 (0XOA8F) WINCPTRANSLATESTRING PRE-INVOCATION 

02704 (0X0A90) WINCPTRANSLATECHAR PRE-INVOCATION 

02705 (OXOA91) WINUPPER PRE-INVOCATION 

02706 (0X0A92) WINUPPERCHAR PRE-INVOCATION 

02707 (OXOA93) WINNEXTCHAR PRE-INVOCATION 

02708 (0X0A94) WINPREVCHAR PRE-INVOCATION 

02709 (OXOA95) WINCOMPARESTRINGS PRE-INVOCATION 

0271 0 (0X0A96) WINLOADSTRING PRE-INVOCATION 

02711 (OXOA97) WINLOADMESSAGE PRE-INVOCATION 

02750 (0X0ABE) WINLOADCHARXLATETBL PRE-INVOCATION 

02751 (OXOABF) WINSETCHARXLATETBL PRE-INVOCATION 

02752 (0X0AC0) WINQUERYCHARXLATETBL PRE-INVOCATION 

02753 (0X0AC1 ) WINLOADVKEYGLYPHXLATETBL PRE-INVOCATION 

02754 (0X0AC2) WINSETVKEYGLYPHXLATETBL PRE-INVOCATION 

02755 (OXOAC3) WINQUERYVKEYGLYPHXLATETBL PRE-INVOCATION 

02756 (0X0AC4) WINSETKBDLAYOUT PRE-INVOCATION 

02757 (OXOAC5) WINQUERYKBDLAYOUT PRE-INVOCATION 

02800 (0X0AF0) WINSETCP POST-INVOCATION 

02801 (0X0AF1) WINQUERYCP POST-INVOCATION 

02802 (0X0AF2) WINQUERYCPLIST POST-INVOCATION 

02803 (0X0AF3) WINCPTRANSLATESTRING POST-INVOCATION 

02804 (0X0AF4) WINCPTRANSLATECHAR POST-INVOCATION 

02805 (OXOAF5) WINUPPER POST-INVOCATION 

02806 (0X0AF6) WINUPPERCHAR POST-INVOCATION 

02807 (OXOAF7) WINNEXTCHAR POST-INVOCATION 

02808 (0X0AF8) WINPREVCHAR POST-INVOCATION 

02809 (OXOAF9) WINCOMPARESTRINGS POST-INVOCATION 

02900 (0X0B54) WINCREATEHEAP PRE-INVOCATION 

02901 (OXOB55) WINDESTROYHEAP PRE-INVOCATION 


02902 (OXOB56) WINAVAILMEM PRE-INVOCATION 

02903 (0X0B57) WINALLOCMEM PRE-INVOCATION 

02904 (OXOB58) WINREALLOCMEM PRE-INVOCATION 

02905 (0X0B59) WINFREEMEM PRE-INVOCATION 

02906 (OXOB5A) WINLOCKHEAP PRE-INVOCATION 

02950 (0X0B86) COMPACTMOVEABLEHEAP PRE-INVOCATION 

02951 (0XOB87) FINDFREEBLOCK PRE-INVOCATION 

02952 (0X0B88) FINDMAXFREEBLOCK PRE-INVOCATION 

02953 (OXOB89) INSERTFREEBLOCK PRE-INVOCATION 

02954 (0X0B8A) SORTFREELIST PRE-INVOCATION 

02955 (0XOB8B) GETSIZEDS PRE-INVOCATION 

02956 (0X0B8C) VALIDATEHEAPHANDLE PRE-INVOCATION 


Trace Events for PMWIN Major Code: 0X00C2, Sorted by 
Tracepoint 


ASSOCIATEQUEUE 00756 (0X02F4) 
CLEARQUEUEGLOBALS 00754 (0X02F2) 
COMPACTMOVEABLEHEAP 02950 (0X0B86) 
COPYWINDOWRECT 00162 (0X00A2) 

CREATEQUEUE 00752 (0X02F0) 

DELETELISTITEM 01358 (0X054E) 

DESTROYLIST 01356 (0X054C) 

DRAWTEXT 00408 (0X0198) 

FARCALLHOOK 02552 (0X09F8) 

FINDFREEBLOCK 02951 (0X0B87) 
FINDMAXFREEBLOCK 02952 (0X0B88) 
FINDTOPWINDOW 00163 (0X00A3) 

FREEQUEUE 00753 (0X02F1) 
FREEQUEUEWINDOWHOOKS 02553 (0X09F9) 
GETLISTITEM 01360 (0X0550) 

GETLISTITEMLENGTH 01359 (0X054F) 

GETSIZEDS 02955 (0X0B8B) 

INSERTFREEBLOCK 02953 (0X0B89) 

INSERTLISTITEM 01357 (0X054D) 

POSTWINALARM 01208 (0X04B8) 
POSTWINBEGINENUMWINDOWS 00650 (0X028A) 
POSTWINBEGINPAINT 00205 (0X00CD) 
POSTWINBROADCASTMSG 00809 (0X0329) 
POSTWINCATCH 01804 (0X070C) 
POSTWINCOMPARESTRINGS 02809 (0X0AF9) 
POSTWINCOPYACCELTABLE 02003 (0X07D3) 
POSTWINCOPYRECT 01602 (0X0642) 
POSTWINCREATEACCELTABLE 02001 (0X07D1) 
POSTWINCREATECURSOR 02402 (0X0962) 
POSTWINCREATEFRAMECONTROLS 01403 (0X057B) 
POSTWINCREATEPOINTER 02408 (0X0968) 
POSTWINDESTROYACCELTABLE 02002 (0X07D2) 
POSTWINDESTROYCURSOR 02400 (0X0960) 
POSTWINDESTROYPOINTER 02409 (0X0969) 
POSTWINDESTROYWINDOW 00202 (0X00CA) 
POSTWIN DISPATCHMSG 00806 (0X0326) 
POSTWINDRAWPOINTER 02414 (0X096E) 
POSTWINENABLEPHYSINPUT 01 007 (0X03EF) 
POSTWINENABLEWINDOW 00215 (0X00D7) 
POSTWINENABLEWINDOWUPDATE 0021 7 (0X00D9) 
POSTWINENDENUMWINDOWS 00652 (0X028C) 
POSTWINENDPAINT 00206 (0X00CE) 
POSTWINENUMDLGITEM 01214 (0X04BE) 
POSTWINEQUALRECT 01603 (0X0643) 
POSTWINEXCLUDEUPDATEREGION 00417 (0X01 A1) 
POSTWINFILLRECT 00212 (0X00D4) 
POSTWINFOCUSCHANGE 01001 (0X03E9) 
POSTWINGETCLIPPS 00208 (0X00D0) 


POSTWINGETCURRENTTIME 01811 (0X0713) 
POSTWINGETKEYSTATE 01005 (0X03ED) 

POSTWING ETMAXPOSITION 01407 (0X057F) 

POSTWING ETMINPOSITION 01406 (0X057E) 
POSTWINGETMSG 00804 (0X0324) 

POSTWING ETNEXTWIN DOW 00651 (0X028B) 
POSTWINGETPHYSKEYSTATE 01006 (0X03EE) 
POSTWINGETPS 00207 (0X00CF) 
POSTWINGETSCREENPS 00414 (0X01 9E) 
POSTWINGETSYSBITMAP 02415 (0X096F) 
POSTWININFLATERECT 01606 (0X0646) 

POSTWIN INSEN DMSG 00808 (0X0328) 
POSTWININTERSECTRECT 01608 (0X0648) 
POSTWININVERTRECT 00406 (0X0196) 

POSTWINISCHILD 00227 (0X00E3) 
POSTWINISPHYSINPUTENABLED 01008 (0X03F0) 
POSTWINISRECTEMPTY 01601 (0X0641) 
POSTWINISTHREADACTIVE 00605 (0X025D) 
POSTWINISWINDOW 00224 (0X00E0) 
POSTWINISWINDOWENABLED 00216 (OXOOD8) 
POSTWINISWINDOWVISIBLE 00218 (0X00DA) 
POSTWINLOADACCELTABLE 02000 (0X07D0) 
POSTWINLOADMENU 01400 (0X0578) 
POSTWINLOADPOINTER 02407 (0X0967) 
POSTWINLOCKWINDOWUPDATE 00418 (0X01 A2) 
POSTWINMAKEPOINTS 01612 (0X064C) 
POSTWINMAKERECT 01 61 1 (0X064B) 

POSTWINMAPDLG POINTS 01212 (0X04BC) 
POSTWINMAPWINDOWPOINTS 00654 (0X028E) 
POSTWINMSGMUXSEMWAIT 00816 (0X0330) 
POSTWINMSGSEMWAIT 00815 (0X032F) 
POSTWINMULTWINDOWFROMIDS 00223 (0X00DF) 
POSTWINOFFSETRECT 01605 (0X0645) 
POSTWINOPENWINDOWDC 0021 0 (0X00D2) 

POSTWIN PEEKMSG 00805 (0X0325) 

POSTWIN POSTMSG 00807 (0X0327) 

POSTWIN POSTQUEUEIVISG 00812 (0X032C) 

POSTWIN PTINRECT 01607 (0X0647) 
POSTWINQUERYACCELTABLE 02006 (0X07D6) 
POSTWINQUERYACTIVEWINDOW 00604 (0X025C) 
POSTWINQUERYCAPTURE 01003 (0X03EB) 
POSTWINQUERYCLASSNAME 00602 (0X025A) 
POSTWINQUERYCLIPBRDOWNER 02204 (0X089C) 
POSTWINQUERYCLIPBRDVIEWER 02210 (0X08A2) 
POSTWINQUERYCURSORINFO 02403 (0X0963) 
POSTWINQUERYDLGITEMSHORT 01 204 (0X04B4) 
POSTWINQUERYFOCUS 01004 (0X03EC) 
POSTWINQUERYMSGPOS 00813 (0X032D) 
POSTWINQUERYMSGTIME 00814 (0X032E) 
POSTWINQUERYOBJECTWINDOW 00230 (0X00E6) 
POSTWINQUERYPOINTER 02410 (0X096A) 
POSTWINQUERYPOINTERINFO 02413 (0X096D) 
POSTWINQUERYPOINTERPOS 02412 (0X096C) 
POSTWINQUERYQUEUEINFO 00800 (0X0320) 
POSTWINQUERYQUEUESTATUS 00811 (0X032B) 
POSTWINQUERYSYSMODALWINDOW 00606 (0X025E) 
POSTWINQUERYSYSPOINTER 02406 (0X0966) 
POSTWINQUERYSYSVALUE 01800 (0X0708) 
POSTWINQUERYUPDATERECT 00415 (0X01 9F) 
POSTWINQUERYUPDATEREGION 00416 (0X01 A0) 
POSTWINQUERYWINDOW 00225 (0X00E1 ) 
POSTWINQUERYWINDOWDC 00413 (0X01 9D) 
POSTWINQUERYWINDOWLOCKCOUNT 00610 (0X0262) 
POSTWINQUERYWINDOWPOS 00401 (0X0191) 
POSTWINQUERYWINDOWPROCESS 00229 (0X00E5) 
POSTWINQUERYWINDOWRECT 00204 (0X00CC) 
POSTWINQUERYWINDOWTEXT 00219 (0X00DB) 
POSTWINQUERYWINDOWTEXTLENGTH 00221 (0X00DD) 
POSTWINQUERYWINDOWVALUE 00611 (0X0263) 
POSTWINQUERYWINDOWVALUE 0061 3 (0X0265) 
POSTWINREGISTERWINDOWDESTROY 00609 (0X0261) 
POSTWINRELEASEPS 00209 (0X00D1) 
POSTWINSENDDLGITEMMSG 01211 (0X04BB) 


POSTWINSENDMSG 00818 (0X0332) 
POSTWINSETACCELTABLE 02005 (0X07D5) 
POSTWINSETACTIVEWINDOW 00600 (0X0258) 
POSTWINSETCAPTURE 01002 (0X03EA) 
POSTWINSETDLGITEMSHORT 01203 (0X04B3) 
POSTWINSETFOCUS 01000 (0X03E8) 
POSTWINSETKEYBOARDSTATETABLE 01009 (0X03F1) 
POSTWINSETOWNER 00228 (0X00E4) 
POSTWINSETPARENT 00226 (0X00E2) 
POSTWINSETPOINTER 02404 (0X0964) 
POSTWINSETPOINTERPOS 02411 (0X096B) 
POSTWINSETRECT 01600 (0X0640) 
POSTWINSETRECTEMPTY 01604 (0X0644) 
POSTWINSETSYSMODALWINDOW 00607 (0X025F) 
POSTWINSETSYSVALUE 01801 (0X0709) 
POSTWINSETWINDOWBITS 0061 5 (0X0267) 
POSTWINSETWINDOWTEXT 00220 (0X00DC) 
POSTWINSETWINDOWVALUE 00612 (0X0264) 
POSTWINSETWINDOWVALUE 00614 (0X0266) 
POSTWINSHOWCURSOR 02401 (0X0961) 
POSTWINSHOWPOINTER 02405 (0X0965) 
POSTWINSHOWTRACKRECT 01614 (0X064E) 
POSTWINSTARTTIMER 01809 (0X0711) 
POSTWINSTOPTIMER 01810 (0X0712) 
POSTWINSUBCLASSWINDOW 00601 (0X0259) 
POSTWINSUBSTITUTESTRINGS 01213 (0X04BD) 
POSTWINSUBTRACTRECT 01610 (0X064A) 
POSTWINTHROW 01805 (0X070D) 
POSTWINTRANSLATEACCEL 02004 (0X07D4) 
POSTWINUNIONRECT 01609 (0X0649) 
POSTWINUPDATEWINDOW 00403 (0X0193) 

POSTWIN WAITMSG 00810 (0X032A) 

POSTWIN WINDOWFROMDC 00412 (0X01 9C) 

POSTWIN WINDOWFROMID 00222 (0X00DE) 

POSTWIN WINDOWFROMPOINT 00653 (0X028D) 
READMESSAGE 00757 (0X02F5) 

REASSIGNINPUT 00755 (0X02F3) 

SETLISTITEM 01362 (0X0552) 

SORTFREELIST 02954 (0X0B8A) 
VALIDATEHEAPHANDLE 02956 (0X0B8C) 

WINALARM 01108 (0X0454) 

WINALLOCMEM 02903 ( 0X0B57) 

WINAVAILMEM 02902 (0X0B56) 
WINBEGINENUMWINDOWS 00500 (0X01 F4) 
WINBEGINPAINT 00319 (0X013F) 

WINBROADCASTMSG 00708 (0X02C4) 
WINCALCFRAMERECT 01305 (0X0519) 
WINCALLHELPHOOK 01355 (0X054B) 
WINCALLMSGFILTER 02502 (0X09C6) 
WINCANCELSHUTDOWN 00135 (0X0087) 

WINCATCH 01708 (0X06AC) 

WINCLOSECLIPBRD 02101 (0X0835) 
WINCOMPARESTRINGS 02709 (0X0A95) 
WINCOPYACCELTABLE 01903 (0X076F) 
WINCOPYRECT 01502 (0X05DE) 
WINCPTRANSLATECHAR 02704 (0XOA90) 
WINCPTRANSLATESTRING 02703 (0X0A8F) 
WINCREATEACCELTABLE 01901 (0X076D) 
WINCREATECURSOR 02302 (0X08FE) 

WINCREATEDLG 01115 (0X045B) 
WINCREATEFRAMECONTROLS 01303 (0X0517) 
WINCREATEHEAP 02900 (0X0B54) 

WINCREATEMENU 01301 (0X0515) 
WINCREATEMSGQUEUE 00701 (0X02BD) 
WINCREATEPOINTER 02308 (0X0904) 
WINCREATESTDWINDOW 00106 (0X006A) 
WINCREATEWINDOW 001 05 (0X0069) 
WINDEFDLGPROC 01 1 07 (0X0453) 
WINDEFQUEUEPROC 00151 (0X0097) 
WINDEFWINDOWPROC 00101 (0X0065) 
WINDESKTOPWNDPROC 00152 (0X0098) 
WINDESTROYACCELTABLE 01902 (0X076E) 
WINDESTROYCURSOR 02300 (0X08FC) 


WINDESTROYHEAP 02901 (0X0B55) 
WINDESTROYMSGQUEUE 00702 (0X02BE) 
WINDESTROYPOINTER 02309 (0X0905) 
WINDESTROYWINDOW 00102 (0X0066) 
WINDISMISSDLG 01102 (0X044E) 
WINDISPATCHMSG 00705 (0X02C1) 

WINDLGBOX 01 101 (0X044D) 
WINDOWUPDATERECT 001 56 (0X009C) 
WINDRAWBITMAP 01306 (0X051A) 
WINDRAWBORDER 01307 (0X051 B) 
WINDRAWPOINTER 02314 (0X090A) 
WINDRAWTEXT 00308 (0X0134) 
WINEDITWNDPROC 01150 (0X047E) 
WINEMPTYCLIPBRD 02102 (0X0836) 
WINENABLEPHYSINPUT 00909 (0X038D) 
WINENABLEWINDOW 00107 (0X006B) 
WINENABLEWINDOWUPDATE 00327 (0X0147) 
WINENDENUMWINDOWS 00502 (0X01 F6) 
WINENDPAINT 00320 (0X0140) 
WINENUMCLIPBRDFMTS 02107 (0X083B) 
WINENUMDLGITEM 01114 (0X045A) 
WINEQUALRECT 01503 (0X05DF) 
WINEXCLUDEUPDATEREGION 00316 (0X013C) 
WINFILLRECT 00326 (0X0146) 
WINFLASHWINDOW 01302 (0X0516) 
WINFOCUSCHANGE 00901 (0X0385) 
WINFORMATFRAME 01304 (0X0518) 
WINFRAMEWNDPROC 01350 (0X0546) 
WINFREEERRORINFO 01 71 2 (0X06B0) 
WINFREEMEM 02905 (0X0B59) 

WINGETCLIPPS 00322 (0X0142) 
WINGETCURRENTTIME 01715 (0X06B3) 
WINGETERRORINFO 0171 1 (0X06AF) 
WINGETKEYSTATE 00907 (0X038B) 
WINGETLASTERROR 01710 (0X06AE) 
WINGETMAXPOSITION 01309 (0X051 D) 

WINGETM IN POSITION 01308 (0X051 C) 
WINGETMSG 00703 (0X02BF) 
WINGETNEXTWINDOW 00501 (0X01 F5) 
WINGETPHYSKEYSTATE 00908 (0X038C) 
WINGETPS 00321 (0X0141) 

WINGETSCREENPS 00313 (0X0139) 
WINGETSYSBITMAP 02315 (0X090B) 
WINICONTEXTWNDPROC 01354 (0X054A) 
WININFLATERECT 01506 (0X05E2) 

WININITIALIZE 01701 (0X06A5) 

WININSENDMSG 00707 (0X02C3) 
WININTERSECTRECT 01 508 (0X05E4) 
WININVALIDATERECT 00306 (0X0132) 
WININVALIDATEREGION 00307 ( 0X0133) 
WININVERTRECT 01 51 1 (0X05E7) 

WINISCHILD 00117 (0X0075) 
WINISPHYSINPUTENABLED 0091 0 (0X038E) 
WINISRECTEMPTY 01501 (0X05DD) 
WINISTHREADACTIVE 00906 (0X038A) 
WINISWINDOW 001 1 5 (0X0073) 
WINISWINDOWENABLED 00108 (0X006C) 
WINISWINDOWVISIBLE 00109 (0X006D) 
WINLISTBOXWNDPROC 00150 (0X0096) 
WINLOADACCELTABLE 01900 (0X076C) 
WINLOADCHARXLATETBL 02750 (0X0ABE) 
WINLOADDLG 01 1 00 (0X044C) 

WINLOADMENU 01300 (0X0514) 
WINLOADMESSAGE 02711 (0X0A97) 
WINLOADPOINTER 02307 (0X0903) 
WINLOADSTRING 0271 0 (OXOA96) 
WINLOADVKEYGLYPHXLATETBL 02753 (0X0AC1) 
WINLOCKHEAP 02906 (0X0B5A) 

WIN LOCKVISREG IONS 00318 (0X01 3E) 
WINLOCKWINDOW 00127 (0X007F) 
WINLOCKWINDOWUPDATE 00317 (0X01 3D) 
WINMAKEPOINTS 01513 (0X05E9) 
WINMAKERECT 01512 (0X05E8) 


WINMAPDLGPOINTS 01112 (0X0458) 
WINMAPWINDOWPOINTS 00504 (0X01 F8) 
WINMESSAGEBOX 01 1 09 (0X0455) 
WINMSGMUXSEMWAIT 0071 5 (0X02CB) 
WINMSGSEMWAIT 00714 (0X02CA) 
WINMULTWINDOWFROMIDS 00114 (0X0072) 
WINNEXTCHAR 02707 (0X0A93) 

WINOFFSETRECT 01505 (0X05E1) 
WINOPENCLIPBRD 02100 (0X0834) 
WINOPENWINDOWDC 00324 (0X0144) 
WINPEEKMSG 00704 (0X02C0) 

WINPOSTMSG 00706 (0X02C2) 
WINPOSTQUEUEMSG 00711 (0X02C7) 
WINPREVCHAR 02708 (0X0A94) 

WINPROCESSDLG OHIO (0X0456) 

WINPTINRECT 01 507 (0X05E3) 
WINQUERYACCELTABLE 01906 (0X0772) 
WINQUERYACTIVEWINDOW 00124 (0X007C) 
WINQUERYCAPTURE 00903 (0X0387) 
WINQUERYCHARXLATETBL 02752 (OXOACO) 
WINQUERYCLASSINFO 00123 (0X007B) 
WINQUERYCLASSNAME 00122 (0X007A) 
WINQUERYCLIPBRDDATA 02106 (0X083A) 
WINQUERYCLIPBRDFMTINFO 02108 (0X083C) 
WINQUERYCLIPBRDOWNER 02104 (0X0838) 
WINQUERYCLIPBRDVIEWER 02110 (0X083E) 
WINQUERYCP 02701 (0X0A8D) 

WINQUERYCPLIST 02702 (0X0A8E) 
WINQUERYCURSORINFO 02303 (0X08FF) 
WINQUERYDESKTOPWINDOW 00120 (0X0078) 
WINQUERYDLGITEMSHORT 01 1 04 (0X0450) 
WINQUERYDLGITEMTEXT 01106 (0X0452) 
WINQUERYFOCUS 00904 (0X0388) 
WINQUERYKBDLAYOUT 02757 (0X0AC5) 
WINQUERYMSGPOS 00712 (0X02C8) 
WINQUERYMSGTIME 00713 (0X02C9) 
WINQUERYOBJECTWINDOW 00119 (0X0077) 
WINQUERYPOINTER 0231 0 (0X0906) 
WINQUERYPOINTERINFO 02313 (0X0909) 
WINQUERYPOINTERPOS 02312 (0X0908) 
WINQUERYQUEUEINFO 00700 (0X02BC) 
WINQUERYQUEUESTATUS 0071 0 (0X02C6) 
WINQUERYSYSCOLOR 01706 (0X06AA) 
WINQUERYSYSMODALWINDOW 00125 (0X007D) 
WINQUERYSYSPOINTER 02306 (0X0902) 
WINQUERYSYSTEMATOMTABLE 01703 (0X06A7) 
WINQUERYSYSVALUE 01704 (0X06A8) 
WINQUERYUPDATERECT 00314 (0X01 3A) 
WINQUERYUPDATEREGION 00315 (0X013B) 
WINQUERYVERSION 01700 (0X06A4) 
WINQUERYVKEYGLYPHXLATETBL 02755 (0X0AC3) 
WINQUERYWINDOW 001 1 6 (0X0074) 
WINQUERYWINDOWDC 00312 (0X0138) 
WINQUERYWINDOWLOCKCOUNT 00129 (0X0081) 
WINQUERYWINDOWPOS 00301 (0X012D) 
WINQUERYWINDOWPROCESS 001 1 8 (0X0076) 
WINQUERYWINDOWRECT 001 04 (0X0068) 
WINQUERYWINDOWTEXT 001 1 0 ( 0X006E) 
WINQUERYWINDOWTEXTLENGTH 00112 (0X0070) 
WINQUERYWINDOWULONG 00132 (0X0084) 
WINQUERYWINDOWUSHORT 00130 (0X0082) 
WINQUEUEWNDPROC 00153 (0X0099) 
WINREALLOCMEM 02904 (0X0B58) 
WINREGISTERCLASS 00100 (0X0064) 
WINREGISTERWINDOWDESTROY 00128 (0X0080) 
WINRELEASEHOOK 02501 (0X09C5) 
WINRELEASEPS 00323 (0X0143) 
WINSAVEWINDOWPOS 00157 (0X009D) 
WINSCROLLBARWNDPROC 01351 (0X0547) 
WINSCROLLWINDOW 00325 (0X0145) 
WINSENDDLGITEMMSG 01111 (0X0457) 
WINSENDMSG 00718 (0X02CE) 
WINSENDQUEUEMSG 00751 (0X02EF) 


WINSETACCELTABLE 01905 (0X0771) 
WINSETACTIVEWINDOW 00905 (0X0389) 
WINSETCAPTURE 00902 (0X0386) 
WINSETCHARXLATETBL 02751 (0X0ABF) 
WINSETCLIPBRDDATA 02105 (0X0839) 
WINSETCLIPBRDOWNER 02103 (0X0837) 
WINSETCLIPBRDVIEWER 02109 (0X083D) 
WINSETCP 02700 (0X0A8C) 
WINSETDLGITEMSHORT 01103 (0X044F) 
WINSETDLGITEMTEXT 01 1 05 (0X0451 ) 
WINSETFOCUS 00900 (0X0384) 

WINSETHOOK 02500 (0X09C4) 
WINSETKBDLAYOUT 02756 (0X0AC4) 
WINSETKEYBOARDSTATETABLE 0091 1 (0X038F) 
WINSETLASTERROR 01751 (0X06D7) 
WINSETMSGINTEREST 00717 (0X02CD) 
WINSETMULTWINDOWPOS 00302 (0X01 2E) 
WINSETOWNER 00304 (0X0130) 

WINSETPARENT 00303 (0X01 2F) 
WINSETPOINTER 02304 (0X0900) 
WINSETPOINTERPOS 02311 (0X0907) 
WINSETQUEUEPROC 00154 (0X009A) 
WINSETRECT 01500 (0X05DC) 
WINSETRECTEMPTY 01504 (OX05EO) 
WINSETSYSCOLORS 01707 (0X06AB) 
WINSETSYSMODALWINDOW 00126 (0X007E) 
WINSETSYSVALUE 01705 (0X06A9) 
WINSETVKEYGLYPHXLATETBL 02754 (0X0AC2) 
WINSETWINDOWBITS 00134 (0X0086) 
WINSETWINDOWPOS 00300 (0X01 2C) 
WINSETWINDOWTEXT 00111 (0X006F) 
WINSETWINDOWULONG 00133 (0X0085) 
WINSETWINDOWUSHORT 00131 (0X0083) 
WINSHOWCURSOR 02301 (0X08FD) 
WINSHOWPOINTER 02305 (0X0901) 
WINSHOWTRACKRECT 00913 (0X0391) 
WINSHOWWINDOW 00103 (0X0067) 
WINSTARTTIMER 01713 (0X06B1) 
WINSTATICWNDPROC 01353 (0X0549) 
WINSTOPTIMER 01714 (0X06B2) 
WINSUBCLASSWINDOW 00121 (0X0079) 
WINSUBSTITUTESTRINGS 01113 (0X0459) 
WINSUBTRACTRECT 01510 (0X05E6) 
WINSYSTEMSHUTDOWN 00158 (0X009E) 
WINTERMINATE 01702 (0X06A6) 

WINTHROW 01709 (0X06AD) 
WINTITLEBARWNDPROC 01352 (0X0548) 
WINTRACKRECT 00912 (0X0390) 
WINTRANSLATEACCEL 01904 (0X0770) 
WINUNIONRECT 01509 (0X05E5) 
WINUPDATEWINDOW 00305 (0X0131) 

WINUPPER 02705 (0X0A91) 

WINUPPERCHAR 02706 (0X0A92) 
WINVALIDATERECT 00309 (0X0135) 
WINVALIDATEREGION 00310 (0X0136) 
WINWAITMSG 00709 (0X02C5) 
WINWINDOWFROMDC 00311 (0X0137) 
WINWINDOWFROMID 00113 (0X0071) 
WINWINDOWFROMPOINT 00503 (0X01 F7) 
WinCalcFrameRect 01405 (0X057D) 
WinCallMsgFilter 02602 (0X0A2A) 
WinCancelShutdown 00803 (0X0323) 
WinCloseClipbrd 02201 (0X0899) 

WinCpT ranslateChar 02804 (0X0AF4) 
WinCpTranslateString 02803 (0X0AF3) 
WinCreateDIg 01215 ( 0X04BF) 

WinCreateMenu 01401 (0X0579) 
WinCreateMsgQueue 00801 (0X0321) 
WinCreateStdWindow 00214 (0X00D6) 
WinCreateWindow 00213 (0X00D5) 

WinDefDIgProc 01207 (0X04B7) 

WinDefWindowProc 00201 (0X00C9) 
WinDestroyMsgQueue 00802 (0X0322) 


WinDismissDIg 01202 (0X04B2) 

WinDIgBox 01201 (0X04B1) 
WinDrawBitmap 00407 (0X0197) 
WinDrawBorder 00409 (0X0199) 
WinEmptyClipbrd 02202 (0X089A) 
WinEnumClipbrdFmts 02207 (0X089F) 
WinFlashWindow 01402 (0X057A) 
WinFormatFrame 01404 (0X057C) 
WinFreeErrorlnfo 01808 (0X0710) 
WinGetErrorlnfo 01807 (0X070F) 
WinGetLastError 01806 (0X070E) 
Winlnitialize 00235 (0X00EB) 
WinlnvalidateRect 00404 (0X0194) 
WinlnvalidateRegion 00405 (0X0195) 
WinLoadDIg 01200 (0X04B0) 
WinLoadMessage 00233 (0X00E9) 
WinLoadString 00232 (0X00E8) 
WinLockVisRegions 00419 (0X01 A3) 
WinLockWindow 00608 (0X0260) 
WinMessageBox 01209 (0X04B9) 
WinNextChar 02807 (0X0AF7) 
WinOpenClipbrd 02200 (0X0898) 
WinPrevChar 02808 (0X0AF8) 
WinProcessDIg 01210 (0X04BA) 
WinQueryClassInfo 00603 (0X025B) 
WinQueryClipbrdData 02206 (0X089E) 
WinQueryClipbrdFmtlnfo 02208 (OX08AO) 
WinQueryCp 02801 (0X0AF1) 
WinQueryCpList 02802 (0X0AF2) 
WinQueryDesktopWindow 00231 (0X0OE7) 
WinQueryDlgltemText 01206 (0X04B6) 
WinQuerySysColor 01802 (OX070A) 
WinQueryVersion 00234 (0X00EA) 
WinRegisterClass 00200 (0X00C8) 
WinReleaseHook 02601 (0X0A29) 
WinScrollWindow 0021 1 (0X00D3) 
WinSetClipbrdData 02205 (0X089D) 
WinSetClipbrdOwner 02203 (0X089B) 
WinSetClipbrdViewer 02209 (0X08A1) 
WinSetCp 02800 (0X0AF0) 
WinSetDIgltemText 01205 (0X04B5) 
WinSetHook 02600 (0X0A28) 
WinSetMsglnterest 00817 (0X0331) 
WinSetMultWindowPos 00402 (0X0192) 
WinSetSysColors 01803 (0X070B) 
WinSetWindowPos 00400 (0X0190) 
WinShowWindow 00203 (0X00CB) 
WinTerminate 00236 (0X00EC) 
WinTrackRect 01613 (0X064D) 

WinUpper 02805 (0X0AF5) 

WinUpperChar 02806 (0X0AF6) 
WinValidateRect 00410 (0X01 9A) 
WinValidateRegion 00411 (0X01 9B) 
_WINSETERRORINFO 01750 (0X06D6) 


PMWIN Major Code: 0X00C2 Minor Code: 100 (0X0064) 


Description 

WINREGISTERCLASS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINREGISTERCLASS 

Minor Code 


100 (0X0064) 


Trace Groups 


No groups assigned. 


Trace Types 


No types assigned. 


Traced Parameters 


%CBWINDOWDATA = %W, FLSTYLE = %D 
PFNWNDPROC = %A, PSZCLASSNAME = %A 
PSZCLASSNAME -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 101 (0X0065) 


Description 

WINDEFWINDOWPFtOC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDEFWINDOWPROC 

Minor Code 

101 (0X0065) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 102 (0X0066) 


Description 

WINDESTROYWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYWINDOW 

Minor Code 

102 (0X0066) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 103 (0X0067) 


Description 

WINSHOWWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSHOWWINDOW 

Minor Code 

103 (0X0067) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FSHOW = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 104 (0X0068) 


Description 

WINQUERYWINDOWRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYWINDOWRECT 

Minor Code 

104 (0X0068) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCLDEST = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 105 (0X0069) 


Description 


WINCREATEWINDOW PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN. WINCREATEWINDOW 


Minor Code 

105 (0X0069) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RESPARAMS = %A, PCTLDATA = %A, ID = %W 
HWNDINSERTBEHIND = %A, HWNDOWNER = %A, CY = %W 
CX = %W, Y = %W, X = %W, FLSTYLE = %D 
PSZNAME = %A, PSZCLASS = %A, HWNDPARENT = %A 
%CB = %W, FLCREATEFLAGS = %D 
HMODRESOURCES = %W, IDRESOURCES = %W 
PSZNAME ->%S 
PSZCLASS -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 106 (0X006A) 


Description 

WINCREATESTDWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATESTDWINDOW 

Minor Code 

106 (0X006A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDCLIENT = %A, IDRESOURCES = %W, HMOD = %W 
STYLECLIENT = %D, PSZTITLE = %A, PSZCLIENTCLASS = %A 
PFLCREATEFLAGS = %A, FLSTYLE = %D, HWNDPARENT = %A 
%HWNDCLIENT -> %A 
%FLCREATEFLAGS -> %D 
PSZCLIENTCLASS -> %S 


PSZTITLE -> %S 



PMWIN Major Code: 0X00C2 Minor Code: 107 (0X006B) 

WINENABLEWINDOW PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINENABLEWINDOW 
107 (0X006B) 

No groups assigned. 

No types assigned. 

%FENABLE = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 108 (0X006C) 

WINISWINDOWENABLED PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINISWINDOWENABLED 
108 (0XO06C) 

No groups assigned. 

No types assigned. 

%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 109 (0X006D) 

WINISWINDOWVISIBLE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINISWINDOWVISIBLE 






Minor Code 


109 (0X006D) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1 1 0 (0X006E) 


Description 

WINQUERYWINDOWTEXT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYWINDOWTEXT 

Minor Code 

110 (0X006E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZBUFFER = %A, CCHBUFFERMAX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1 1 1 (0X006F) 


Description 

WINSETWINDOWTEXT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETWINDOWTEXT 

Minor Code 

1 1 1 (0X006F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZTEXT = %A, HWND = %A 



PSZTEXT -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 112 (0X0070) 


Description 

WINQUERYWINDOWTEXTLENGTH PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYWINDOWTEXTLENGTH 

Minor Code 

112 (0X0070) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 113 (0X0071) 


Description 

WINWINDOWFROMID PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINWINDOWFROMID 

Minor Code 

113 (0X0071) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ID = %W, HWNDPARENT = %A 


PMWIN Major Code: 0X00C2 Minor Code: 114 (0X0072) 


Description 


WINMULTWINDOWFROMIDS PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.WINMULTWINDOWFROMIDS 


Minor Code 

114(0X0072) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDLAST = %W, ID FIRST = %W 
PRGHWND = %A, HWNDPARENT = %A 


PMWIN Major Code: 0X00C2 Minor Code: 115 (0X0073) 


Description 

WINISWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINISWINDOW 

Minor Code 

115 (0X0073) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 116 (0X0074) 


Description 

WINQUERYWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYWINDOW 

Minor Code 

1 1 6 (0X0074) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%FLOCK = %W, CMD = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 117 (0X0075) 


Description 

WINISCHILD PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINISCHILD 

Minor Code 

1 1 7 (0X0075) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDPARENT = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 118 (0X0076) 


Description 

WINQUERYWINDOWPROCESS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYWINDOWPROCESS 

Minor Code 

1 1 8 (0X0076) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%TID = %A, PPID = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 119 (0X0077) 



Description 


WINQUERYOBJECTWINDOW PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYOBJECTWINDOW 

Minor Code 

1 1 9 (0X0077) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 120 (0X0078) 


Description 

WINQUERYDESKTOPWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYDESKTOPWINDOW 

Minor Code 

120 (0X0078) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HDC = %A 


PMWIN Major Code: 0X00C2 Minor Code: 121 (0X0079) 


Description 

WINSUBCLASSWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSUBCLASSWINDOW 

Minor Code 

121 (0X0079) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%FNWP = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 122 (0X007A) 


Description 

WINQUERYCLASSNAME PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLASSNAME 

Minor Code 

122 (0X007A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CH = %A, CCHMAX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 123 (0X007B) 


Description 

WINQUERYCLASSINFO PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLASSINFO 

Minor Code 

123 (0X007B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CLASSINFO = %A, PSZCLASSNAME = %A 
PSZCLASSNAME -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 124 (0X007C) 



Description 


WINQUERYACTIVEWINDOW PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYACTIVEWINDOW 

Minor Code 

124 (OX007C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 125 (0X007D) 


Description 

WINQUERYSYSMODALWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYSYSMODALWINDOW 

Minor Code 

125 (0X007D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 126 (0X007E) 


Description 

WINSETSYSMODALWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETSYSMODALWINDOW 

Minor Code 

126 (OX007E) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 127 (0X007F) 


Description 

WINLOCKWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOCKWINDOW 

Minor Code 

127 (0X007F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 128 (0X0080) 


Description 

WINREGISTERWINDOWDESTROY PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINREGISTERWINDOWDESTROY 

Minor Code 

128 (0X0080) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FREGISTER = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 129 (0X0081) 



Description 


WINQUERYWINDOWLOCKCOUNT PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYWINDOWLOCKCOUNT 

Minor Code 

129 (0X0081) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 130 (0X0082) 


Description 

WINQUERYWINDOWUSHORT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYWINDOWUSHORT 

Minor Code 

130 (0X0082) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%INDEX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 131 (0X0083) 


Description 

WINSETWINDOWUSHORT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINSETWINDOWUSHORT 

Minor Code 

131 (0X0083) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%US = %W, INDEX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 132 (0X0084) 


Description 

WINQUERYWINDOWULONG/WINQUERYWINDOWPTR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINQUERYWINDOWULONG 

Minor Code 

132 (0X0084) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%INDEX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 133 (0X0085) 


Description 

WINSETWINDOWULONG/WINSETWINDOWPTR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETWINDOWULONG 

Minor Code 

133 (0X0085) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%UL = %D, INDEX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 134 (0X0086) 



Description 


WINSETWINDOWBITS PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETWINDOWBITS 

Minor Code 

134 (0X0086) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLMASK = %D, FLDATA = %D, INDEX = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 135 (0X0087) 


Description 

WINCANCELSHUTDOWN PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCANCELSFIUTDOWN 

Minor Code 

135 (0X0087) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FCANCELALWAYS = %W, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 150 (0X0096) 


Description 

WINLISTBOXWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLISTBOXWNDPROC 

Minor Code 

150 (0X0096) 

Trace Groups 


No groups assigned. 



No types assigned. 

%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 151 (0X0097) 

WINDEFQUEUEPROC PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDEFQUEUEPROC 
151 (0X0097) 

No groups assigned. 

No types assigned. 

%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 152 (0X0098) 

WINDESKTOPWNDPROC PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDESKTOPWNDPROC 
152 (0X0098) 

No groups assigned. 

No types assigned. 

%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 153 (0X0099) 






Description 


WINQUEUEWNDPROC PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUEUEWNDPROC 

Minor Code 

153 (0X0099) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 154 (0X009A) 


Description 

WINSETQUEUEPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETQUEUEPROC 

Minor Code 

154 (0X009A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FNQUEUEPROC = %A 


PMWIN Major Code: 0X00C2 Minor Code: 156 (0X009C) 


Description 

WINDOWUPDATERECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDOWUPDATERECT 

Minor Code 

156 (0X009C) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%FSYNCUPDATE = %W, FS = %W, PRCL = %A, PWND = %W 


PMWIN Major Code: 0X00C2 Minor Code: 157 (0X009D) 


Description 

WINSAVEWINDOWPOS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSAVEWINDOWPOS 

Minor Code 

157 (0X009D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CSWP = %W, LPSWP = %A, HSVWP = %W 


PMWIN Major Code: 0X00C2 Minor Code: 158 (0X009E) 


Description 

WINSYSTEMSHUTDOWN PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSYSTEMSHUTDOWN 

Minor Code 

158 (0X009E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


NO PARAMETERS 


PMWIN Major Code: 0X00C2 Minor Code: 162 (0X00A2) 



Description 


COPYWINDOWRECT PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. COPYWINDOWRECT 

Minor Code 

162 (0X00A2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%WRC = %A, PWND = %W 


PMWIN Major Code: 0X00C2 Minor Code: 163 (0X00A3) 


Description 

FINDTOPWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. FINDTOPWINDOW 

Minor Code 

163 (0X00A3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%WND = %W, PSWP = %A, CSWP = %W 


PMWIN Major Code: 0X00C2 Minor Code: 200 (0X00C8) 


Description 

WINREGISTERCLASS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinRegisterClass 

Minor Code 

200 (0X00C8) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 201 (0X00C9) 


Description 

WINDEFWINDOWPROC POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinDefWindowProc 

Minor Code 

201 (0X00C9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 202 (0X00CA) 


Description 

WINDESTROYWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDESTROYWINDOW 

Minor Code 

202 (0X00CA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 203 (0X00CB) 



Description 


WINSHOWWINDOW POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinShowWindow 

Minor Code 

203 (0X00CB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 204 (0X00CC) 


Description 

WINQUERYWINDOWRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWRECT 

Minor Code 

204 (0X00CC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 205 (0X00CD) 


Description 

WINBEGINPAINT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINBEGINPAINT 

Minor Code 

205 (0X00CD) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 206 (0X00CE) 


Description 

WINENDPAINT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENDPAINT 

Minor Code 

206 (0X00CE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 207 (0X00CF) 


Description 

WINGETPS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETPS 

Minor Code 

207 (0X00CF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 208 (0X00D0) 



Description 


WINGETCLIPPS POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETCLIPPS 

Minor Code 

208 (0X00D0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 209 (0X00D1) 


Description 

WINRELEASEPS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINRELEASEPS 

Minor Code 

209 (0X00D1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 210 (0X00D2) 


Description 

WINOPENWINDOWDC POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINOPENWINDOWDC 

Minor Code 

210 (0X00D2) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 21 1 (0X00D3) 


Description 

WINSCROLLWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinScrollWindow 

Minor Code 

21 1 (0X00D3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 212 (0X00D4) 


Description 

WINFILLRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINFILLRECT 

Minor Code 

212 (0X00D4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 213 (0X00D5) 



Description 


WINCREATEWINDOW POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCreateWindow 

Minor Code 

213 (0X00D5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 214 (0X00D6) 


Description 

WINCREATESTDWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCreateStdWindow 

Minor Code 

214 (0X00D6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 215 (0X00D7) 


Description 

WINENABLEWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENABLEWINDOW 

Minor Code 

215 (0X00D7) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 216 (0X00D8) 


Description 

WINISWINDOWENABLED POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISWINDOWENABLED 

Minor Code 

216 (0X00D8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 217 (0X00D9) 


Description 

WINENABLEWINDOWUPDATE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENABLEWINDOWUPDATE 

Minor Code 

21 7 (0X00D9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 218 (0X00DA) 



Description 


WINISWINDOWVISIBLE POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINISWINDOWVISIBLE 

Minor Code 

218 (0X00DA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 219 (0X00DB) 


Description 

WINQUERYWINDOWTEXT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWTEXT 

Minor Code 

219 (0X00DB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 220 (0X00DC) 


Description 

WINSETWINDOWTEXT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETWINDOWTEXT 

Minor Code 

220 (0X00DC) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 221 (0X00DD) 


Description 

WINQUERYWINDOWTEXTLENGTH POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWTEXTLENGTH 

Minor Code 

221 (0X00DD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 222 (0X00DE) 


Description 

WINWINDOWFROMID POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINWINDOWFROMID 

Minor Code 

222 (0X00DE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 223 (0X00DF) 



Description 


WINMULTWINDOWFROMIDS POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINMULTWINDOWFROMIDS 

Minor Code 

223 (0X00DF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 224 (0X00E0) 


Description 

WINISWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISWINDOW 

Minor Code 

224 (OXOOEO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 225 (0X00E1) 


Description 

WINQUERYWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOW 

Minor Code 

225 (0X00E1) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 226 (0X00E2) 


Description 

WINSETPARENT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETPARENT 

Minor Code 

226 (0X00E2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 227 (0X00E3) 


Description 

WINISCHILD POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISCHILD 

Minor Code 

227 (0X00E3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 228 (0X00E4) 



Description 


WINSETOWNER POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETOWNER 

Minor Code 

228 (0X00E4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 229 (0X00E5) 


Description 

WINQUERYWINDOWPROCESS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWPROCESS 

Minor Code 

229 (0X00E5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 230 (0X00E6) 


Description 

WINQUERYOBJECTWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYOBJECTWINDOW 

Minor Code 

230 (0X00E6) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 231 (0X00E7) 


Description 

WINQUERYDESKTOPWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryDesktopWindow 

Minor Code 

231 (0X00E7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 232 (0X00E8) 


Description 

WINLOADSTRING POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinLoadString 

Minor Code 

232 (0X00E8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 233 (0X00E9) 



Description 


WINLOADMESSAGE POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinLoadMessage 

Minor Code 

233 (0X00E9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 234 (0X00EA) 


Description 

WINQUERYVERSION POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryVersion 

Minor Code 

234 (0X00EA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 235 (0X00EB) 


Description 

WININITIALIZE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. Winlnitialize 

Minor Code 

235 (0X00EB) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 236 (0X00EC) 


Description 

WINTERMINATE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinTerminate 

Minor Code 

236 (0X00EC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 300 (0X01 2C) 


Description 

WINSETWINDOWPOS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETWINDOWPOS 

Minor Code 

300 (0X01 2C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FS = %W, CY = %W, CX = %W, Y = %W, X = %W 


HWNDINSERTBEHIND = %A, HWND = %A 



PMWIN Major Code: 0X00C2 Minor Code: 301 (0X01 2D) 

WINQUERYWINDOWPOS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYWINDOWPOS 
301 (0X01 2D) 

No groups assigned. 

No types assigned. 

%SWP = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 302 (0X01 2E) 

WINSETMULTWINDOWPOS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSETMULTWINDOWPOS 
302 (0X01 2E) 

No groups assigned. 

No types assigned. 

%CSWP = %W, PSWP = %A 
%SWP->FS = %W, PSWP->CY = %W 
PSWP->CX = %W, PSWP->Y = %W, PSWP->X = %W 
PSWP->HWNDINSERTBEHIND = %A, PSWP->HWND = %A 




PMWIN Major Code: 0X00C2 Minor Code: 303 (0X01 2F) 


Description 


WINSETPARENT PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.WINSETPARENT 


Minor Code 

303 (0X01 2F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FREDRAW = %W, HWNDNEWPARENT = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 304 (0X0130) 


Description 

WINSETOWNER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETOWNER 

Minor Code 

304 (0X0130) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDNEWOWNER = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 305 (0X0131) 


Description 

WINUPDATEWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINUPDATEWINDOW 

Minor Code 

305 (0X0131) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 306 (0X0132) 


Description 

WININVALIDATERECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WININVALIDATERECT 

Minor Code 

306 (0X0132) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FINCLUDECHILDREN = %W, PWRC = %A, HWND = %A 
%WRC->XLEFT = %D, PWRC->YBOTTOM = %D 
PWRC->XRIGHT = %D , PWRC->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 307 (0X0133) 


Description 

WININVALIDATEREGION PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WININVALIDATEREGION 

Minor Code 

307 (0X0133) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FINCLUDECHILDREN = %W, HRGN = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 308 (0X0134) 



Description 


WINDRAWTEXT PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDRAWTEXT 

Minor Code 

308 (0X0134) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RGFCMD = %W, CLRBACK = %D, CLRFORE = %D 
PRCL = %A, PCHTEXT = %A, CCHTEXT = %W, HPS = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 
PCHTEXT -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 309 (0X0135) 


Description 

WINVALIDATERECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINVALIDATERECT 

Minor Code 

309 (0X0135) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FINCLUDECHILDREN = %W, PRCL = %A, HWND = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 310 (0X0136) 



Description 


WINVALIDATEREGION PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINVALIDATEREGION 

Minor Code 

310 (0X0136) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FINCLUDECHILDREN = %W, HRGN = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 31 1 (0X0137) 


Description 

WINWINDOWFROMDC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINWINDOWFROMDC 

Minor Code 

311 (0X0137) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HDC = %A 


PMWIN Major Code: 0X00C2 Minor Code: 312 (0X0138) 


Description 

WINQUERYWINDOWDC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYWINDOWDC 

Minor Code 

312 (0X0138) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 313 (0X0139) 


Description 

WINGETSCREENPS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETSCREENPS 

Minor Code 

313 (0X0139) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 314 (0X01 3A) 


Description 

WINQUERYUPDATERECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYUPDATERECT 

Minor Code 

31 4 (0X01 3A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCL = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 315 (0X01 3B) 



Description 


WINQUERYUPDATEREGION PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYUPDATEREGION 

Minor Code 

315 (0X01 3B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HRGN = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 316 (0X01 3C) 


Description 

WINEXCLUDEUPDATEREGION PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINEXCLUDEUPDATEREGION 

Minor Code 

316 (0X01 3C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A, HPS = %A 


PMWIN Major Code: 0X00C2 Minor Code: 317 (0X01 3D) 


Description 

WINLOCKWINDOWUPDATE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOCKWINDOWUPDATE 

Minor Code 

317 (0X01 3D) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%HWNDLOCKUPDATE = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 318 (0X01 3E) 


Description 

WINLOCKVISREGIONS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOCKVISREGIONS 

Minor Code 

318 (0X01 3E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 319 (0X01 3F) 


Description 

WINBEGINPAINT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINBEGINPAINT 

Minor Code 

319 (0X01 3F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCLPAINT = %A, HPS = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 320 (0X0140) 



Description 


WINENDPAINT PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINENDPAINT 

Minor Code 

320 (0X0140) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HPS = %A 


PMWIN Major Code: 0X00C2 Minor Code: 321 (0X0141) 


Description 

WINGETPS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETPS 

Minor Code 

321 (0X0141) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 322 (0X0142) 


Description 

WINGETCL1PPS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETCLIPPS 

Minor Code 

322 (0X0142) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%FS = %W, HWNDCLIP = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 323 (0X0143) 


Description 

WINRELEASEPS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINRELEASEPS 

Minor Code 

323 (0X0143) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HPS = %A 


PMWIN Major Code: 0X00C2 Minor Code: 324 (0X0144) 


Description 

WINOPENWINDOWDC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINOPENWINDOWDC 

Minor Code 

324 (0X0144) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 325 (0X0145) 



WINSCROLLWINDOW PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSCROLLWINDOW 
325 (0X0145) 

No groups assigned. 

No types assigned. 

%RGFSW = %W, PRCLUPDATE = %A, HRGNUPDATE = %A 
PRCLCLIP = %A, PRCLSCROLL = %A, DY = %W, DX = %W 
HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 326 (0X0146) 

WINFILLRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINFILLRECT 
326 (0X0146) 

No groups assigned. 

No types assigned. 

%LCOLOR = %D, PRCL = %A, HPS = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 327 (0X0147) 

WINENABLEWINDOWUPDATE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINENABLEWINDOWUPDATE 






Minor Code 


327 (0X0147) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FENABLE = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 400 (0X0190) 


Description 

WINSETWINDOWPOS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetWindowPos 

Minor Code 

400 (0X0190) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 401 (0X0191) 


Description 

WINQUERYWINDOWPOS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWPOS 

Minor Code 

401 (0X0191) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 402 (0X0192) 

WINSETMULTWINDOWPOS POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinSetMultWindowPos 
402 (0X0192) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 403 (0X0193) 

WINUPDATEWINDOW POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINUPDATEWINDOW 
403 (0X0193) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 404 (0X0194) 

WININVALIDATERECT POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinlnvalidateRect 






Minor Code 


404 (0X0194) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 405 (0X0195) 


Description 

WININVALIDATEREGION POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinlnvalidateRegion 

Minor Code 

405 (0X0195) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 406 (0X0196) 


Description 

WININVERTRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWININVERTRECT 

Minor Code 

406 (0X0196) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 407 (0X0197) 

WINDRAWBITMAP POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WinDrawBitmap 
407 (0X0197) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 408 (0X0198) 

WINDRAWTEXT POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. DRAWTEXT 
408 (0X0198) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 409 (0X0199) 

WINDRAWBORDER POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WinDrawBorder 






Minor Code 


409 (0X0199) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 410 (0X01 9A) 


Description 

WINVALIDATERECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinValidateRect 

Minor Code 

410 (0X01 9A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 41 1 (0X01 9B) 


Description 

WINVALIDATEREGION POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinValidateRegion 

Minor Code 

411 (0X01 9B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 412 (0X01 9C) 

WINWINDOWFROMDC POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINWINDOWFROMDC 
412 (0X01 9C) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 413 (0X01 9D) 

WINQUERYWINDOWDC POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWDC 
413 (0X01 9D) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 414 (0X01 9E) 

WINGETSCREENPS POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETSCREENPS 






Minor Code 


414 (0X01 9E) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 415 (0X01 9F) 


Description 

WINQUERYUPDATERECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYUPDATERECT 

Minor Code 

415 (0X01 9F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 416 (0X01 A0) 


Description 

WINQUERYUPDATEREGION POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYUPDATEREGION 

Minor Code 

416 (0X01 A0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 417 (0X01 A1) 

WINEXCLUDEUPDATEREGION POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINEXCLUDEUPDATEREGION 
417 (0X01 A1) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 418 (0X01 A2) 

WINLOCKWINDOWUPDATE POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINLOCKWINDOWUPDATE 
418 (0X01 A2) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 419 (0X01 A3) 

WINLOCKVISREGIONS POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinLockVisRegions 






Minor Code 


419 (0X01 A3) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 500 (0X01 F4) 


Description 

WINBEGINENUMWINDOWS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINBEGINENUMWINDOWS 

Minor Code 

500 (0X01 F4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 501 (0X01 F5) 


Description 

WINGETNEXTWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETNEXTWINDOW 

Minor Code 

501 (0X01 F5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HENUM = %A 



PMWIN Major Code: 0X00C2 Minor Code: 502 (0X01 F6) 

WINENDENUMWINDOWS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINENDENUMWINDOWS 
502 (0X01 F6) 

No groups assigned. 

No types assigned. 

%HENUM = %A 


PMWIN Major Code: 0X00C2 Minor Code: 503 (0X01 F7) 

WINWINDOWFROMPOINT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINWINDOWFROMPOINT 
503 (0X01 F7) 

No groups assigned. 

No types assigned. 

%FLOCK = %W, FCHILDREN = %W 
PPTL = %A, HWND = %A 
%TL->X = %D, PPTL->Y = %D 




PMWIN Major Code: 0X00C2 Minor Code: 504 (0X01 F8) 


Description 


WINMAPWINDOWPOINTS PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.WINMAPWINDOWPOINTS 


Minor Code 

504 (0X01 F8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CWPT = %W, PRGPTL = %A, HWNDTO = %A, HWNDFROM = %A 
%RGPTL->X = %D, PRGPTL->Y = %D 


PMWIN Major Code: 0X00C2 Minor Code: 600 (0X0258) 


Description 

WINSETACTIVEWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETACTIVEWINDOW 

Minor Code 

600 (0X0258) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 601 (0X0259) 


Description 

WINSUBCLASSWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSUBCLASSWINDOW 

Minor Code 

601 (0X0259) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 602 (0X025A) 


Description 

WINQUERYCLASSNAME POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYCLASSNAME 

Minor Code 

602 (0X025A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 603 (0X025B) 


Description 

WINQUERYCLASSINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryClassInfo 

Minor Code 

603 (0X025B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 604 (0X025C) 



Description 


WINQUERYACTIVEWINDOW POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINQUERYACTIVEWINDOW 

Minor Code 

604 (0X025C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 605 (0X025D) 


Description 

WINISTHREADACTIVE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISTHREADACTIVE 

Minor Code 

605 (0X025D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 606 (0X025E) 


Description 

WINQUERYSYSMODALWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYSYSMODALWINDOW 

Minor Code 

606 (0X025E) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 607 (0X025F) 


Description 

WINSETSYSMODALWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETSYSMODALWINDOW 

Minor Code 

607 (0X025F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 608 (0X0260) 


Description 

WINLOCKWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinLockWindow 

Minor Code 

608 (0X0260) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 609 (0X0261) 



Description 


WINREGISTERWINDOWDESTROY POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINREGISTERWINDOWDESTROY 

Minor Code 

609 (0X0261) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 610 (0X0262) 


Description 

WINQUERYWINDOWLOCKCOUNT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWLOCKCOUNT 

Minor Code 

610 (0X0262) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 61 1 (0X0263) 


Description 

WINQUERYWINDOWUSHORT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWVALUE 

Minor Code 

61 1 (0X0263) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 612 (0X0264) 


Description 

WINSETWINDOWUSHORT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETWINDOWVALUE 

Minor Code 

612 (0X0264) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 613 (0X0265) 


Description 

WINQUERYWINDOWUSHORT/WINQUERYWINDOWULONG/WINQUERYWINDOWPTR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYWINDOWVALUE 

Minor Code 

613 (0X0265) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 614 (0X0266) 



Description 


WINSETWINDOWUSHORT/WINSETWINDOWULONG/WINSETWINDOWPTR POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINSETWINDOWVALUE 

Minor Code 

614(0X0266) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 615 (0X0267) 


Description 

WINSETWINDOWBITS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETWINDOWBITS 

Minor Code 

615 (0X0267) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 650 (0X028A) 


Description 

WINBEGINENUMWINDOWS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINBEGINENUMWINDOWS 

Minor Code 

650 (0X028A) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 651 (0X028B) 


Description 

WINGETNEXTWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETNEXTWINDOW 

Minor Code 

651 (0X028B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 652 (0X028C) 


Description 

WINENDENUMWINDOWS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENDENUMWINDOWS 

Minor Code 

652 (0X028C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 653 (0X028D) 



Description 


WINWINDOWFROMPOINT POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINWINDOWFROMPOINT 

Minor Code 

653 (0X028D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 654 (0X028E) 


Description 

WINMAPWINDOWPOINTS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMAPWINDOWPOINTS 

Minor Code 

654 (0X028E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 700 (0X02BC) 


Description 

WINQUERYQUEUEINFO PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYQUEUEINFO 

Minor Code 

700 (0X02BC) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%CBCOPY = %W, PMQI = %A, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 701 (0X02BD) 


Description 

WINCREATEMSGQUEUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEMSGQUEUE 

Minor Code 

701 (0X02BD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CMSG = %W 


PMWIN Major Code: 0X00C2 Minor Code: 702 (0X02BE) 


Description 

WINDESTROYMSGQUEUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYMSGQUEUE 

Minor Code 

702 (0X02BE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 703 (0X02BF) 



Description 


WINGETMSG PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETMSG 

Minor Code 

703 (0X02BF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MSGFILTERLAST = %W, MSGFILTERFIRST = %W 
HWNDFILTER = %A, PQMSG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 704 (0X02C0) 


Description 

WINPEEKMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINPEEKMSG 

Minor Code 

704 (OX02CO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FS = %W, MSGFILTERLAST = %W, MSGFILTERFIRST = %W 
HWNDFILTER = %A, PQMSG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 705 (0X02C1) 


Description 

WINDISPATCHMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDISPATCHMSG 

Minor Code 

705 (0X02C1) 


Trace Groups 



No groups assigned. 


Trace Types 


No types assigned. 


Traced Parameters 


%QMSG = %A 

%QMSG->HWND = %A, PQMSG->MSG = %W 

PQMSG->MP1 = %D, PQMSG->MP2 = %D, PQMSG->TIME = %D 

PQMSG->PTL.X = %D, PQMSG->PTL.Y = %D 


PMWIN Major Code: 0X00C2 Minor Code: 706 (0X02C2) 


Description 

WINPOSTMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINPOSTMSG 

Minor Code 

706 (0X02C2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 707 (0X02C3) 


Description 

WININSENDMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WININSENDMSG 

Minor Code 

707 (0X02C3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 708 (0X02C4) 


Description 

WINBROADCASTMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINBROADCASTMSG 

Minor Code 

708 (0X02C4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RGF = %W, MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 709 (0X02C5) 


Description 

WINWAITMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINWAITMSG 

Minor Code 

709 (0X02C5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MSGLAST = %W, MSG FIRST = %W 


PMWIN Major Code: 0X00C2 Minor Code: 710 (0X02C6) 


Description 


WINQUERYQUEUESTATUS PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.WINQUERYQUEUESTATUS 


Minor Code 

710 (0X02C6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 71 1 (0X02C7) 


Description 

WINPOSTQUEUEMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINPOSTQUEUEMSG 

Minor Code 

71 1 (0X02C7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 712 (0X02C8) 


Description 

WINQUERYMSGPOS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYMSGPOS 

Minor Code 

712 (0X02C8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%TL = %A 


PMWIN Major Code: 0X00C2 Minor Code: 713 (0X02C9) 


Description 

WINQUERYMSGTIME PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYMSGTIME 

Minor Code 

713 (0X02C9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 714 (0X02CA) 


Description 

WINMSGSEMWAIT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINMSGSEMWAIT 

Minor Code 

714 (0X02CA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DTTIMEOUT = %D, HSEM = %A 


PMWIN Major Code: 0X00C2 Minor Code: 715 (0X02CB) 


Description 


WINMSGMUXSEMWAIT PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN. WINMSGMUXSEMWAIT 


Minor Code 

715 (0X02CB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DTTIMEOUT = %D, PMXSL = %A, PISEMCLEARED = %A 
%ISEMCLEARED -> %W 


PMWIN Major Code: 0X00C2 Minor Code: 717 (0X02CD) 


Description 

WINSETMSGINTEREST PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETMSGINTEREST 

Minor Code 

71 7 (0X02CD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CONTROL = %W, MSG_CLASS = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 718 (0X02CE) 


Description 

WINSENDMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSENDMSG 

Minor Code 

718 (0X02CE) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 751 (0X02EF) 


Description 

WINSENDQUEUEMSG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSENDQUEUEMSG 

Minor Code 

751 (0X02EF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 752 (0X02F0) 


Description 

CREATEQUEUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. CREATEQUEUE 

Minor Code 

752 (OX02FO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CMSGS = %W 


PMWIN Major Code: 0X00C2 Minor Code: 753 (0X02F1) 



Description 


FREEQUEUE PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. FREEQUEUE 

Minor Code 

753 (0X02F1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 754 (0X02F2) 


Description 

CLEARQUEUEGLOBALS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. CLEARQUEUEGLOBALS 

Minor Code 

754 (0X02F2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 755 (0X02F3) 


Description 

REASSIGNINPUT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. REASSIGNINPUT 

Minor Code 

755 (0X02F3) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 756 (0X02F4) 


Description 

ASSOCIATEQUEUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. ASSOCIATEQUEUE 

Minor Code 

756 (0X02F4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 757 (0X02F5) 


Description 

READMESSAGE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. READMESSAGE 

Minor Code 

757 (0X02F5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FREMOVEMSG = %W, MSGMAXFILTER = %W, MSGMINFILTER = %W 
PWNDFILTER = %W, LPMSG = %A, SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 800 (0X0320) 



Description 


WINQUERYQUEUEINFO POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINQUERYQUEUEINFO 

Minor Code 

800 (0X0320) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 801 (0X0321) 


Description 

WINCREATEMSGQUEUE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCreateMsgQueue 

Minor Code 

801 (0X0321) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 802 (0X0322) 


Description 

WINDESTROYMSGQUEUE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinDestroyMsgQueue 

Minor Code 

802 (0X0322) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 803 (0X0323) 


Description 

WINCANCELSHUTDOWN POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCancelShutdown 

Minor Code 

803 (0X0323) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 804 (0X0324) 


Description 

WINGETMSG/WINPEEKMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETMSG 

Minor Code 

804 (0X0324) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 805 (0X0325) 



Description 


WINPEEKMSG POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINPEEKMSG 

Minor Code 

805 (0X0325) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 806 (0X0326) 


Description 

WINDISPATCHMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDISPATCHMSG 

Minor Code 

806 (0X0326) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 807 (0X0327) 


Description 

WINPOSTMSG/WINPOSTQUEUEMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINPOSTMSG 

Minor Code 

807 (0X0327) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 808 (0X0328) 


Description 

WININSENDMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWININSENDMSG 

Minor Code 

808 (0X0328) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 809 (0X0329) 


Description 

WINBROADCASTMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINBROADCASTMSG 

Minor Code 

809 (0X0329) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 810 (0X032A) 



Description 


WINWAITMSG POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINWAITMSG 

Minor Code 

810 (0X032A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 81 1 (0X032B) 


Description 

WINQUERYQUEUESTATUS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYQUEUESTATUS 

Minor Code 

81 1 (0X032B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 812 (0X032C) 


Description 

WINPOSTQUEUEMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINPOSTQUEUEMSG 

Minor Code 

812 (0X032C) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 813 (0X032D) 


Description 

WINQUERYMSGPOS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYMSGPOS 

Minor Code 

813 (0X032D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 814 (0X032E) 


Description 

WINQUERYMSGTIME POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYMSGTIME 

Minor Code 

814 (0X032E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 815 (0X032F) 



Description 


WINMSGSEMWAIT POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMSGSEMWAIT 

Minor Code 

815 (0X032F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 816 (0X0330) 


Description 

WINMSGSEMWAIT/WINMSGMUXSEMWAIT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMSGMUXSEMWAIT 

Minor Code 

816 (0X0330) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 817 (0X0331) 


Description 

WINSETMSGINTEREST POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetMsglnterest 

Minor Code 

817(0X0331) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 818 (0X0332) 


Description 

WINSENDMSG/WINSENDQUEUEMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSENDMSG 

Minor Code 

818 (0X0332) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 900 (0X0384) 


Description 

WINSETFOCUS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETFOCUS 

Minor Code 

900 (0X0384) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDSETFOCUS = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 901 (0X0385) 



Description 


WINFOCUSCHANGE PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINFOCUSCHANGE 

Minor Code 

901 (0X0385) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FSFOCUSCHANGE = %W, HWNDSETFOCUS = %A 
HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 902 (0X0386) 


Description 

WINSETCAPTURE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCAPTURE 

Minor Code 

902 (0X0386) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 903 (0X0387) 


Description 

WINQUERYCAPTURE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCAPTURE 

Minor Code 


903 (0X0387) 



Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 904 (0X0388) 


Description 

WINQUERYFOCUS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYFOCUS 

Minor Code 

904 (0X0388) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 905 (0X0389) 


Description 

WINSETACTIVEWINDOW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETACTIVEWINDOW 

Minor Code 

905 (0X0389) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A, HWNDDESKTOP = %A 



PMWIN Major Code: 0X00C2 Minor Code: 906 (0X038A) 

WINISTHREADACTIVE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINISTHREADACTIVE 
906 (0XO38A) 

No groups assigned. 

No types assigned. 

%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 907 (0X038B) 

WINGETKEYSTATE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINGETKEYSTATE 
907 (0X038B) 

No groups assigned. 

No types assigned. 

%VKEY = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 908 (0X038C) 

WINGETPHYSKEYSTATE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINGETPHYSKEYSTATE 
908 (0X038C) 






Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 


%SC = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 909 (0X038D) 


Description 

WINENABLEPHYSINPUT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINENABLEPHYSINPUT 

Minor Code 

909 (0X038D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FENABLE = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 910 (0X038E) 


Description 

WINISPHYSINPUTENABLED PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINISPHYSINPUTENABLED 

Minor Code 

910 (0X038E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 



PMWIN Major Code: 0X00C2 Minor Code: 91 1 (0X038F) 

WINSETKEYBOARDSTATETABLE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSETKEYBOARDSTATETABLE 
91 1 (0X038F) 

No groups assigned. 

No types assigned. 

%FSET = %W, PKEYSTATETABLE = %A, HWNDDESKTOP = %A 
%KEYSTATETABLE -> %B 


PMWIN Major Code: 0X00C2 Minor Code: 912 (0X0390) 

WINTRACKRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINTRACKRECT 
912 (0X0390) 

No groups assigned. 

No types assigned. 

%TI = %A, HPS = %A, HWND = %A 
%TI->CXBORDER = %W, PTI->CYBORDER = %W 
PTI->CXGRID = %W, PTI->CYGRID = %W 
PTI->CXKEYBOARD = %W, PTI->CYKEYBOARD = %W 
PTI->RCLTRACK = %A, PTI->RCLBOUNDARY = %A 
PTI->PTLMINTRACKSIZE = %A, PTI->PTLMAXTRACKSIZE = %A 




PTI->FS = %W 



PMWIN Major Code: 0X00C2 Minor Code: 913 (0X0391) 

WINSHOWTRACKRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSHOWTRACKRECT 
913 (0X0391) 

No groups assigned. 

No types assigned. 

%FSHOW = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1000 (0X03E8) 

WINSETFOCUS POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETFOCUS 
1000 (OX03E8) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1001 (0X03E9) 

WINFOCUSCHANGE POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINFOCUSCHANGE 





Minor Code 



1001 (OX03E9) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1002 (0X03EA) 


Description 

WINSETCAPTURE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETCAPTURE 

Minor Code 

1002 (OX03EA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1003 (0X03EB) 


Description 

WINQUERYCAPTURE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYCAPTURE 

Minor Code 

1003 (OX03EB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 1004 (0X03EC) 

WINQUERYFOCUS/WINQUERYSYSMODALWINDOW POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYFOCUS 
1004 (0X03EC) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1005 (0X03ED) 

WINGETKEYSTATE POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETKEYSTATE 
1005 (0X03ED) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1006 (0X03EE) 

WINGETPHYSKEYSTATE POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETPHYSKEYST ATE 






Minor Code 


1006 (OX03EE) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1007 (0X03EF) 


Description 

WINENABLEPHYSINPUT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENABLEPHYSINPUT 

Minor Code 

1007 (OX03EF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1008 (0X03F0) 


Description 

WINISPHYSINPUTENABLED POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISPHYSINPUTENABLED 

Minor Code 

1008 (OX03FO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 1009 (0X03F1) 


Description 

WINSETKEYBOARDSTATETABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETKEYBOARDSTATETABLE 

Minor Code 

1009 (OX03F1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1100 (0X044C) 


Description 

WINLOADDLG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADDLG 

Minor Code 

1 1 00 (OX044C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CREATEPARAMS = %A, IDDLG = %W, HMOD = %W 
PFNDLGPROC = %A, FIWN DOWNER = %A, HWNDPARENT = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1101 (0X044D) 


Description 

WINDLGBOX PRE-INVOCATION 


Tracepoint 



Public symbol defined dynamic tracepoint: PMWIN.WINDLGBOX 


Minor Code 

1101 (OX044D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CREATEPARAMS = %A, IDDLG = %W, HMOD = %W 
PFNDLGPROC = %A, HWN DOWNER = %A, HWNDPARENT = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1 1 02 (0X044E) 


Description 

WINDISMISSDLG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDISMISSDLG 

Minor Code 

1102 (OX044E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%USRESULT = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1103 (0X044F) 


Description 

WINSETDLGITEMSHORT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETDLGITEMSHORT 

Minor Code 

1 1 03 (OX044F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%FSIGNED = %W, USVALUE = %W, IDITEM = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1104 (0X0450) 


Description 

WINQUERYDLGITEMSHORT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYDLGITEMSHORT 

Minor Code 

1 1 04 (0X0450) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FSIGNED = %W, PRESULT = %A, IDITEM = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1105 (0X0451) 


Description 

WINSETDLGITEMTEXT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETDLGITEMTEXT 

Minor Code 

1105 (0X0451) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZTEXT = %A, IDITEM = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1106 (0X0452) 


Description 



WINQUERYDLGITEMTEXT PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYDLGITEMTEXT 

Minor Code 

1 1 06 (0X0452) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CHBUFFER = %A, CCHBUFFERMAX = %W 
IDITEM = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1107 (0X0453) 


Description 

WINDEFDLGPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDEFDLGPROC 

Minor Code 

1 1 07 (0X0453) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1108 (0X0454) 


Description 

WINALARM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINALARM 

Minor Code 

1 1 08 (0X0454) 

Trace Groups 

No groups assigned. 

Trace Types 



No types assigned. 


Traced Parameters 


%RGFTYPE = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1109 (0X0455) 


Description 

WINMESSAGEBOX PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINMESSAGEBOX 

Minor Code 

1 1 09 (0X0455) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLSTYLE = %W, IDWINDOW = %W, PSZCAPTION = %A 
PSZTEXT = %A, HWNDOWNER = %A, HWNDPARENT = %A 
PSZCAPTION -> %S 
PSZTEXT -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 1110 (0X0456) 


Description 

WINPROCESSDLG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINPROCESSDLG 

Minor Code 

1110 (0X0456) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDLG = %A 



PMWIN Major Code: 0X00C2 Minor Code: 1111 (0X0457) 

WINSENDDLGITEMMSG PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSENDDLGITEMMSG 
1111 (0X0457) 

No groups assigned. 

No types assigned. 

%MP2 = %D, MP1 = %D, MSG = %W 
IDITEM = %W, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1112 (0X0458) 

WINMAPDLGPOINTS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINMAPDLGPOINTS 
1112 (0X0458) 

No groups assigned. 

No types assigned. 

%FCALCWINDOWCOORDS = %W, CWPT = %W 
PRGWPTL = %A, HWNDDLG = %A 
%RGWPTL->X = %D, PRGWPTL->Y = %D 




PMWIN Major Code: 0X00C2 Minor Code: 1113 (0X0459) 



Description 


WINSUBSTITUTESTRINGS PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINSUBSTITUTESTRINGS 

Minor Code 

1113 (0X0459) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZDST = %A, CCHDSTMAX = %W, PSZSRC = %A, HWND = %A 
PSZSRC -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 1114 (0X045A) 


Description 

WINENUMDLGITEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINENUMDLGITEM 

Minor Code 

1114 (0X045A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W, CODE = %W, HWND = %A, HWNDDLG = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1115 (0X045B) 


Description 

WINCREATEDLG PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEDLG 

Minor Code 

1115 (0X045B) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%CREATEPARAMS = %A, PDLGT = %A, PFNDLGPROC = %A 
HWN DOWNER = %A, HWNDPARENT = %A 
%DLGT->CBTEMPLATE = %W, PDLGT->TYPE = %W 
PDLGT->CODEPAGE = %W, PDLGT- >OFFADLGTI = %W 
PDLGT->FSTEMPLATESTATUS = %W, PDLGT->IITEMFOCUS = %W 
PDLGT->COFFPRESPARAMS = %W, PDLGT- >ADLGTI[] = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1150 (0X047E) 


Description 

WINEDITWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINEDITWNDPROC 

Minor Code 

1150 (0X047E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1200 (0X04B0) 


Description 

WINLOADDLG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinLoadDIg 

Minor Code 

1200 (0X04B0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1201 (0X04B1) 


Description 

WINDLGBOX POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinDIgBox 

Minor Code 

1201 (OX04B1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1202 (0X04B2) 


Description 

WINDISMISSDLG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinDismissDIg 

Minor Code 

1202 (0X04B2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1203 (0X04B3) 


Description 



WINSETDLGITEMSHORT POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINSETDLGITEMSHORT 

Minor Code 

1203 (OX04B3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1204 (0X04B4) 


Description 

WINQUERYDLGITEMSHORT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYDLGITEMSHORT 

Minor Code 

1204 (OX04B4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1205 (0X04B5) 


Description 

WINSETDLGITEMTEXT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetDIgltemText 

Minor Code 

1205 (OX04B5) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1206 (0X04B6) 


Description 

WINQUERYDLGITEMTEXT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryDIgltemText 

Minor Code 

1206 (OX04B6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1207 (0X04B7) 


Description 

WINDEFDLGPROC POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinDefDIgProc 

Minor Code 

1207 (OX04B7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1208 (0X04B8) 



Description 


WINALARM POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINALARM 

Minor Code 

1208 (0X04B8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1209 (0X04B9) 


Description 

WINMESSAGEBOX POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinMessageBox 

Minor Code 

1209 (0X04B9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1210 (0X04BA) 


Description 

WINPROCESSDLG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinProcessDIg 

Minor Code 

1210 (0X04BA) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1 21 1 (0X04BB) 


Description 

WINSENDDLGITEMMSG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSENDDLGITEMMSG 

Minor Code 

1211 (OX04BB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1212 (0X04BC) 


Description 

WINMAPDLGPOINTS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMAPDLGPOINTS 

Minor Code 

1212 (0X04BC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1213 (0X04BD) 



Description 


WINSUBSTITUTESTRINGS POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINSUBSTITUTESTRINGS 

Minor Code 

1213 (0X04BD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1214 (0X04BE) 


Description 

WINENUMDLGITEM POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINENUMDLGITEM 

Minor Code 

1214 (0X04BE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1215 (0X04BF) 


Description 

WINCREATEDLG POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCreateDIg 

Minor Code 

1215 (0X04BF) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1300 (0X0514) 


Description 

WINLOADMENU PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADMENU 

Minor Code 

1300 (0X0514) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDMENU = %W, HMOD = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1301 (0X0515) 


Description 

WINCREATEMENU PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEMENU 

Minor Code 

1301 (0X0515) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LPMT = %A, HWNDPARENT = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1302 (0X0516) 



Description 


WINFLASHWINDOW PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.WINFLASFIWINDOW 

Minor Code 

1302 (0X0516) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FFLASH = %W, HWNDFRAME = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1303 (0X0517) 


Description 

WINCREATEFRAMECONTROLS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEFRAMECONTROLS 

Minor Code 

1303 (0X0517) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZTITLE = %A, PFCDATA = %A 
HWNDFRAME = %A 

%FCDATA->CB = %W, PFCDATA->FLCREATEFLAGS = %D 
PFCDATA->HMODRESOURCES = %W, PFCDATA->IDRESOURCES = %W 
PSZTITLE -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 1304 (0X0518) 


Description 


Tracepoint 


WINFORMATFRAME PRE-INVOCATION 


Public symbol defined dynamic tracepoint: PMWIN. WINFORMATFRAME 




1304 (0X0518) 

No groups assigned. 
No types assigned. 


Traced Parameters 


%RCLCLIENT = %A, CSWPMAX = %W, PSWP = %A 
PRCLFRAME = %A, HWNDFRAME = %A 
%RCLFRAME->XLEFT = %D, PRCLFRAME->YBOTTOM = %D 
PRCLFRAME->XRIGHT = %D, PRCLFRAME->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1305 (0X0519) 



WINCALCFRAMERECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCALCFRAMERECT 
1305 (0X0519) 

No groups assigned. 

No types assigned. 


Traced Parameters 


%FCLIENT = %W, PRCL = %A, HWNDFRAME = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1306 (0X051 A) 



WINDRAWBITMAP PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDRAWBITMAP 
1306 (0X051 A) 

No groups assigned. 

No types assigned. 



Traced Parameters 


%FS = %W, CLRBACK = %D, CLRFORE = %D 
PPTLDST = %A, PWRCSRC = %A, HBM = %A, HPSDST = %A 
%TLDST->X = %D, PPTLDST->Y = %D 
%WRCSRC->XLEFT = %D, PWRCSRC->YBOTTOM = %D 
PWRCSRC->XRIGHT = %D, PWRCSRC->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1 307 (0X051 B) 

WINDRAWBORDER PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDRAWBORDER 
1307 (0X051 B) 

No groups assigned. 

No types assigned. 

%RGFCMD = %W, CLRBACK = %D, CLRFORE = %D 
CY = %W, CX = %W, PRCL = %A, HPS = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1308 (0X051 C) 

WINGETM IN POSITION PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINGETMINPOSITION 
1308 (0X051 C) 

No groups assigned. 




No types assigned. 



Traced Parameters 


%TL = %A, PSWP = %A, HWND = %A 


%TL->X = %D, PPTL->Y = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1 309 (0X051 D) 


Description 

WINGETMAXPOSITION PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETMAXPOSITION 

Minor Code 

1309 (0X051 D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SWP = %A, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1350 (0X0546) 


Description 

WINFRAMEWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINFRAMEWNDPROC 

Minor Code 

1350 (0X0546) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1351 (0X0547) 



Description 


WINSCROLLBARWNDPROC PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSCROLLBARWNDPROC 

Minor Code 

1351 (0X0547) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1352 (0X0548) 


Description 

WINTITLEBARWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINTITLEBARWNDPROC 

Minor Code 

1352 (0X0548) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1353 (0X0549) 


Description 

WINSTATICWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSTATICWNDPROC 

Minor Code 

1353 (0X0549) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1354 (0X054A) 


Description 

WINICONTEXTWNDPROC PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINICONTEXTWNDPROC 

Minor Code 

1354 (OX054A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MP2 = %D, MP1 = %D, MSG = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1355 (0X054B) 


Description 

WINCALLHELPHOOK PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCALLHELPHOOK 

Minor Code 

1355 (OX054B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCPOSITION = %A, IDSUBTOPIC = %W 
IDTOPIC = %W, SMODE = %W 

%RCPOSITION->XLEFT = %D, PRCPOSITION->YBOTTOM = %D 
PRCPOSITION->XRIGHT = %D, PRCPOSITION->YTOP = %D 



PMWIN Major Code: 0X00C2 Minor Code: 1356 (0X054C) 


Description 

DESTROYLIST PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. DESTROYLIST 

Minor Code 

1356 (OX054C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1357 (0X054D) 


Description 

INSERTLISTITEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. INSERTLISTITEM 

Minor Code 

1357 (OX054D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CCHINSERT = %W, LPCHINSERT = %A, ILI = %W 
PLST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1358 (0X054E) 


Description 


DELETELISTITEM PRE-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.DELETELISTITEM 


Minor Code 

1358 (OX054E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ILI = %W, PLST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1359 (0X054F) 


Description 

GETLISTITEMLENGTH PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. GETLISTITEMLENGTH 

Minor Code 

1359 (OX054F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ILI = %W, PLST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1360 (0X0550) 


Description 

GETLISTITEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. GETLISTITEM 

Minor Code 

1360 (0X0550) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%LPCHDEST = %A, CCHGET = %W, ICHFIRST = %W 


ILI = %W, PLST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1362 (0X0552) 


Description 

SETLISTITEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. SETLISTITEM 

Minor Code 

1362 (0X0552) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FRESIZE = %W, LPCGSRC = %A, CBSET = %W, IBLI = %W 
ILI = %W, PLST = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1400 (0X0578) 


Description 

WINLOADMENU POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINLOADMENU 

Minor Code 

1400 (0X0578) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1401 (0X0579) 



Description 


WINCREATEMENU POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCreateMenu 

Minor Code 

1401 (0X0579) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1402 (0X057A) 


Description 

WINFLASHWINDOW POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinFlashWindow 

Minor Code 

1402 (OX057A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1403 (0X057B) 


Description 

WINCREATEFRAMECONTROLS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCREATEFRAMECONTROLS 

Minor Code 

1403 (0X057B) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1404 (0X057C) 


Description 

WINFORMATFRAME POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinFormatFrame 

Minor Code 

1404 (OX057C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1405 (0X057D) 


Description 

WINCALCFRAMERECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCalcFrameRect 

Minor Code 

1405 (OX057D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1406 (0X057E) 



Description 


WINGETM IN POSITION POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETMINPOSITION 

Minor Code 

1406 (OX057E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1407 (0X057F) 


Description 

WINGETMAXPOSITION POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETMAXPOSITION 

Minor Code 

1407 (0X057F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1500 (0X05DC) 


Description 

WINSETRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETRECT 

Minor Code 

1500 (OX05DC) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%YTOP = %W, XRIGHT = %W, YBOTTOM = %W 
XLEFT = %W, PRCL = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1501 (0X05DD) 


Description 

WINISRECTEMPTY PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINISRECTEMPTY 

Minor Code 

1501 (OX05DD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCL = %A 

%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1502 (0X05DE) 


Description 

WINCOPYRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCOPYRECT 

Minor Code 

1502 (OX05DE) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%RCLSRC = %A, PRCLDST = %A 
%RCLSRC->XLEFT = %D, PRCLSRC->YBOTTOM = %D 
PRCLSRC->XRIGHT = %D, PRCLSRC->YTOP = %D 
%RCLDST->XLEFT = %D, PRCLDST->YBOTTOM = %D 
PRCLDST->XRIGHT = %D, PRCLDST->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1503 (0X05DF) 


Description 

WINEQUALRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINEQUALRECT 

Minor Code 

1503 (OX05DF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCL2 = %A, PRCL1 = %A 
%RCL2->XLEFT = %D, PRCL2->YBOTTOM = %D 
PRCL2->XRIGHT = %D, PRCL2->YTOP = %D 
%RCL1 ->XLEFT = %D, PRCL1 ->YBOTTOM = %D 
PRCL1->XRIGHT = %D, PRCL1->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1504 (0X05E0) 


Description 


WINSETRECTEMPTY PRE-INVOCATION 


Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN. WINSETRECTEMPTY 


Minor Code 


1504 (OX05EO) 


Trace Groups 


No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

%RCL = %A 

%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1505 (0X05E1) 

WINOFFSETRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINOFFSETRECT 
1505 (0X05E1 ) 

No groups assigned. 

No types assigned. 

%CY = %W, CX = %W, PRCL = %A 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1506 (0X05E2) 

WININFLATERECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WININFLATERECT 
1506 (0X05E2) 

No groups assigned. 

No types assigned. 

%CY = %W, CX = %W, PRCL = %A 





%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 


PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1507 (0X05E3) 

WINPTINRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINPTINRECT 
1507 (0X05E3) 

No groups assigned. 

No types assigned. 

%TL = %A, PRCL = %A 
%TL->X = %D, PPTL->Y = %D 
%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 
PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1508 (0X05E4) 

WININTERSECTRECT PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WININTERSECTRECT 
1508 (0X05E4) 

No groups assigned. 

No types assigned. 

%RCLSRC2 = %A, PRCLSRC1 = %A, PRCLDST = %A 
%RCLSRC2->XLEFT = %D, PRCLSRC2->YBOTTOM = %D 
PRCLSRC2->XRIGHT = %D, PRCLSRC2->YTOP = %D 





%RCLSRC1 ->XLEFT = %D, PRCLSRC1->YB0TT0M = %D 
PRCLSRC1 ->XRIGHT = %D, PRCLSRC1 ->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1509 (0X05E5) 


Description 

WINUNIONRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINUNIONRECT 

Minor Code 

1509 (OX05E5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCLSRC2 = %A, PRCLSRC1 = %A, PRCLDST = %A 
%RCLSRC2->XLEFT = %D, PRCLSRC2->YBOTTOM = %D 
PRCLSRC2->XRIGHT = %D, PRCLSRC2->YTOP = %D 
%RCLSRC1 ->XLEFT = %D, PRCLSRC1->YBOTTOM = %D 
PRCLSRC1 ->XRIGHT = %D, PRCLSRC1->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1510 (0X05E6) 


Description 

WINSUBTRACTRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSUBTRACTRECT 

Minor Code 

1510 (OX05E6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCLSRC2 = %A, PRCLSRC1 = %A, PRCLDST = %A 


%RCLSRC2->XLEFT = %D, PRCLSRC2->YBOTTOM = %D 



PRCLSRC2->XRIGHT = %D, PRCLSRC2->YT0P = %D 
%RCLSRC1 ->XLEFT = %D, PRCLSRC1->YB0TT0M = %D 
PRCLSRC1 ->XRIGHT = %D, PRCLSRC1->YT0P = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1 51 1 (0X05E7) 


Description 

WININVERTRECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WININVERTRECT 

Minor Code 

1511 (OX05E7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RCL = %A, HPS = %A 

%RCL->XLEFT = %D, PRCL->YBOTTOM = %D 

PRCL->XRIGHT = %D, PRCL->YTOP = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1512 (0X05E8) 


Description 

WINMAKERECT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINMAKERECT 

Minor Code 

1512 (OX05E8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%WRC = %A 

%WRC->XLEFT = %W, PWRC->DUMMY1 = %W 


PWRC->YBOTTOM = %W, PWRC->DUMMY2 = %W 



PWRC->XRIGHT= %W, PWRC->DUMMY3 = %W 
PWRC->YTOP = %W, PWRC->DUMMY4 = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1513 (0X05E9) 


Description 

WINMAKEPOINTS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINMAKEPOINTS 

Minor Code 

1513 (OX05E9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CWPT = %W, PWPT = %A 
%WPT->X = %W, PWPT->DUMMY1 = %W 
PWPT->Y = %W, PWPT->DUMMY2 = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1600 (0X0640) 


Description 

WINSETRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETRECT 

Minor Code 

1600 (0X0640) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1601 (0X0641) 



Description 


WINISRECTEMPTY POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINISRECTEMPTY 

Minor Code 

1601 (0X0641) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1602 (0X0642) 


Description 

WINCOPYRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCOPYRECT 

Minor Code 

1602 (0X0642) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1603 (0X0643) 


Description 

WINEQUALRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINEQUALRECT 

Minor Code 

1603 (0X0643) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1604 (0X0644) 


Description 

WINSETRECTEMPTY POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETRECTEMPTY 

Minor Code 

1604 (0X0644) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1605 (0X0645) 


Description 

WINOFFSETRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINOFFSETRECT 

Minor Code 

1605 (0X0645) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1606 (0X0646) 



Description 


WININFLATERECT POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWININFLATERECT 

Minor Code 

1606 (0X0646) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1607 (0X0647) 


Description 

WINPTINRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINPTINRECT 

Minor Code 

1607 (0X0647) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1608 (0X0648) 


Description 

WININTERSECTRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWININTERSECTRECT 

Minor Code 

1608 (0X0648) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1609 (0X0649) 


Description 

WINUNIONRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINUNIONRECT 

Minor Code 

1609 (0X0649) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1610 (0X064A) 


Description 

WINSUBTRACTRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSUBTRACTRECT 

Minor Code 

1610 (OX064A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1 61 1 (0X064B) 



Description 


WINMAKERECT POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMAKERECT 

Minor Code 

1611 (OX064B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1612 (0X064C) 


Description 

WINMAKEPOINTS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINMAKEPOINTS 

Minor Code 

1612 (OX064C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1613 (0X064D) 


Description 

WINTRACKRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinTrackRect 

Minor Code 

1613 (OX064D) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1614 (0X064E) 


Description 

WINSHOWTRACKRECT POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSHOWTRACKRECT 

Minor Code 

1614 (OX064E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1700 (0X06A4) 


Description 

WINQUERYVERSION PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYVERSION 

Minor Code 

1700 (OX06A4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1701 (0X06A5) 



Description 


WININITIALIZE PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WININITIALIZE 

Minor Code 

1701 (0X06A5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


% 


PMWIN Major Code: 0X00C2 Minor Code: 1702 (0X06A6) 


Description 

WINTERMINATE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINTERMINATE 

Minor Code 

1702 (0X06A6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1703 (0X06A7) 


Description 

WINQUERYSYSTEMATOMTABLE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYSYSTEMATOMTABLE 

Minor Code 

1703 (0X06A7) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


NO PARAMETERS 


PMWIN Major Code: 0X00C2 Minor Code: 1704 (0X06A8) 


Description 

WINQUERYSYSVALUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYSYSVALUE 

Minor Code 

1704 (OX06A8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ISYSVALUE = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1705 (0X06A9) 


Description 

WINSETSYSVALUE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETSYSVALUE 

Minor Code 

1705 (OX06A9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LVALUE = %D, ISYSVALUE = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1706 (0X06AA) 



Description 


WINQUERYSYSCOLOR PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYSYSCOLOR 

Minor Code 

1706 (0X06AA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LRESERVED = %D, ICOLOR = %D, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1707 (0X06AB) 


Description 

WINSETSYSCOLORS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETSYSCOLORS 

Minor Code 

1707 (OX06AB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CLR = %A, CCLR = %D, CLRFIRST = %D 

FLFORMAT = %D, FLOPTIONS = %D, HWNDDESKTOP = %A 

%CLR -> %D 


PMWIN Major Code: 0X00C2 Minor Code: 1708 (0X06AC) 


Description 


WINCATCH PRE-INVOCATION 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMWIN. WINCATCH 



1708 (OX06AC) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CATCHBUF = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1709 (0X06AD) 


Description 

WINTHROW PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINTHROW 

Minor Code 

1709 (OX06AD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%NTHROWBACK = %W, PCATCHBUF = %A 
%CATCHBUF->CTCHBF = %W %W %W %W %W %W %W %W 


PMWIN Major Code: 0X00C2 Minor Code: 1710 (0X06AE) 


Description 

WINGETLASTERROR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETLASTERROR 

Minor Code 

1710 (0X06AE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 



PMWIN Major Code: 0X00C2 Minor Code: 1711 (0X06AF) 

WINGETERRORINFO PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINGETERRORINFO 
1711 (0X06AF) 

No groups assigned. 

No types assigned. 

%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1712 (0X06B0) 

WINFREEERRORINFO PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINFREEERRORINFO 
1712 (0X06B0) 

No groups assigned. 

No types assigned. 

%ERRINFO = %A 

%ERRINFO->CBFIXEDERRINFO = %W 

PERRINFO->IDERROR = %D, PERRINFO->CDETAILLEVEL = %W 
PERRINFO->OFFAOFFSZMSG = %W, PERRINFO->OFFBINARYDATA = %W 




PMWIN Major Code: 0X00C2 Minor Code: 1713 (0X06B1) 



Description 


WINSTARTTIMER PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSTARTTIMER 

Minor Code 

1713 (0X06B1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DTTIMEOUT = %W, IDTIMER = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1714 (0X06B2) 


Description 

WINSTOPTIMER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSTOPTIMER 

Minor Code 

1714 (0X06B2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDTIMER = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1715 (0X06B3) 


Description 

WINGETCURRENTTIME PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETCURRENTTIME 

Minor Code 

1715 (0X06B3) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1750 (0X06D6) 


Description 

WINSETERRORINFO PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN._WINSETERRORINFO 

Minor Code 

1750 (0X06D6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RETADDR = %A, ERRCODE = %D, FOPTIONS = %W, ARGS = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1751 (0X06D7) 


Description 

WINSETLASTERROR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETLASTERROR 

Minor Code 

1751 (0X06D7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RETADDR = %A, ERRCODE = %D 


PMWIN Major Code: 0X00C2 Minor Code: 1800 (0X0708) 



Description 


WINQUERYSYSVALUE POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN.POSTWINQUERYSYSVALUE 

Minor Code 

1800 (0X0708) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1801 (0X0709) 


Description 

WINSETSYSVALUE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETSYSVALUE 

Minor Code 

1801 (0X0709) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1802 (0X070A) 


Description 

WINQUERYSYSCOLOR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQuerySysColor 

Minor Code 

1802 (OX070A) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1803 (0X070B) 


Description 

WINSETSYSCOLORS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetSysColors 

Minor Code 

1803 (OX070B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1804 (0X070C) 


Description 

WINCATCH POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCATCH 

Minor Code 

1804 (OX070C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1805 (0X070D) 



Description 


WINTHROW POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINTHROW 

Minor Code 

1805 (OX070D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1806 (0X070E) 


Description 

WINGETLASTERROR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinGetLastError 

Minor Code 

1806 (OX070E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1807 (0X070F) 


Description 

WINGETERRORINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinGetErrorlnfo 

Minor Code 

1807 (OX070F) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1808 (0X0710) 


Description 

WINFREEERRORINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinFreeErrorlnfo 

Minor Code 

1808 (0X0710) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1809 (0X0711) 


Description 

WINSTARTTIMER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSTARTTIMER 

Minor Code 

1809 (0X0711) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1810 (0X0712) 



Description 


WINSTOPTIMER POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSTOPTIMER 

Minor Code 

1810 (0X0712) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1 81 1 (0X0713) 


Description 

WINGETCURRENTTIME POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETCURRENTTIME 

Minor Code 

1811 (0X0713) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 1900 (0X076C) 


Description 

WINLOADACCELTABLE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADACCELTABLE 

Minor Code 

1900 (OX076C) 

Trace Groups 


No groups assigned. 



No types assigned. 



PMWIN Major Code: 0X00C2 Minor Code: 1901 (0X076D) 

WINCREATEACCELTABLE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEACCELTABLE 
1901 (OX076D) 

No groups assigned. 

No types assigned. 

%ACCELTABLE = %A 

%ACCELTABLE->CACCEL = %W, PACCELTABLE->CODEPAGE = %W 
PACCELTABLE->FS = %W, PACCELTABLE->KEY = %W 
PACCELTABLE->CMD= %W 



PMWIN Major Code: 0X00C2 Minor Code: 1902 (0X076E) 



WINDESTROYACCELTABLE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYACCELTABLE 
1902 (0X076E) 

No groups assigned. 

No types assigned. 


Traced Parameters 


%HACCEL = %A 



PMWIN Major Code: 0X00C2 Minor Code: 1903 (0X076F) 

WINCOPYACCELTABLE PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCOPYACCELTABLE 
1903 (OX076F) 

No groups assigned. 

No types assigned. 

%CBCOPYMAX = %W, PACCELTABLE = %A, HACCEL = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1904 (0X0770) 

WINTRANSLATEACCEL PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINTRANSLATEACCEL 
1904 (0X0770) 

No groups assigned. 

No types assigned. 

%QMSG = %A, HACCEL = %A, HWND = %A 
%QMSG->HWND = %A, PQMSG->MSG = %W, PQMSG->MP1 = %D 
PQMSG->MP2 = %D, PQMSG->TIME = %D, PQMSG->PTL.X = %D 
PQMSG->PTL.Y = %D 




PMWIN Major Code: 0X00C2 Minor Code: 1905 (0X0771) 



Description 


WINSETACCELTABLE PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETACCELTABLE 

Minor Code 

1905 (0X0771) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDFRAME = %A, HACCEL = %A 


PMWIN Major Code: 0X00C2 Minor Code: 1906 (0X0772) 


Description 

WINQUERYACCELTABLE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYACCELTABLE 

Minor Code 

1906 (0X0772) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDFRAME = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2000 (0X07D0) 


Description 

WINLOADACCELTABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINLOADACCELTABLE 

Minor Code 

2000 (OX07D0) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2001 (0X07D1) 


Description 

WINCREATEACCELTABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCREATEACCELTABLE 

Minor Code 

2001 (OX07D1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2002 (0X07D2) 


Description 

WINDESTROYACCELTABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDESTROYACCELTABLE 

Minor Code 

2002 (OX07D2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2003 (0X07D3) 



Description 


WINCOPYACCELTABLE POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCOPYACCELTABLE 

Minor Code 

2003 (OX07D3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2004 (0X07D4) 


Description 

WINTRANSLATEACCEL POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINTRANSLATEACCEL 

Minor Code 

2004 (OX07D4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2005 (0X07D5) 


Description 

WINSETACCELTABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETACCELTABLE 

Minor Code 

2005 (OX07D5) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2006 (0X07D6) 


Description 

WINQUERYACCELTABLE POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYACCELTABLE 

Minor Code 

2006 (OX07D6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2100 (0X0834) 


Description 

WINOPENCL1PBRD PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINOPENCLIPBRD 

Minor Code 

2100 (0X0834) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2101 (0X0835) 



Description 


WINCLOSECLIPBRD PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCLOSECLIPBRD 

Minor Code 

2101 (0X0835) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2102 (0X0836) 


Description 

WINEMPTYCLIPBRD PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINEMPTYCLIPBRD 

Minor Code 

2102 (0X0836) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HAB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2103 (0X0837) 


Description 

WINSETCLIPBRDOWNER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCLIPBRDOWNER 

Minor Code 

2103 (0X0837) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2104 (0X0838) 


Description 

WINQUERYCLIPBRDOWNER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLIPBRDOWNER 

Minor Code 

2104 (0X0838) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2105 (0X0839) 


Description 

WINSETCLIPBRDDATA PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCLIPBRDDATA 

Minor Code 

2105 (0X0839) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RGFFMTINFO = %W, FMT = %W, ULDATA = %D 


PMWIN Major Code: 0X00C2 Minor Code: 2106 (0X083A) 



Description 


WINQUERYCL1PBRDDATA PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLIPBRDDATA 

Minor Code 

2106 (0X083A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FMT = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2107 (0X083B) 


Description 

WINENUMCLIPBRDFMTS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINENUMCLIPBRDFMTS 

Minor Code 

2107 (0X083B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FMT = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2108 (0X083C) 


Description 

WINQUERYCLIPBRDFMTINFO PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLIPBRDFMTINFO 

Minor Code 

2108 (0X083C) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%RGFFMTINFO = %A, FMT = %W 
%RGFFMTINFO -> %W 


PMWIN Major Code: 0X00C2 Minor Code: 2109 (0X083D) 


Description 

WINSETCLIPBRDVIEWER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCLIPBRDVIEWER 

Minor Code 

2109 (0X083D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDNEWCLIPVIEWER = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2110 (0X083E) 


Description 

WINQUERYCLIPBRDVIEWER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCLIPBRDVIEWER 

Minor Code 

2110 (0X083E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOCK = %W 



PMWIN Major Code: 0X00C2 Minor Code: 2200 (0X0898) 

WINOPENCLIPBRD POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinOpenClipbrd 
2200 (0X0898) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2201 (0X0899) 

WINCLOSECLIPBRD POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinCloseClipbrd 
2201 (0X0899) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2202 (0X089A) 

WINEMPTYCLIPBRD POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinEmptyClipbrd 
2202 (0X089A) 






Trace Groups 


No groups assigned. 


Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2203 (0X089B) 


Description 

WINSETCLIPBRDOWNER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetClipbrdOwner 

Minor Code 

2203 (OX089B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2204 (0X089C) 


Description 

WINQUERYCLIPBRDOWNER/WINQUERYCIPBRDVIEWER/WINQUERYFOCUS/WINQUERYSYSMODALWINDO 
W POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYCLIPBRDOWNER 

Minor Code 

2204 (0X089C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 2205 (0X089D) 

WINSETCLIPBRDDATA POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinSetClipbrdData 
2205 (0X089D) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2206 (0X089E) 

WINQUERYCLIPBRDDATA POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinQueryClipbrdData 
2206 (0X089E) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2207 (0X089F) 

WINENUMCLIPBRDFMTS POST-INVOCATION 
Public symbol defined dynamic tracepoint: PMWIN. WinEnumClipbrdFmts 






Minor Code 


2207 (0X089F) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2208 (0X08A0) 


Description 

WINQUERYCLIPBRDFMTINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryClipbrdFmtlnfo 

Minor Code 

2208 (0X08A0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2209 (0X08A1) 


Description 

WINSETCLIPBRDVIEWER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetClipbrdViewer 

Minor Code 

2209 (0X08A1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 



PMWIN Major Code: 0X00C2 Minor Code: 2210 (0X08A2) 

WINQUERYCLIPBRDVIEWER POST-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYCLIPBRDVIEWER 
2210 (0X08A2) 

No groups assigned. 

No types assigned. 

DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2300 (0X08FC) 

WINDESTROYCURSOR PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYCURSOR 
2300 (0X08FC) 

No groups assigned. 

No types assigned. 

%HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2301 (0X08FD) 

WINSHOWCURSOR PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINSHOWCURSOR 







2301 (0X08FD) 

No groups assigned. 
No types assigned. 


Traced Parameters 


%FSHOW = %W, HWND = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2302 (0X08FE) 

WINCREATECURSOR PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATECURSOR 
2302 (0X08FE) 

No groups assigned. 

No types assigned. 

%RCLCLIP = %A, FS = %W, CY = %W 
CX = %W, Y = %W, X = %W, HWND = %A 
%RCLCLIP->XLEFT = %D, PRCLCLIP->YBOTTOM = %D 
PRCLCLIP->XRIGHT = %D, PRCLCLIP->YTOP = %D 



PMWIN Major Code: 0X00C2 Minor Code: 2303 (0X08FF) 



WINQUERYCURSORINFO PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCURSORINFO 
2303 (0X08FF) 

No groups assigned. 

No types assigned. 



Traced Parameters 


%CURSORINFO = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2304 (0X0900) 


Description 

WINSETPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETPOINTER 

Minor Code 

2304 (0X0900) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HPTRNEW = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2305 (0X0901) 


Description 

WINSHOWPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSHOWPOINTER 

Minor Code 

2305 (0X0901) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FSHOW = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2306 (0X0902) 



Description 


WINQUERYSYSPOINTER PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYSYSPOINTER 

Minor Code 

2306 (0X0902) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FLOAD = %W, IPTR = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2307 (0X0903) 


Description 

WINLOADPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADPOINTER 

Minor Code 

2307 (0X0903) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDRES = %W, HMOD = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2308 (0X0904) 


Description 

WINCREATEPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEPOINTER 

Minor Code 

2308 (0X0904) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%YHOTSPOT = %W, XHOTSPOT = %W, FPOINTER = %W 
HBMPOINTER = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2309 (0X0905) 


Description 

WINDESTROYPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYPOINTER 

Minor Code 

2309 (0X0905) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HPTR = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2310 (0X0906) 


Description 

WINQUERYPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYPOINTER 

Minor Code 

2310 (0X0906) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 231 1 (0X0907) 



Description 


WINSETPOINTERPOS PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETPOINTERPOS 

Minor Code 

2311 (0X0907) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Y = %W, X = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2312 (0X0908) 


Description 

WINQUERYPOINTERPOS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYPOINTERPOS 

Minor Code 

2312 (0X0908) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%TL = %A, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2313 (0X0909) 


Description 

WINQUERYPOINTERINFO PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYPOINTERINFO 

Minor Code 

2313 (0X0909) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%OINTERINFO = %A, HPTR = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2314 (0X090A) 


Description 

WINDRAWPOINTER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDRAWPOINTER 

Minor Code 

2314 (0X090A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FS = %W, HPTR = %A, Y = %W, X = %W, HPS = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2315 (0X090B) 


Description 

WINGETSYSBITMAP PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINGETSYSBITMAP 

Minor Code 

2315 (0X090B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IBM = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2400 (0X0960) 



Description 


WINDESTROYCURSOR POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDESTROYCURSOR 

Minor Code 

2400 (0X0960) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2401 (0X0961) 


Description 

WINSHOWCURSOR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSHOWCURSOR 

Minor Code 

2401 (0X0961) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2402 (0X0962) 


Description 

WINCREATECURSOR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCREATECURSOR 

Minor Code 

2402 (0X0962) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2403 (0X0963) 


Description 

WINQUERYCURSORINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYCURSORINFO 

Minor Code 

2403 (0X0963) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2404 (0X0964) 


Description 

WINSETPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETPOINTER 

Minor Code 

2404 (0X0964) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2405 (0X0965) 



Description 


WINSHOWPOINTER POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSHOWPOINTER 

Minor Code 

2405 (0X0965) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2406 (0X0966) 


Description 

WINQUERYSYSPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYSYSPOINTER 

Minor Code 

2406 (0X0966) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2407 (0X0967) 


Description 

WINLOADPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINLOADPOINTER 

Minor Code 

2407 (0X0967) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2408 (0X0968) 


Description 

WINCREATEPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCREATEPOINTER 

Minor Code 

2408 (0X0968) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2409 (0X0969) 


Description 

WINDESTROYPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDESTROYPOINTER 

Minor Code 

2409 (0X0969) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2410 (0X096A) 



Description 


WINQUERYPOINTER POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYPOINTER 

Minor Code 

2410 (OX096A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 241 1 (0X096B) 


Description 

WINSETPOINTERPOS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINSETPOINTERPOS 

Minor Code 

2411 (OX096B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2412 (0X096C) 


Description 

WINQUERYPOINTERPOS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYPOINTERPOS 

Minor Code 

2412 (OX096C) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2413 (0X096D) 


Description 

WINQUERYPOINTERINFO POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINQUERYPOINTERINFO 

Minor Code 

2413 (0X096D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2414 (0X096E) 


Description 

WINDRAWPOINTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINDRAWPOINTER 

Minor Code 

2414 (0X096E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2415 (0X096F) 



Description 


WINGETSYSBITMAP POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINGETSYSBITMAP 

Minor Code 

2415 (OX096F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2500 (0X09C4) 


Description 

WINSETHOOK PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETHOOK 

Minor Code 

2500 (OX09C4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMOD = %W, PFNHOOK = %A, IHOOK = %W, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2501 (0X09C5) 


Description 

WINRELEASEHOOK PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINRELEASEHOOK 

Minor Code 

2501 (OX09C5) 

Trace Groups 


No groups assigned. 



No types assigned. 



PMWIN Major Code: 0X00C2 Minor Code: 2502 (0X09C6) 

WINCALLMSGFILTER PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCALLMSGFILTER 
2502 (0X09C6) 

No groups assigned. 

No types assigned. 

%MSGF = %W, PQMSG = %A 
%QMSG->HWND = %A, PQMSG->MSG = %W 
PQMSG->MP1 = %D, PQMSG->MP2 = %D 
PQMSG->TIME = %D, PQMSG->PTL.X = %D 
PQMSG->PTL.Y = %D 



PMWIN Major Code: 0X00C2 Minor Code: 2552 (0X09F8) 



FARCALLHOOK PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. FARCALLFIOOK 
2552 (0X09F8) 

No groups assigned. 

No types assigned. 


Traced Parameters 



%IHOOK = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2553 (0X09F9) 


Description 

FREEQUEUEWINDOWHOOKS PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. FREEQUEUEWINDOWHOOKS 

Minor Code 

2553 (OX09F9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FBADEXIT = %W, SMQ = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2600 (0X0A28) 


Description 

WINSETHOOK POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetHook 

Minor Code 

2600 (0X0A28) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2601 (0X0A29) 


Description 


WINRELEASEHOOK POST-INVOCATION 



Tracepoint 


Public symbol defined dynamic tracepoint: PMWIN.WinReleaseHook 


Minor Code 

2601 (0X0A29) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2602 (0X0A2A) 


Description 

WINCALLMSGFILTER POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCallMsgFilter 

Minor Code 

2602 (0X0A2A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2700 (0X0A8C) 


Description 

WINSETCP PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCP 

Minor Code 

2700 (0X0A8C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%IDCODEPAGE = %W, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2701 (0X0A8D) 


Description 

WINQUERYCP PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCP 

Minor Code 

2701 (0X0A8D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2702 (0X0A8E) 


Description 

WINQUERYCPLIST PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCPLIST 

Minor Code 

2702 (0X0A8E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RGCP = %A, CCPMAX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2703 (0X0A8F) 


Description 



WINCPTRANSLATESTRING PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCPTRANSLATESTRING 

Minor Code 

2703 (0X0A8F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CHDEST = %A, CCHDESTMAX = %W 
CPDST = %W, PSZSRC = %A, CPSRC = %W 
PSZSRC -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 2704 (0X0A90) 


Description 

WINCPTRANSLATECHAR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCPTRANSLATECHAR 

Minor Code 

2704 (0X0A90) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CPDST = %W, CHSRC = %B, CPSRC = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2705 (0X0A91) 


Description 

WINUPPER PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINUPPER 

Minor Code 

2705 (0X0A91 ) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%SZ = %A, IDCC = %W, IDCP = %W 
PSZ-> %S 


PMWIN Major Code: 0X00C2 Minor Code: 2706 (0X0A92) 


Description 

WINUPPERCHAR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINUPPERCHAR 

Minor Code 

2706 (0X0A92) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%C = %W, IDCC = %W, IDCP = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2707 (0X0A93) 


Description 

WINNEXTCHAR PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINNEXTCHAR 

Minor Code 

2707 (0X0A93) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SZ = %A, IDCC = %W, IDCP = %W 


PSZ -> %S 



PMWIN Major Code: 0X00C2 Minor Code: 2708 (0X0A94) 

WINPREVCHAR PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINPREVCHAR 
2708 (0X0A94) 

No groups assigned. 

No types assigned. 

%SZ = %A, PSZSTART = %A, IDCC = %W, IDCP = %W 
PSZ -> %S 
PSZSTART -> %S 


PMWIN Major Code: 0X00C2 Minor Code: 2709 (0X0A95) 

WINCOMPARESTRINGS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINCOMPARESTRINGS 
2709 (0X0A95) 

No groups assigned. 

No types assigned. 

■PRESERVED = %W, PSZ2 = %A, PSZ1 = %A 
IDCC = %W, IDCP = %W 
PSZ2 -> %S 
PSZ1 -> %S 




PMWIN Major Code: 0X00C2 Minor Code: 2710 (0X0A96) 



Description 


WINLOADSTRING PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADSTRING 

Minor Code 

2710 (0X0A96) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CHBUFFER = %A, CCHMAX = %W, ID = %W, HMOD = %W 


PMWIN Major Code: 0X00C2 Minor Code: 271 1 (0X0A97) 


Description 

WINLOADMESSAGE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADMESSAGE 

Minor Code 

2711 (0X0A97) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CHBUFFER = %A, CCHMAX = %W, ID = %W, HMOD = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2750 (0X0ABE) 


Description 

WINLOADCHARXLATETBL PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADCHARXLATETBL 

Minor Code 

2750 (0X0ABE) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%IDCODEPAGE = %W, HMOD = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2751 (OXOABF) 


Description 

WINSETCHARXLATETBL PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETCHARXLATETBL 

Minor Code 

2751 (OXOABF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LPXLATETBL = %A, HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2752 (0X0AC0) 


Description 

WINQUERYCHARXLATETBL PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYCHARXLATETBL 

Minor Code 

2752 (OXOACO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMQ = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2753 (0X0AC1) 



Description 


WINLOADVKEYGLYPHXLATETBL PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINLOADVKEYGLYPHXLATETBL 

Minor Code 

2753 (0X0AC1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDOUTPUT = %W, IDLANGUAGE = %W, IDKBDTYPE = %W, HMOD = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2754 (0X0AC2) 


Description 

WINSETVKEYGLYPHXLATETBL PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETVKEYGLYPHXLATETBL 

Minor Code 

2754 (0X0AC2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDOUTPUT = %W, LPXLATETBL = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2755 (0X0AC3) 


Description 

WINQUERYVKEYGLYPHXLATETBL PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYVKEYGLYPHXLATETBL 

Minor Code 

2755 (0X0AC3) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 


%IDOUTPUT = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2756 (0X0AC4) 


Description 

WINSETKBDLAYOUT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINSETKBDLAYOUT 

Minor Code 

2756 (0X0AC4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%IDKBDLAYOUT = %W, HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2757 (0X0AC5) 


Description 

WINQUERYKBDLAYOUT PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINQUERYKBDLAYOUT 

Minor Code 

2757 (0X0AC5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HWNDDESKTOP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2800 (0X0AF0) 



Description 


WINSETCP POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinSetCp 

Minor Code 

2800 (OXOAFO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2801 (0X0AF1) 


Description 

WINQUERYCP POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryCp 

Minor Code 

2801 (0X0AF1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2802 (0X0AF2) 


Description 

WINQUERYCPLIST POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinQueryCpList 

Minor Code 

2802 (0X0AF2) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2803 (0X0AF3) 


Description 

WINCPTRANSLATESTRING POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCpTranslateString 

Minor Code 

2803 (0X0AF3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2804 (0X0AF4) 


Description 

WINCPTRANSLATECHAR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinCpTranslateChar 

Minor Code 

2804 (0X0AF4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2805 (0X0AF5) 



Description 


WINUPPER POST-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. Winllpper 

Minor Code 

2805 (0X0AF5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2806 (0X0AF6) 


Description 

WINUPPERCHAR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinllpperChar 

Minor Code 

2806 (0X0AF6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2807 (0X0AF7) 


Description 

WINNEXTCHAR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinNextChar 

Minor Code 

2807 (0X0AF7) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2808 (0X0AF8) 


Description 

WINPREVCHAR POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WinPrevChar 

Minor Code 

2808 (0X0AF8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2809 (0X0AF9) 


Description 

WINCOMPARESTRINGS POST-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. POSTWINCOMPARESTRINGS 

Minor Code 

2809 (0X0AF9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


DX = %W, AX = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2900 (0X0B54) 



Description 


WINCREATEHEAP PRE-INVOCATION 


Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINCREATEHEAP 

Minor Code 

2900 (OXOB54) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FOPTIONS = %W, CBMAXDED = %W, CHMINDED = %W 
CBGROW = %W, CBHEAP = %W, SELHEAPBASE = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2901 (0X0B55) 


Description 

WINDESTROYHEAP PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINDESTROYHEAP 

Minor Code 

2901 (0X0B55) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2902 (0X0B56) 


Description 

WINAVAILMEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINAVAILMEM 

Minor Code 


2902 (0X0B56) 



Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 


%CBMINFREE = %W, FCOMPACT = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2903 (0X0B57) 


Description 

WINALLOCMEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINALLOCMEM 

Minor Code 

2903 (0X0B57) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CB = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2904 (0X0B58) 


Description 

WINREALLOCMEM PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. WINREALLOCMEM 

Minor Code 

2904 (0X0B58) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CBNEW = %W, CBOLD = %W, NPMEM = %W, HHEAP = %A 



PMWIN Major Code: 0X00C2 Minor Code: 2905 (0X0B59) 

WINFREEMEM PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINFREEMEM 
2905 (0X0B59) 

No groups assigned. 

No types assigned. 

%CBMEM = %W, NPMEM = %W, HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2906 (0X0B5A) 

WINLOCKHEAP PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. WINLOCKFIEAP 
2906 (0X0B5A) 

No groups assigned. 

No types assigned. 

%HHEAP = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2950 (0X0B86) 

COMPACTMOVEABLEHEAP PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. COMPACTMOVEABLEFIEAP 
2950 (0X0B86) 






Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 


PHEAPCB = %A 


PMWIN Major Code: 0X00C2 Minor Code: 2951 (0X0B87) 


Description 

FINDFREEBLOCK PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. FINDFREEBLOCK 

Minor Code 

2951 (0X0B87) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


PHEAPCB = %A, CBBLOCKSIZE = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2952 (0X0B88) 


Description 

FINDMAXFREEBLOCK PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. FINDMAXFREEBLOCK 

Minor Code 

2952 (0X0B88) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


PHEAPCB = %A 



PMWIN Major Code: 0X00C2 Minor Code: 2953 (0X0B89) 

INSERTFREEBLOCK PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. INSERTFREEBLOCK 
2953 (0X0B89) 

No groups assigned. 

No types assigned. 

PHEAPCB = %A, PBLOCK = %W, CBBLOCKSIZE = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2954 (0X0B8A) 

SORTFREELIST PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. SORTFREELIST 
2954 (0X0B8A) 

No groups assigned. 

No types assigned. 

PHEAPCB = %A, PFREELISTHEAD = %A, CBBLOCKSIZE = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2955 (0X0B8B) 

GETSIZEDS PRE-INVOCATION 

Public symbol defined dynamic tracepoint: PMWIN. GETSIZEDS 





Minor Code 



2955 (0X0B8B) 


Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

DS = %W 


PMWIN Major Code: 0X00C2 Minor Code: 2956 (0X0B8C) 


Description 

VALIDATEHEAPHANDLE PRE-INVOCATION 

Tracepoint 

Public symbol defined dynamic tracepoint: PMWIN. VALIDATEHEAPHANDLE 

Minor Code 

2956 (0X0B8C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 

No parameters traced. 


PMGRE.DLL Trace Events 


The tracepoints for the PMGRE.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for PMGRE Major Code: 0X00C3, sorted by minor code. 

Trace events for PMGRE Major Code: 0X00C3 , sorted by tracepoint. 


Trace Events for PMGRE Major Code: 0X00C3, Sorted by 
Minor Code 


00002 (0X0002) GREENTRY2 Pre-Invocation 

00003 (0X0003) GREENTRY3 Pre-Invocation 

00004 (0X0004) GREENTRY4 Pre-Invocation 


00005 (0X0005) GREENTRY5 Pre-Invocation 

00006 (0X0006) GREENTRY6 Pre-Invocation 

00007 (0X0007) GREENTRY7 Pre-Invocation 

00008 (0X0008) GREENTRY8 Pre-Invocation 

00009 (0X0009) GREENTRY9 Pre-Invocation 

00010 (0X000A) GREENTRY10 Pre-Invocation 

00012 (0X000C) GRE32ENTRY2 Pre-Invocation 

00013 (0X000D) GRE32ENTRY3 Pre-Invocation 

00014 (0X000E) GRE32ENTRY4 Pre-Invocation 

00015 (0X000F) GRE32ENTRY5 Pre-Invocation 

00016 (0X0010) GRE32ENTRY6 Pre-Invocation 

00017 (0X0011) GRE32ENTRY7 Pre-Invocation 

00018 (0X0012) GRE32ENTRY8 Pre-Invocation 

00019 (0X0013) GRE32ENTRY9 Pre-Invocation 

00020 (0X0014) GRE32ENTRY10 Pre-Invocation 

00022 (0X0016) INNERGRE32ENTRY2 Pre-Invocation 

00023 (0X0017) INNERGRE32ENTRY3 Pre-Invocation 

00024 (0X0018) INNERGRE32ENTRY4 Pre-Invocation 

00025 (0X0019) INNERGRE32ENTRY5 Pre-Invocation 

00026 (0X001 A) INNERGRE32ENTRY6 Pre-Invocation 

00027 (0X001 B) INNERGRE32ENTRY7 Pre-Invocation 

00028 (0X001 C) INNERGRE32ENTRY8 Pre-Invocation 

00029 (0X001 D) INNERGRE32ENTRY9 Pre-Invocation 

00030 (0X001 E) INNERGRE32ENTRY10 Pre-Invocation 


Trace Events for PMGRE Major Code: 0X00C3, Sorted by 
Tracepoint 


GRE32ENTRY10 00020 (0X0014) 
GRE32ENTRY2 00012 (0X000C) 
GRE32ENTRY3 00013 (0X000D) 
GRE32ENTRY4 00014 (0X000E) 
GRE32ENTRY5 00015 (0X000F) 
GRE32ENTRY6 00016 (0X0010) 
GRE32ENTRY7 0001 7 (0X001 1 ) 
GRE32ENTRY8 00018 (0X0012) 
GRE32ENTRY9 00019 (0X0013) 
GREENTRY10 00010 (0X000A) 
GREENTRY2 00002 (0X0002) 
GREENTRY3 00003 (0X0003) 
GREENTRY4 00004 (0X0004) 
GREENTRY5 00005 (0X0005) 
GREENTRY6 00006 (0X0006) 
GREENTRY7 00007 (0X0007) 
GREENTRY8 00008 (0X0008) 
GREENTRY9 00009 (0X0009) 
INNERGRE32ENTRY1 0 00030 (0X001 E) 
INNERGRE32ENTRY2 00022 (0X0016) 
INNERGRE32ENTRY3 00023 (0X0017) 
INNERGRE32ENTRY4 00024 (0X0018) 
INNERGRE32ENTRY5 00025 (0X0019) 
INNERGRE32ENTRY6 00026 (0X001 A) 
INNERGRE32ENTRY7 00027 (0X001 B) 
INNERGRE32ENTRY8 00028 (0X001 C) 
INNERGRE32ENTRY9 00029 (0X001 D) 


PMGRE Major Code: 0X00C3 Minor Code: 2 (0X0002) 


Description 


GREENTRY2 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE.GREENTRY2 

Minor Code 

2 (0X0002) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparam2 = %d, Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 3 (0X0003) 


Description 

GREENTRY3 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY3 

Minor Code 

3 (0X0003) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparam3 = %d, Iparam2 = %d 
Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 4 (0X0004) 


Description 

GREENTRY4 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY4 

Minor Code 

4 (0X0004) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%Return Address = %a, Iparam4 = %d, Iparam3 = %d 
Iparam2 = %d, Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 5 (0X0005) 


Description 

GREENTRY5 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY5 

Minor Code 

5 (0X0005) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparam5 = %d, Iparam4 = %d 
Iparam3 = %d, Iparam2 = %d, Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 6 (0X0006) 


Description 

GREENTRY6 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY6 

Minor Code 

6 (0X0006) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparam6 = %d, Iparam5 = %d 


Iparam4 = %d, Iparam3 = %d, Iparam2 = %d 



Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 7 (0X0007) 

GREENTRY7 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY7 
7 (0X0007) 

No groups assigned. 

No types assigned. 

%Return Address = %a, Iparam7 = %d, Iparam6 = %d 
Iparam5 = %d, Iparam4 = %d, Iparam3 = %d, 

Iparam2 = %d , Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 8 (0X0008) 

GREENTRY8 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY8 
8 (0X0008) 

No groups assigned. 

No types assigned. 

%Return Address = %a, Iparam8 = %d, Iparam7 = %d 
Iparam6 = %d, Iparam5 = %d, Iparam4 = %d, 

Iparam3 = %d, Iparam2 = %d, Iparaml = %d 




PMGRE Major Code: 0X00C3 Minor Code: 9 (0X0009) 



Description 


GREENTRY9 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY9 

Minor Code 

9 (0X0009) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparam9 = %d, Iparam8 = %d 
Iparam7 = %d, Iparam6 = %d, Iparam5 = %d 
Iparam4 = %d, Iparam3 = %d, Iparam2 = %d 
Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 10 (0X000A) 


Description 

GREENTRY10 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GREENTRY1 0 

Minor Code 

10 (0X0O0A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %a, Iparaml 0 = %d, Iparam9 = %d 
Iparam8 = %d, Iparam7 = %d, Iparam6 = %d, 

Iparam5 = %d, Iparam4 = %d, Iparam3 = %d, 

Iparam2 = %d, Iparaml = %d 


PMGRE Major Code: 0X00C3 Minor Code: 12 (0X000C) 



Description 


GRE32ENTRY2 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE.GRE32ENTRY2 

Minor Code 

12 (OXOOOC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 13 (0X000D) 


Description 

GRE32ENTRY3 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY3 

Minor Code 

13 (OXOOOD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 14 (0X000E) 


Description 

GRE32ENTRY4 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY4 

Minor Code 

14 (OXOOOE) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 15 (0X000F) 


Description 

GRE32ENTRY5 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY5 

Minor Code 

15 (OXOOOF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 16 (0X0010) 


Description 

GRE32ENTRY6 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY6 

Minor Code 

16 (0X0010) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 


Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 



Iparam6 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 17 (0X0011) 

GRE32ENTRY7 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY7 
17 (0X0011) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d ,lparam7 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 18 (0X0012) 

GRE32ENTRY8 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY8 
18 (0X0012) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, Iparam7 = %d, Iparam8 = %d 




PMGRE Major Code: 0X00C3 Minor Code: 19 (0X0013) 



Description 


GRE32ENTRY9 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY9 

Minor Code 

19 (0X0013) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, Iparam7 = %d, IparamS = %d 
Iparam9 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 20 (0X0014) 


Description 

GRE32ENTRY10 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. GRE32ENTRY1 0 

Minor Code 

20 (0X0014) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, lparam7 = %d, IparamS = %d 
Iparam9 = %d, Iparaml 0 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 22 (0X0016) 



Description 


INNERGRE32ENTRY2 Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE.INNERGRE32ENTRY2 

Minor Code 

22 (0X0016) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 23 (0X0017) 


Description 

INNERGRE32ENTRY3 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY3 

Minor Code 

23 (0X0017) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 24 (0X0018) 


Description 

INNERGRE32ENTRY4 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY4 

Minor Code 

24 (0X0018) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 25 (0X0019) 


Description 

INNERGRE32ENTRY5 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY5 

Minor Code 

25 (0X0019) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 26 (0X001 A) 


Description 

INNERGRE32ENTRY6 Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY6 

Minor Code 

26 (0X001 A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Return Address = %f, Iparaml = %d, Iparam2 = %d 


Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 



Iparam6 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 27 (0X001 B) 

INNERGRE32ENTRY7 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY7 
27 (0X001 B) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d ,lparam7 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 28 (0X001 C) 

INNERGRE32ENTRY8 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY8 
28 (0X001 C) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, Iparam7 = %d, Iparam8 = %d 




PMGRE Major Code: 0X00C3 Minor Code: 29 (0X001 D) 



INNERGRE32ENTRY9 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE.INNERGRE32ENTRY9 
29 (0X001 D) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, iparam7 = %d, IparamS = %d 
Iparam9 = %d 


PMGRE Major Code: 0X00C3 Minor Code: 30 (0X001 E) 

INNERGRE32ENTRY10 Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGRE. INNERGRE32ENTRY10 
30 (0X001 E) 

No groups assigned. 

No types assigned. 

%Return Address = %f, Iparaml = %d, Iparam2 = %d 
Iparam3 = %d, Iparam4 = %d, Iparam5 = %d 
Iparam6 = %d, Iparam7 = %d, Iparam8 = %d 


PMPIC.DLL Trace Events 

The tracepoints for the PMPIC.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 





Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for PMPIC Major Code: 0X00C4, sorted by minor code. 

Trace events for PMPIC Major Code: 0X00C4 .sorted by tracepoint. 


Trace Events for PMPIC Major Code: 0X00C4, Sorted by 
Minor Code 

00010 (0X000A) Piclchg Pre-Invocation 
01000 (0X03E8) PicPrint Pre-Invocation 


Trace Events for PMPIC Major Code: 0X00C4, Sorted by 
Tracepoint 


PICICHG 00010 (0X000A) 
PICPRINT 01000 (0X03E8) 


PMPIC Major Code: 0X00C4 Minor Code: 10 (0X000A) 


Description 

Piclchg Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMPIC. PICICHG 

Minor Code 

10 (0X000A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%convtype = %d, outjile = %d, full_file = %d, HabPic = %d 


PMPIC Major Code: 0X00C4 Minor Code: 1000 (0X03E8) 


Description 


PicPrint Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMPIC. PICPRINT 

Minor Code 

1000 (0X03E8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%aram_str = %a, type = %d, filename = %a, hab = %d 


PMGPI.DLL Trace Events 

The tracepoints for the PMGPI.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for PMGPI Major Code: 0X00C5, sorted by minor code. 

Trace events for PMGPI Major Code: 0X00C5 .sorted by tracepoint. 


Trace Events for PMGPI Major Code: 0X00C5, Sorted by 
Minor Code 

00101 (0X0065) GpiCreatePS Pre-Invocation 

00102 (0X0066) GpiDestroyPS Pre-Invocation 

00103 (0X0067) GpiAssociate Pre-Invocation 

00104 (0X0068) GpiRestorePS Pre-Invocation 

00105 (0X0069) GpiSavePS Pre-Invocation 

00106 (0X006A) GpiErase Pre-Invocation 

00107 (0X006B) GpiQueryDevice Pre-Invocation 

00108 (0X006C) GpiResetPS Pre-Invocation 

00109 (0X006D) GpiSetPS Pre-Invocation 

00110 (0X006E) GpiQueryPS Pre-Invocation 

001 1 1 (0X006F) GpiErrorSegmentData Pre-Invocation 

00112 (0X0070) GpiQueryDrawControl Pre-Invocation 

00113 (0X0071) GpiSetDrawControl Pre-Invocation 

00114 (0X0072) GpiQueryDrawingMode Pre-Invocation 

00115 (0X0073) GpiSetDrawingMode Pre-Invocation 

00116 (0X0074) GpiQueryStopDraw Pre-Invocation 

00117 (0X0075) GpiSetStopDraw Pre-Invocation 

00201 (0X00C9) GpiCorrelateChain Pre-Invocation 

00202 (0X00CA) GpiQueryTag Pre-Invocation 

00203 (0X00CB) GpiSetTag Pre-Invocation 


00204 (0X00CC) GpiQueryPickApertureSize Pre-Invocation 

00205 (OXOOCD) GpiSetPickApertureSize Pre-Invocation 

00206 (OXOOCE) GpiQueryPickAperturePosition Pre-Invocation 

00207 (0X00CF) GpiSetPickAperturePosition Pre-Invocation 

00208 (0X00D0) GpiQueryBoundaryData Pre-Invocation 

00209 (0X00D1) GpiResetBoundaryData Pre-Invocation 

00210 (0X00D2) GpiCorrelateFrom Pre-Invocation 

0021 1 (0X00D3) GpiCorrelateSegment Pre-Invocation 

00300 (0X01 2C) GpiOpenSegment Pre-Invocation 

00301 (0X01 2D) GpiCloseSegment Pre-Invocation 

00302 (0X01 2E) GpiDeleteSegment Pre-Invocation 

00303 (0X01 2F) GpiQuerylnitialSegmentAttrs Pre-Invocation 

00304 (0X0130) GpiSetlnitialSegmentAttrs Pre-Invocation 

00305 (0X0131) GpiQuerySegmentAttrs Pre-Invocation 

00306 (0X0132) GpiSetSegmentAttrs Pre-Invocation 

00307 (0X0133) GpiQuerySegmentPriority Pre-Invocation 

00308 (0X0134) GpiSetSegmentPriority Pre-Invocation 

00309 (0X0135) GpiDeleteSegments Pre-Invocation 

00310 (0X0136) GpiQuerySegmentNames Pre-Invocation 

00400 (0X0190) GpiGetData Pre-Invocation 

00401 (0X0191) GpiPutData Pre-Invocation 

00402 (0X0192) GpiDrawChain Pre-Invocation 

00403 (0X0193) GpiDrawFrom Pre-Invocation 

00404 (0X0194) GpiDrawSegment Pre-Invocation 

00405 (0X0195) GpiDrawDynamics Pre-Invocation 

00406 (0X0196) GpiRemoveDynamics Pre-Invocation 

00500 (0X01 F4) GpiBeginElement Pre-Invocation 

00501 (0X01 F5) GpiEndElement Pre-Invocation 

00502 (0X01 F6) GpiLabel Pre-Invocation 

00503 (0X01 F7) GpiElement Pre-Invocation 

00504 (0X01 F8) GpiQueryElement Pre-Invocation 

00505 (0X01 F9) GpiDeleteElement Pre-Invocation 

00506 (0X01 FA) GpiDeleteElementRange Pre-Invocation 

00507 (0X01 FB) GpiDeleteElementsBetweenLabels Pre-Invocation 

00508 (0X01 FC) GpiQueryEditMode Pre-Invocation 

00509 (0X01 FD) GpiSetEditMode Pre-Invocation 

00510 (0X01 FE) GpiQueryElementPointer Pre-Invocation 

00511 (0X01 FF) GpiSetElementPointer Pre-Invocation 

00512 (0X0200) GpiOffsetElementPointer Pre-Invocation 

00513 (0X0201) GpiQueryElementType Pre-Invocation 

00514 (0X0202) GpiSetElementPointerAtLabel Pre-Invocation 

00600 (0X0258) GpiQuerySegmentTransformMatrix Pre-Invocation 

00601 (0X0259) GpiSetSegmentTransformMatrix Pre-Invocation 

00602 (0X025A) GpiConvert Pre-Invocation 

00603 (0X025B) GpiQueryModelTransformMatrix Pre-Invocation 

00604 (0X025C) GpiSetModelTransformMatrix Pre-Invocation 

00605 (0X025D) GpiCallSegmentMatrix Pre-Invocation 

00606 (0X025E) GpiQueryDefauItViewMatrix Pre-Invocation 

00607 (0X025F) GpiSetDefauItViewMatrix Pre-Invocation 

00608 (0X0260) GpiQueryPageViewport Pre-Invocation 

00609 (0X0261) GpiSetPageViewport Pre-Invocation 

00610 (0X0262) GpiQueryViewingTransformMatrix Pre-Invocation 

00611 (0X0263) GpiSetViewingTransformMatrix Pre-Invocation 

00700 (0X02BC) GpiSetGraphicsField Pre-Invocation 

00701 (0X02BD) GpiQueryGraphicsField Pre-Invocation 

00702 (0X02BE) GpiSetViewingLimits Pre-Invocation 

00703 (0X02BF) GpiQueryViewingLimits Pre-Invocation 

00800 (0X0320) GpiBeginPath Pre-Invocation 

00801 (0X0321) GpiEndPath Pre-Invocation 

00802 (0X0322) GpiCloseFigure Pre-Invocation 

00803 (0X0323) GpiModifyPath Pre-Invocation 

00804 (0X0324) GpiFillPath Pre-Invocation 

00805 (0X0325) GpiSetClipPath Pre-Invocation 

00806 (0X0326) GpiStrokePath Pre-Invocation 

00900 (0X0384) GpiCreateLogColorTable Pre-Invocation 

00901 (0X0385) GpiRealizeColorTable Pre-Invocation 

00902 (0X0386) GpiUnrealizeColorTable Pre-Invocation 

00903 (0X0387) GpiQueryColorData Pre-Invocation 

00904 (0X0388) GpiQueryLogColorTable Pre-Invocation 

00905 (0X0389) GpiQueryRealColors Pre-Invocation 

00906 (0X038A) GpiQueryNearestColor Pre-Invocation 

00907 (0X038B) GpiQueryColorlndex Pre-Invocation 

00908 (0X038C) GpiQueryRGBColor Pre-Invocation 


01000 (0X03E8) GpiSetColor Pre-Invocation 

01001 (0X03E9) GpiQueryColor Pre-Invocation 

01002 (0X03EA) GpiSetBackColor Pre-Invocation 

01003 (0X03EB) GpiQueryBackColor Pre-Invocation 

01004 (0X03EC) GpiSetMix Pre-Invocation 

01005 (0X03ED) GpiQueryMix Pre-Invocation 

01006 (0X03EE) GpiSetBackMix Pre-Invocation 

01007 (0X03EF) GpiQueryBackMix Pre-Invocation 

01008 (0X03F0) GpiSetAttrs Pre-Invocation 

01009 (0X03F1) GpiQueryAttrs Pre-Invocation 

01010 (0X03F2) GpiSetAttrMode Pre-Invocation 

01011 (0X03F3) GpiQueryAttrMode Pre-Invocation 

01100 (0X044C) GpiSetPatternSet Pre-Invocation 

01101 (0X044D) GpiQueryPatternSet Pre-Invocation 

01 102 (0X044E) GpiSetPatternRefPoint Pre-Invocation 

01 103 (0X044F) GpiQueryPatternRefPoint Pre-Invocation 

01104 (0X0450) GpiSetPattern Pre-Invocation 

01105 (0X0451) GpiQueryPattern Pre-Invocation 

01106 (0X0452) GpiBeginArea Pre-Invocation 

01107 (0X0453) GpiEndArea Pre-Invocation 

01200 (0X04B0) GpiSetLineType Pre-Invocation 

01201 (0X04B1) GpiQueryLineType Pre-Invocation 

01202 (0X04B2) GpiSetLineWidth Pre-Invocation 

01203 (0X04B3) GpiQueryLineWidth Pre-Invocation 

01204 (0X04B4) GpiSetLineWidthGeom Pre-Invocation 

01205 (0X04B5) GpiQueryLineWidthGeom Pre-Invocation 

01206 (0X04B6) GpiSetLineEnd Pre-Invocation 

01207 (0X04B7) GpiQueryLineEnd Pre-Invocation 

01208 (0X04B8) GpiSetLineJoin Pre-Invocation 

01209 (0X04B9) GpiQueryLineJoin Pre-Invocation 

01210 (0X04BA) GpiSetCurrentPosition Pre-Invocation 

01211 (0X04BB) GpiQueryCurrentPosition Pre-Invocation 

01212 (0X04BC) GpiBox Pre-Invocation 

01213 (0X04BD) GpiMove Pre-Invocation 

01214 (0X04BE) GpiLine Pre-Invocation 

01215 (0X04BF) GpiPolyLine Pre-Invocation 

01300 (0X0514) GpiSetArcParams Pre-Invocation 

01301 (0X0515) GpiQueryArcParams Pre-Invocation 

01302 (0X0516) GpiPointArc Pre-Invocation 

01303 (0X0517) GpiFullArc Pre-Invocation 

01304 (0X0518) GpiPartialArc Pre-Invocation 

01305 (0X0519) GpiPolyFilletSharp Pre-Invocation 

01306 (0X051 A) GpiPolySpline Pre-Invocation 

01307 (0X051 B) GpiPolyFillet Pre-Invocation 

01400 (0X0578) GpiQueryTextBox Pre-Invocation 

01401 (0X0579) GpiQueryDefCharBox Pre-Invocation 

01402 (0X057A) GpiSetCharSet Pre-Invocation 

01403 (0X057B) GpiQueryCharSet Pre-Invocation 

01404 (0X057C) GpiSetCharBox Pre-Invocation 

01405 (0X057D) GpiQueryCharBox Pre-Invocation 

01406 (0X057E) GpiSetCharAngle Pre-Invocation 

01407 (0X057F) GpiQueryCharAngle Pre-Invocation 

01408 (0X0580) GpiSetCharShear Pre-Invocation 

01409 (0X0581) GpiQueryCharShear Pre-Invocation 

01410 (0X0582) GpiSetCharDirection Pre-Invocation 

01411 (0X0583) GpiQueryCharDirection Pre-Invocation 

01412 (0X0584) GpiSetCharMode Pre-Invocation 

01413 (0X0585) GpiQueryCharMode Pre-Invocation 

01414 (0X0586) GpiCharStringPos Pre-Invocation 

01415 (0X0587) GpiCharStringPosAt Pre-Invocation 

01416 (0X0588) GpiCharString Pre-Invocation 

01417 (0X0589) GpiCharStringAt Pre-Invocation 

01418 (0X058A) GpiQueryCharStringPos Pre-Invocation 

01419 (0X058B) GpiQueryCharStringPosAt Pre-Invocation 

01500 (0X05DC) GpiSetMarkerSet Pre-Invocation 

01501 (0X05DD) GpiQueryMarkerSet Pre-Invocation 

01502 (0X05DE) GpiSetMarker Pre-Invocation 

01503 (0X05DF) GpiQueryMarker Pre-Invocation 

01504 (0X05E0) GpiSetMarkerBox Pre-Invocation 

01505 (0X05E1) GpiQueryMarkerBox Pre-Invocation 

01506 (0X05E2) GpiMarker Pre-Invocation 

01507 (0X05E3) GpiPolyMarker Pre-Invocation 
01600 (0X0640) Gpilmage Pre-Invocation 


01601 (0X0641) GpiPop Pre-Invocation 

01602 (0X0642) GpiPtVisible Pre-Invocation 

01603 (0X0643) GpiRectVisible Pre-Invocation 

01604 (0X0644) GpiComment Pre-Invocation 

01700 (0X06A4) GpiDeleteSetld Pre-Invocation 

01701 (0X06A5) GpiQueryNumberSetlds Pre-Invocation 

01702 (0X06A6) GpiQuerySetlds Pre-Invocation 

01703 (0X06A7) GpiLoadFonts Pre-Invocation 

01704 (0X06A8) GpiUnloadFonts Pre-Invocation 

01705 (0X06A9) GpiCreateLogFont Pre-Invocation 

01706 (0X06AA) GpiQueryFonts Pre-Invocation 

01707 (0X06AB) GpiQueryFontMetrics Pre-Invocation 

01708 (0X06AC) GpiQueryKerningPairs Pre-Invocation 

01709 (0X06AD) GpiQueryWidthTable Pre-Invocation 

01710 (0X06AE) GpiSetCp Pre-Invocation 

01711 (0X06AF) GpiQueryCp Pre-Invocation 

01712 (0X06B0) GpiQueryFontFileDescriptions Pre-Invocation 

01800 (0X0708) GpiDeleteBitmap Pre-Invocation 

01801 (0X0709) GpiSetBitmap Pre-Invocation 

01802 (0X070A) GpiBitBIt Pre-Invocation 

01803 (0X070B) GpiWCBitBIt Pre-Invocation 

01804 (0X070C) GpiCreateBitmap Pre-Invocation 

01805 (0X070D) GpiSetBitmapDimension Pre-Invocation 

01806 (0X070E) GpiQueryBitmapDimension Pre-Invocation 

01807 (0X070F) GpiQueryDeviceBitmapFormats Pre-Invocation 

01808 (0X0710) GpiQueryBitmapParameters Pre-Invocation 

01809 (0X0711) GpiQueryBitmapBits Pre-Invocation 

01810 (0X0712) GpiSetBitmapBits Pre-Invocation 

01811 (0X0713) GpiSetPel Pre-Invocation 

01812 (0X0714) GpiQueryPel Pre-Invocation 

01813 (0X0715) GpiSetBitmapid Pre-Invocation 

01814 (0X0716) GpiQueryBitmapFlandle Pre-Invocation 

01900 (0X076C) GpiCreateRegion Pre-Invocation 

01901 (0X076D) GpiSetRegion Pre-Invocation 

01902 (0X076E) GpiDestroyRegion Pre-Invocation 

01903 (0X076F) GpiCombineRegion Pre-Invocation 

01904 (0X0770) GpiEqualRegion Pre-Invocation 

01905 (0X0771) GpiOffsetRegion Pre-Invocation 

01906 (0X0772) GpiPtlnRegion Pre-Invocation 

01907 (0X0773) GpiRectlnRegion Pre-Invocation 

01908 (0X0774) GpiQueryRegionBox Pre-Invocation 

01909 (0X0775) GpiQueryRegionRects Pre-Invocation 

01910 (0X0776) GpiPaintRegion Pre-Invocation 

02000 (0X07D0) GpiSetClipRegion Pre-Invocation 

02001 (0X07D1) GpiQueryClipRegion Pre-Invocation 

02002 (0X07D2) GpiQueryClipBox Pre-Invocation 

02003 (0X07D3) GpilntersectClipRectangle Pre-Invocation 

02004 (0X07D4) GpiExcludeClipRectangle Pre-Invocation 

02005 (0X07D5) GpiOffsetClipRegion Pre-Invocation 

02100 (0X0834) GpiLoadMetaFile Pre-Invocation 

02101 (0X0835) GpiPlayMetaFile Pre-Invocation 

02102 (0X0836) GpiSaveMetaFile Pre-Invocation 

02103 (0X0837) GpiDeleteMetaFile Pre-Invocation 

02104 (0X0838) GpiCopyMetaFile Pre-Invocation 

02105 (0X0839) GpiQueryMetaFileLength Pre-Invocation 

02106 (0X083A) GpiQueryMetaFileBits Pre-Invocation 

02107 (0X083B) GpiSetMetaFileBits Pre-Invocation 

02300 (0X08FC) MTIDPStoreMeta Pre-Invocation 

02301 (0X08FD) MTEnableKerningMeta Pre-Invocation 

02302 (0X08FE) MTDisplayFlagMeta Pre-Invocation 

02303 (0XO8FF) MTCreateLogColorTableMeta Pre-Invocation 

02304 (0X0900) MTSetCodePageMeta Pre-Invocation 

02305 (0X0901) MTDeleteSetIDMeta Pre-Invocation 

02306 (0X0902) MTSetGraphicsFieldMeta Pre-Invocation 

02307 (0X0903) MTResetMeta Pre-Invocation 

02308 (0X0904) MTEraseMeta Pre-Invocation 

02309 (0X0905) MTAssociateMeta Pre-Invocation 

02310 (0X0906) MTVerifyPagellnits Pre-Invocation 

0231 1 (0X0907) MTBitBItMeta Pre-Invocation 

02312 (0X0908) MTWCBitBItMeta Pre-Invocation 

02313 (0X0909) MTSetPelMeta Pre-Invocation 

02314 (0X090A) MTSelectClipMeta Pre-Invocation 

02315 (0X090B) MTClipRegionMeta Pre-Invocation 


02316 (0X090C) MTPaintRegionMeta Pre-Invocation 

02317 (0X090D) MTDevEscape Pre-Invocation 

02318 (0X090E) MTRestorePS Pre-Invocation 

02319 (0X090F) MTSavePS Pre-Invocation 

02320 (0X0910) MTStartReadRequest Pre-Invocation 

02321 (0X0911) MTEndReadRequest Pre-Invocation 

02322 (0X0912) MTStartWriteRequest Pre-Invocation 

02323 (0X0913) MTEndWriteRequest Pre-Invocation 

02324 (0X0914) MTLongByteSwap Pre-Invocation 


Trace Events for PMGPI Major Code: 0X00C5, Sorted by 
Tracepoint 


GPIASSOCIATE 00103 (0X0067) 

GPIBEGINAREA 01 1 06 (0X0452) 

GPIBEGINELEMENT 00500 (0X01 F4) 

GPIBEGINPATH 00800 (0X0320) 

GPIBITBLT 01802 (0X070A) 

GPIBOX 01212 (0X04BC) 

GPICALLSEGMENTMATRIX 00605 (0X025D) 
GPICHARSTRING 01416 (0X0588) 

GPICHARSTRINGAT 01417 (0X0589) 
GPICHARSTRINGPOS 01414 (0X0586) 
GPICHARSTRINGPOSAT 01415 (0X0587) 
GPICLOSEFIGURE 00802 (0X0322) 

GPICLOSESEGMENT 00301 (0X012D) 
GPICOMBINEREGION 01903 (0X076F) 

GPICOMMENT 01604 (0X0644) 

GPICONVERT 00602 (0X025A) 

GPICOPYMETAFILE 02104 (0X0838) 
GPICORRELATECHAIN 00201 (0X00C9) 
GPICORRELATEFROM 00210 (0X00D2) 
GPICORRELATESEGMENT 0021 1 (OXOOD3) 
GPICREATEBITMAP 01804 (0X070C) 
GPICREATELOGCOLORTABLE 00900 (0X0384) 
GPICREATELOGFONT 01705 (0X06A9) 

GPICREATEPS 00101 (0X0065) 

GPICREATEREGION 01900 (0X076C) 

GPIDELETEBITMAP 01800 (0X0708) 

GPIDELETEELEMENT 00505 (0X01 F9) 
GPIDELETEELEMENTRANGE 00506 (0X01 FA) 
GPIDELETEELEMENTSBETWEENLABELS 00507 (0X01 FB) 
GPIDELETEMETAFILE 02103 (0X0837) 
GPIDELETESEGMENT 00302 (0X012E) 
GPIDELETESEGMENTS 00309 (0X0135) 

GPIDELETESETID 01700 (0X06A4) 

GPIDESTROYPS 00102 (0X0066) 

GPIDESTROYREGION 01902 (0X076E) 

GPIDRAWCHAIN 00402 (0X0192) 

GPIDRAWDYNAMICS 00405 (0X0195) 

GPIDRAWFROM 00403 (0X0193) 

GPIDRAWSEGMENT 00404 (0X0194) 

GPIELEMENT 00503 (0X01 F7) 

GPIENDAREA 01107 (0X0453) 

GPIENDELEMENT 00501 (0X01 F5) 

GPIENDPATH 00801 (0X0321) 

GPIEQUALREGION 01904 (0X0770) 

GPIERASE 00106 (0X006A) 

GPIERRORSEGMENTDATA 001 1 1 (0X006F) 
GPIEXCLUDECLIPRECTANGLE 02004 (0X07D4) 
GPIFILLPATH 00804 (0X0324) 

GPIFULLARC 01303 (0X0517) 

GPIGETDATA 00400 (0X0190) 

GPIIMAGE 01600 (0X0640) 


GPIINTERSECTCLIPRECTANGLE 02003 (0X07D3) 
GPILABEL 00502 (0X01 F6) 

GPILINE 01214 (0X04BE) 

GPILOADFONTS 01703 (0X06A7) 

GPILOADMETAFILE 02100 (0X0834) 

GPIMARKER 01506 (0X05E2) 

GPIMODIFYPATH 00803 (0X0323) 

GPIMOVE 01213 (0X04BD) 

GPIOFFSETCLIPREGION 02005 (0X07D5) 
GPIOFFSETELEMENTPOINTER 00512 (0X0200) 
GPIOFFSETREGION 01905 (0X0771) 
GPIOPENSEGMENT 00300 (0X01 2C) 
GPIPAINTREGION 01910 (0X0776) 

GPIPARTIALARC 01304 (0X0518) 

GPIPLAYMETAFILE 02101 (0X0835) 

GPIPOINTARC 01302 (0X0516) 

GPIPOLYFILLET 01 307 (0X051 B) 
GPIPOLYFILLETSHARP 01305 (0X0519) 

GPIPOLYLINE 01215 (0X04BF) 

GPIPOLYMARKER 01507 (0X05E3) 

GPIPOLYSPLINE 01306 (0X051 A) 

GPIPOP 01601 (0X0641) 

GPIPTINREGION 01906 (0X0772) 

GPIPTVIS1BLE 01602 (0X0642) 

GPIPUTDATA 00401 (0X0191) 
GPIQUERYARCPARAMS 01301 (0X0515) 
GPIQUERYATTRMODE 01011 (0X03F3) 
GPIQUERYATTRS 01009 (0X03F1) 
GPIQUERYBACKCOLOR 01003 (0X03EB) 
GPIQUERYBACKMIX 01007 (0X03EF) 
GPIQUERYBITMAPBITS 01 809 (0X071 1 ) 
GPIQUERYBITMAPDIMENSION 01806 (0X070E) 
GPIQUERYBITMAPHANDLE 01814 (0X0716) 
GPIQUERYBITMAPPARAMETERS 01808 (0X0710) 
GPIQUERYBOUNDARYDATA 00208 (0X00D0) 
GPIQUERYCHARANGLE 01407 (0X057F) 
GPIQUERYCHARBOX 01405 (0X057D) 
GPIQUERYCHARDIRECTION 01411 (0X0583) 
GPIQUERYCHARMODE 01413 (0X0585) 
GPIQUERYCHARSET 01403 (0X057B) 
GPIQUERYCHARSHEAR 01409 (0X0581) 
GPIQUERYCHARSTRINGPOS 01418 (0X058A) 
GPIQUERYCHARSTRINGPOSAT 01419 (0X058B) 
GPIQUERYCLIPBOX 02002 (0X07D2) 
GPIQUERYCLIPREGION 02001 (0X07D1) 
GPIQUERYCOLOR 01001 (0X03E9) 
GPIQUERYCOLORDATA 00903 (0X0387) 
GPIQUERYCOLORINDEX 00907 (0X038B) 
GPIQUERYCP 0171 1 (0X06AF) 
GPIQUERYCURRENTPOSITION 01211 (0X04BB) 
GPIQUERYDEFAULTVIEWMATRIX 00606 (0X025E) 
GPIQUERYDEFCHARBOX 01401 (0X0579) 
GPIQUERYDEVICE 00107 (0X006B) 
GPIQUERYDEVICEBITMAPFORMATS 01807 (0X070F) 
GPIQUERYDRAWCONTROL 00112 (0X0070) 
GPIQUERYDRAWINGMODE 00114 (0X0072) 
GPIQUERYEDITMODE 00508 (0X01 FC) 
GPIQUERYELEMENT 00504 (0X01 F8) 
GPIQUERYELEMENTPOINTER 00510 (0X01 FE) 
GPIQUERYELEMENTTYPE 00513 (0X0201) 
GPIQUERYFONTFILEDESCRIPTIONS 01712 (0X06BO) 
GPIQUERYFONTMETRICS 01707 (0X06AB) 
GPIQUERYFONTS 01706 (0X06AA) 
GPIQUERYGRAPHICSFIELD 00701 (0X02BD) 
GPIQUERYINITIALSEGMENTATTRS 00303 (0X01 2F) 
GPIQUERYKERNINGPAIRS 01708 (0X06AC) 
GPIQUERYLINEEND 01207 (0X04B7) 
GPIQUERYLINEJOIN 01209 (0X04B9) 
GPIQUERYLINETYPE 01201 (0X04B1) 
GPIQUERYLINEWIDTH 01203 (0X04B3) 
GPIQUERYLINEWIDTHGEOM 01205 (0X04B5) 
GPIQUERYLOGCOLORTABLE 00904 (0X0388) 
GPIQUERYMARKER 01503 (0X05DF) 


GPIQUERYMARKERBOX 01505 (0X05E1) 
GPIQUERYMARKERSET 01501 (0X05DD) 
GPIQUERYMETAFILEBITS 02106 (0X083A) 
GPIQUERYMETAFILELENGTH 02105 (0X0839) 
GPIQUERYMIX 01005 (0X03ED) 

GPIQUERYMODELTRANSFORMMATRIX 00603 (0X025B) 
GPIQUERYNEARESTCOLOR 00906 (0X038A) 
GPIQUERYNUMBERSETIDS 01701 (0X06A5) 
GPIQUERYPAGEVIEWPORT 00608 (0X0260) 
GPIQUERYPATTERN 01105 (0X0451) 
GPIQUERYPATTERNREFPOINT 01 1 03 (0X044F) 
GPIQUERYPATTERNSET 01101 (0X044D) 

GPIQUERYPEL 01812 (0X0714) 

GPIQUERYPICKAPERTU REPOSITION 00206 (0X00CE) 
GPIQUERYPICKAPERTURESIZE 00204 (0X00CC) 
GPIQUERYPS 001 1 0 (0X006E) 

GPIQUERYREALCOLORS 00905 (0X0389) 
GPIQUERYREGIONBOX 01908 (0X0774) 
GPIQUERYREGIONRECTS 01909 (0X0775) 
GPIQUERYRGBCOLOR 00908 (0X038C) 
GPIQUERYSEGMENTATTRS 00305 (0X0131) 
GPIQUERYSEGMENTNAMES 00310 (0X0136) 
GPIQUERYSEGMENTPRIORITY 00307 (0X0133) 
GPIQUERYSEGMENTTRANSFORMMATRIX 00600 (0X0258) 
GPIQUERYSETIDS 01702 (0X06A6) 

GPIQUERYSTOPDRAW 00116 (0X0074) 

GPIQUERYTAG 00202 (0X00CA) 

GPIQUERYTEXTBOX 01400 (0X0578) 
GPIQUERYVIEWINGLIMITS 00703 (0X02BF) 
GPIQUERYVIEWINGTRANSFORMMATRIX 0061 0 (0X0262) 
GPIQUERYWIDTHTABLE 01709 (0X06AD) 
GPIREALIZECOLORTABLE 00901 (0X0385) 
GPIRECTINREGION 01907 (0X0773) 

GPIRECTVISIBLE 01603 (0X0643) 

GPIREMOVEDYNAMICS 00406 (0X0196) 
GPIRESETBOUNDARYDATA 00209 (0X00D1 ) 

GPIRESETPS 00108 (0X006C) 

GPIRESTOREPS 00104 (0X0068) 

GPISAVEMETAFILE 02102 (0X0836) 

GPISAVEPS 00105 (0X0069) 

GPISETARCPARAMS 01300 (0X0514) 

GPISETATTRMODE 01010 (0X03F2) 

GPISETATTRS 01008 (0X03F0) 

GPISETBACKCOLOR 01002 (0X03EA) 

GPISETBACKMIX 01006 (0X03EE) 

GPISETBITMAP 01801 (0X0709) 

GPISETBITMAPBITS 01810 (0X0712) 
GPISETBITMAPDIMENSION 01805 (0X070D) 
GPISETBITMAPID 01813 (0X0715) 

GPISETCHARANGLE 01406 (0X057E) 

GPISETCHARBOX 01404 (0X057C) 
GPISETCHARDIRECTION 01410 (0X0582) 
GPISETCHARMODE 01412 (0X0584) 

GPISETCHARSET 01402 (0X057A) 

GPISETCHARSHEAR 01408 (0X0580) 

GPISETCLIPPATH 00805 (0X0325) 

GPISETCLIPREGION 02000 (0X07D0) 

GPISETCOLOR 01000 (0X03E8) 

GPISETCP 01710 (0X06AE) 

GPISETCURRENTPOSITION 01210 (0X04BA) 
GPISETDEFAULTVIEWMATRIX 00607 (0X025F) 
GPISETDRAWCONTROL 001 1 3 (0X0071 ) 
GPISETDRAWINGMODE 00115 (0X0073) 

GPISETEDITMODE 00509 (0X01 FD) 
GPISETELEMENTPOINTER 0051 1 (0X01 FF) 
GPISETELEMENTPOINTERATLABEL 00514 (0X0202) 
GPISETGRAPHICSFIELD 00700 (0X02BC) 
GPISETINITIALSEGMENTATTRS 00304 (0X0130) 
GPISETLINEEND 01206 (0X04B6) 

GPISETLINEJOIN 01208 (0X04B8) 

GPISETLINETYPE 01200 (0X04B0) 

GPISETLINEWIDTH 01202 (0X04B2) 
GPISETLINEWIDTHGEOM 01204 (0X04B4) 


GPISETMARKER 01502 (0X05DE) 

GPISETMARKERBOX 01504 (OX05EO) 
GPISETMARKERSET 01500 (0X05DC) 
GPISETMETAFILEBITS 02107 (0X083B) 

GPISETMIX 01004 (0X03EC) 

GPISETMODELTRANSFORMMATRIX 00604 (0X025C) 
GPISETPAGEVIEWPORT 00609 (0X0261) 
GPISETPATTERN 01104 (0X0450) 
GPISETPATTERNREFPOINT 01 1 02 (0X044E) 
GPISETPATTERNSET 01100 (0X044C) 

GPISETPEL 01811 (0X0713) 

GPISETPICKAPERTU REPOSITION 00207 (0X00CF) 
GPISETPICKAPERTU RESIZE 00205 (0X00CD) 
GPISETPS 00109 (0X006D) 

GPISETREGION 01901 (0X076D) 
GPISETSEGMENTATTRS 00306 (0X0132) 
GPISETSEGMENTPRIORITY 00308 (0X0134) 
GPISETSEGMENTTRANSFORMMATRIX 00601 (0X0259) 
GPISETSTOPDRAW 001 1 7 (0X0075) 

GPISETTAG 00203 (0X00CB) 

GPISETVIEWINGLIMITS 00702 (0X02BE) 
GPISETVIEWINGTRANSFORMMATRIX 0061 1 (0X0263) 
GPISTROKEPATH 00806 (0X0326) 

GPIUNLOADFONTS 01704 (0X06A8) 
GPIUNREALIZECOLORTABLE 00902 (0X0386) 
GPIWCBITBLT 01803 (0X070B) 

MTASSOCIATEMETA 02309 (0X0905) 

MTBITBLTMETA 0231 1 (0X0907) 

MTCLIPREGIONMETA 02315 (0X090B) 
MTCREATELOGCOLORTABLEMETA 02303 (0X08FF) 
MTDELETESETIDMETA 02305 (0X0901) 

MTDEVESCAPE 02317 (0X090D) 

MTDISPLAYFLAGMETA 02302 (0X08FE) 
MTENABLEKERNINGMETA 02301 (0X08FD) 
MTENDREADREQUEST 02321 (0X0911) 
MTENDWRITEREQUEST 02323 (0X0913) 

MTE RASE META 02308 (0X0904) 

MTIDPSTOREMETA 02300 (0X08FC) 
MTLONGBYTESWAP 02324 (0X0914) 
MTPAINTREGIONMETA 0231 6 (0X090C) 
MTRESETMETA 02307 (0X0903) 

MTRESTOREPS 02318 (0X090E) 

MTSAVEPS 02319 (0X090F) 

MTSELECTCLIPMETA 02314 (0X090A) 
MTSETCODEPAGEMETA 02304 (0X0900) 
MTSETGRAPHICSFIELDMETA 02306 (0X0902) 
MTSETPELMETA 02313 (0X0909) 
MTSTARTREADREQUEST 02320 (0X0910) 
MTSTARTWRITEREQUEST 02322 (0X0912) 
MTVERIFYPAGEUNITS 02310 (0X0906) 
MTWCBITBLTMETA 02312 (0X0908) 


PMGPI Major Code: 0X00C5 Minor Code: 101 (0X0065) 


Description 

GpiCreatePS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICREATEPS 

Minor Code 

101 (0X0065) 

Trace Groups 


No groups assigned. 


Trace Types 

No types assigned. 

Traced Parameters 

%Options = %d, WidthHeight = %a, HDC = %d, Hab = %d 
WidthHeight->cx = %d, WidthHeight- >cy = %d 


PMGPI Major Code: 0X00C5 Minor Code: 102 (0X0066) 


Description 

GpiDestroyPS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDESTROYPS 

Minor Code 

102 (0X0066) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 103 (0X0067) 


Description 

GpiAssociate Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIASSOCIATE 

Minor Code 

103 (0X0067) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DcH = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 104 (0X0068) 

GpiRestorePS Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIRESTOREPS 
104 (0X0068) 

No groups assigned. 

No types assigned. 

%Psid = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 105 (0X0069) 

GpiSavePS Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPISAVEPS 
105 (0X0069) 

No groups assigned. 

No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 106 (0X006A) 

GpiErase Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIERASE 
106 (0X006A) 






Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 107 (0X006B) 


Description 

GpiQueryDevice Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDEVICE 

Minor Code 

107 (0X006B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 108 (0X006C) 


Description 

GpiResetPS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIRESETPS 

Minor Code 

108 (0X006C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Psid = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 109 (0X006D) 

GpiSetPS Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPS 
109 (0X006D) 

No groups assigned. 

No types assigned. 

%Options = %d, PresentationSize = %a, GpiH = %d 
PresentationSize->cx = %d, PresentationSize->cy = %d 


PMGPI Major Code: 0X00C5 Minor Code: 110 (0X006E) 

GpiQueryPS Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPS 
110 (0XO06E) 

No groups assigned. 

No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1 1 1 (0X006F) 

GpiErrorSegmentData Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIERRORSEGMENTDATA 






Minor Code 


1 1 1 (0X006F) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 112 (0X0070) 


Description 

GpiQueryDrawControl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDRAWCONTROL 

Minor Code 

112 (0X0070) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Control = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1 1 3 (0X0071 ) 


Description 

GpiSetDrawControl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETDRAWCONTROL 

Minor Code 

113 (0X0071) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Value = %d, Control = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 114 (0X0072) 


Description 

GpiQueryDrawingMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDRAWINGMODE 

Minor Code 

114(0X0072) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 115 (0X0073) 


Description 

GpiSetDrawingMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETDRAWINGMODE 

Minor Code 

115 (0X0073) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Mode = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 116 (0X0074) 


Description 


GpiQueryStopDraw Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMGPI.GPIQUERYSTOPDRAW 


Minor Code 

1 1 6 (0X0074) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 117 (0X0075) 


Description 

GpiSetStopDraw Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETSTOPDRAW 

Minor Code 

1 1 7 (0X0075) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Value = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 201 (0X00C9) 


Description 

GpiCorrelateChain Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICORRELATECHAIN 

Minor Code 

201 (0X00C9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Depth = %d, MaxHits = %d, PickWindowPos = %a 
Ctype = %d, GpiH = %d 

PickWindowPos->x = %d, PickWindowPos->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 202 (0X00CA) 


Description 

GpiQueryTag Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYTAG 

Minor Code 

202 (0X00CA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 203 (0X00CB) 


Description 

GpiSetTag Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETTAG 

Minor Code 

203 (0X00CB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%V = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 204 (0X00CC) 



Description 


GpiQueryPickApertureSize Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPICKAPERTURESIZE 

Minor Code 

204 (0X00CC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 205 (0X00CD) 


Description 

GpiSetPickApertureSize Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPICKAPERTURESIZE 

Minor Code 

205 (0X00CD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ApertureSize = %a, Options = %d, GpiH = %d 
ApertureSize.cx = %d, ApertureSize.cy = %d 


PMGPI Major Code: 0X00C5 Minor Code: 206 (0X00CE) 


Description 

GpiQueryPickAperturePosition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPICKAPERTUREPOSITION 

Minor Code 

206 (0X00CE) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 207 (0X00CF) 


Description 

GpiSetPickAperturePosition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPICKAPERTUREPOSITION 

Minor Code 

207 (0X00CF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%AperturePosition = %a, GpiH = %d 
AperturePosition->x = %d, AperturePosition->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 208 (0X00D0) 


Description 

GpiQueryBoundaryData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBOUNDARYDATA 

Minor Code 

208 (0X00D0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 209 (0X00D1) 



Description 


GpiResetBoundaryData Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIRESETBOUNDARYDATA 

Minor Code 

209 (0X00D1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 210 (0X00D2) 


Description 

GpiCorrelateFrom Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICORRELATEFROM 

Minor Code 

210 (0X00D2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MaxDepth = %d, MaxFIits = %d, PickPosition = %a 

Type = %d, LastSegment = %d, FirstSegment = %d, GpiH = %d 

Pick->x = %d, Pick->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 21 1 (0X00D3) 


Description 


GpiCorrelateSegment Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMGPI. GPICORRELATESEGMENT 



21 1 (0X00D3) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MaxDepth = %d, MaxHits = %d, PickPosition = %a 
Type = %d, Segment = %d, GpiH = %d 
Pick->x = %d, Pick->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 300 (0X01 2C) 


Description 

GpiOpenSegment Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIOPENSEGMENT 

Minor Code 

300 (0X01 2C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SegmentlD = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 301 (0X01 2D) 


Description 

GpiCloseSegment Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICLOSESEGMENT 

Minor Code 

301 (0X01 2D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 302 (0X01 2E) 


Description 

GpiDeleteSegment Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETESEGMENT 

Minor Code 

302 (0X01 2E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SegmentlD = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 303 (0X01 2F) 


Description 

GpiQuerylnitialSegmentAttrs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYINITIALSEGMENTATTRS 

Minor Code 

303 (0X01 2F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Attribute = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 304 (0X0130) 


Description 


GpiSetlnitialSegmentAttrs Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI. GPISETINITIALSEGMENTATTRS 


Minor Code 

304 (0X0130) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Value = %d, Attribute = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 305 (0X0131) 


Description 

GpiQuerySegmentAttrs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYSEGMENTATTRS 

Minor Code 

305 (0X0131) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Attribute = %d, SegmentID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 306 (0X0132) 


Description 

GpiSetSegmentAttrs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETSEGMENTATTRS 

Minor Code 

306 (0X0132) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Value = %d, Attribute = %d, SegmentID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 307 (0X0133) 

GpiQuerySegmentPriority Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYSEGMENTPRIORITY 
307 (0X0133) 

No groups assigned. 

No types assigned. 

%Order = %d, ReferenceSegmentID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 308 (0X0134) 

GpiSetSegmentPriority Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPISETSEGMENTPRIORITY 
308 (0X0134) 

No groups assigned. 

No types assigned. 

%Order = %d, ReferenceSegmentID = %d, SegmentID = %d, 

GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 309 (0X0135) 





Description 


GpiDeleteSegments Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETESEGMENTS 

Minor Code 

309 (0X0135) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LastSegment = %d, FirstSegment = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 310 (0X0136) 


Description 

GpiQuerySegmentNames Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYSEGMENTNAMES 

Minor Code 

310 (0X0136) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MaxNumber = %d, LastSegment = %d, 
FirstSegment = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 400 (0X0190) 


Description 

GpiGetData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIGETDATA 

Minor Code 

400 (0X0190) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%ReadLen = %d, Control = %d, Offset = %a, 
SegmentName = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 401 (0X0191) 


Description 

GpiPutData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPUTDATA 

Minor Code 

401 (0X0191) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DataPtr = %a, LenPtr = %d, Control = %d, GpiH = %d 
%DataPtr = %b%b %b%b %b%b %b%b %b%b 


PMGPI Major Code: 0X00C5 Minor Code: 402 (0X0192) 


Description 

GpiDrawChain Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDRAWCHAIN 

Minor Code 

402 (0X0192) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 403 (0X0193) 

GpiDrawFrom Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIDRAWFROM 
403 (0X0193) 

No groups assigned. 

No types assigned. 

%LastSegment = %d, FirstDegment = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 404 (0X0194) 

GpiDrawSegment Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIDRAWSEGMENT 
404 (0X0194) 

No groups assigned. 

No types assigned. 

%SegmentlD = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 405 (0X0195) 

GpiDrawDynamics Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIDRAWDYNAMICS 





Minor Code 



405 (0X0195) 


Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 406 (0X0196) 


Description 

GpiRemoveDynamics Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIREMOVEDYNAMICS 

Minor Code 

406 (0X0196) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LastSegmentlD = %d, FirstSegmentID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 500 (0X01 F4) 


Description 

GpiBeginElement Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIBEGINELEMENT 

Minor Code 

500 (0X01 F4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%desc = %a, type = %d, GpiH = %d 


desc-> = %s 



PMGPI Major Code: 0X00C5 Minor Code: 501 (0X01 F5) 


Description 

GpiEndElement Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIENDELEMENT 

Minor Code 

501 (0X01 F5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 502 (0X01 F6) 


Description 

GpiLabel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPILABEL 

Minor Code 

502 (0X01 F6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Label = %d, GpiFI = %d 


PMGPI Major Code: 0X00C5 Minor Code: 503 (0X01 F7) 


Description 


GpiElement Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMGPI.GPIELEMENT 


Minor Code 

503 (0X01 F7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Data = %a, Length = %d, Desc = %a, Type = %d, GpiH = %d 
Data = %s 
Desc = %s 


PMGPI Major Code: 0X00C5 Minor Code: 504 (0X01 F8) 


Description 

GpiQueryElement Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYELEMENT 

Minor Code 

504 (0X01 F8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MaxLength = %d, Offset = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 505 (0X01 F9) 


Description 

GpiDeleteElement Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETEELEMENT 

Minor Code 

505 (0X01 F9) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 506 (0X01 FA) 


Description 

GpiDeleteElementRange Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETEELEMENTRANGE 

Minor Code 

506 (0X01 FA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LastElement = %d, FirstElement = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 507 (0X01 FB) 


Description 

GpiDeleteElementsBetweenLabels Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETEELEMENTSBETWEENLABELS 

Minor Code 

507 (0X01 FB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LastLabel = %d, FirstLabel = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 508 (0X01 FC) 



Description 


GpiQueryEditMode Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYEDITMODE 

Minor Code 

508 (0X01 FC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 509 (0X01 FD) 


Description 

GpiSetEditMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETEDITMODE 

Minor Code 

509 (0X01 FD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%EditMode = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 51 0 (0X01 FE) 


Description 

GpiQueryElementPointer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYELEMENTPOINTER 

Minor Code 

510 (0X01 FE) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 51 1 (0X01 FF) 


Description 

GpiSetElementPointer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETELEMENTPOINTER 

Minor Code 

511 (0X01 FF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ElementNumber = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 512 (0X0200) 


Description 

GpiOffsetElementPointer Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIOFFSETELEMENTPOINTER 

Minor Code 

512 (0X0200) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Offset = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 513 (0X0201) 



Description 


GpiQueryElementType Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYELEMENTTYPE 

Minor Code 

513 (0X0201) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Data Length = %d 
GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 514 (0X0202) 


Description 

GpiSetElementPointerAtLabel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETELEMENTPOINTERATLABEL 

Minor Code 

514(0X0202) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Label = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 600 (0X0258) 


Description 

GpiQuerySegmentT ransformMatrix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYSEGMENTTRANSFORMMATRIX 

Minor Code 

600 (0X0258) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%Count = %d, SegmentID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 601 (0X0259) 


Description 

GpiSetSegmentTransformMatrix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETSEGMENTTRANSFORMMATRIX 

Minor Code 

601 (0X0259) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, Matrix = %a, Count = %d, 
SegmentID = %d, GpiFH = %d 
Matrix- >fxM1 1 = %d, Matrix->fxM12 = %d 
Matrix->IM13 = %d, Matrix->fxM21 = %d 
Matrix- >fxM22 = %d, Matrix->IM23 = %d 
Matrix->IM31 = %d, Matrix->IM32 = %d 
Matrix->IM33 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 602 (0X025A) 


Description 

GpiConvert Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICONVERT 

Minor Code 

602 (0X025A) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 

%Count = %d, TargetCoordSpace = %d, 
SrcCoordSpace = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 603 (0X025B) 

GpiQueryModelTransformMatrix Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMODELTRANSFORMMATRIX 
603 (0X025B) 

No groups assigned. 

No types assigned. 

%Count = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 604 (0X025C) 

GpiSetModelT ransformMatrix Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPISETMODELTRANSFORMMATRIX 
604 (0X025C) 

No groups assigned. 

No types assigned. 

%Options = %d, Matrix = %a, Count = %d, GpiFH = %d 
Matrix- >fxM1 1 = %d, Matrix->fxM12 = %d 
Matrix->IM13 = %d, Matrix->fxM21 = %d 
Matrix- >fxM22 = %d, Matrix->IM23 = %d 





Matrix->IM31 = %d, Matrix->IM32 = %d 


Matrix->IM33 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 605 (0X025D) 


Description 

GpiCallSegmentMatrix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICALLSEGMENTMATRIX 

Minor Code 

605 (0X025D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, Matrix = %a, Count = %d, 
SegmentID = %d, GpiH = %d 
Matrix- >fxM1 1 = %d, Matrix->fxM1 2 = %d 
Matrix->IM13 = %d, Matrix->fxM21 = %d 
Matrix- >fxM22 = %d, Matrix->IM23 = %d 
Matrix->IM31 = %d, Matrix->IM32 = %d 
Matrix->IM33 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 606 (0X025E) 


Description 

GpiQueryDefauItViewMatrix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDEFAULTVIEWMATRIX 

Minor Code 

606 (0X025E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 


Traced Parameters 



%Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 607 (0X025F) 

GpiSetDefauItViewMatrix Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPISETDEFAULTVIEWMATRIX 
607 (0X025F) 

No groups assigned. 

No types assigned. 

%Options = %d, Matrix = %a, Count = %d, GpiH = %d 
Matrix- >fxM1 1 = %d, Matrix->fxM12 = %d 
Matrix->IM13 = %d, Matrix->fxM21 = %d 
Matrix- >fxM22 = %d, Matrix->IM23 = %d 
Matrix->IM31 = %d, Matrix->IM32 = %d 
Matrix->IM33 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 608 (0X0260) 

GpiQueryPageViewport Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPAGEVIEWPORT 
608 (0X0260) 

No groups assigned. 

No types assigned. 

%GpiH = %d 





PMGPI Major Code: 0X00C5 Minor Code: 609 (0X0261) 


Description 

GpiSetPageViewport Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPAGEVIEWPORT 

Minor Code 

609 (0X0261) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Viewport = %a, GpiH = %d 

Viewport- >xLeft = %d, Viewport->yBottom = %d 

Viewport- >xRight = %d, Viewport->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 610 (0X0262) 


Description 

GpiQueryViewingTransformMatrix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYVIEWINGTRANSFORMMATRIX 

Minor Code 

610 (0X0262) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 61 1 (0X0263) 


Description 


GpiSetViewingTransformMatrix Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI.GPISETVIEWINGTRANSFORMMATRIX 


Minor Code 

61 1 (0X0263) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, Matrix = %a, Count = %d, GpiH = %d 
Matrix- >fxM1 1 = %d, Matrix->fxM1 2 = %d 
Matrix->IM13 = %d, Matrix->fxM21 = %d 
Matrix- >fxM22 = %d, Matrix->IM23 = %d 
Matrix->IM31 = %d, Matrix->IM32 = %d 
Matrix->IM33 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 700 (0X02BC) 


Description 

GpiSetGraphicsField Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETGRAPHICSFIELD 

Minor Code 

700 (0X02BC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Field = %a, GpiH = %d 
Field->xLeft = %d, Field->yBottom = %d 
Field->xRight = %d, Field->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 701 (0X02BD) 


Description 


GpiQueryGraphicsField Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI.GPIQUERYGRAPHICSFIELD 


Minor Code 

701 (0X02BD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 702 (0X02BE) 


Description 

GpiSetViewingLimits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETVIEWINGLIMITS 

Minor Code 

702 (0X02BE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Limits = %d, GpiH = %d 
Limits->xLeft = %d, Limits->yBottom = %d 
Limits->xRight = %d, Limits->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 703 (0X02BF) 


Description 

GpiQueryViewingLimits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYVIEWINGLIMITS 

Minor Code 

703 (0X02BF) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 800 (0X0320) 


Description 

GpiBeginPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIBEGINPATH 

Minor Code 

800 (0X0320) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%PathlD = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 801 (0X0321) 


Description 

GpiEndPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIENDPATH 

Minor Code 

801 (0X0321) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 802 (0X0322) 



Description 


GpiCloseFigure Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICLOSEFIGURE 

Minor Code 

802 (0X0322) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 803 (0X0323) 


Description 

GpiModifyPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIMODIFYPATPI 

Minor Code 

803 (0X0323) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Mode = %d, PathID = %d, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 804 (0X0324) 


Description 

GpiFillPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIFILLPATFI 

Minor Code 

804 (0X0324) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%Options = %d, PathID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 805 (0X0325) 


Description 

GpiSetClipPath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCLIPPATH 

Minor Code 

805 (0X0325) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, PathID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 806 (0X0326) 


Description 

GpiStrokePath Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISTROKEPATH 

Minor Code 

806 (0X0326) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, PathID = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 900 (0X0384) 



Description 


GpiCreateLogColorTable Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICREATELOGCOLORTABLE 

Minor Code 

900 (0X0384) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Table=%a, Count=%d, Start=%d, Format=%d, 
Options=%d, GpiH = %d 
Table->field1 = %d, Table->field2 = %d 
Table->field3 = %d, Table->field4 = %d 


PMGPI Major Code: 0X00C5 Minor Code: 901 (0X0385) 


Description 

GpiRealizeColorTable Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIREALIZECOLORTABLE 

Minor Code 

901 (0X0385) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 902 (0X0386) 


Description 


Tracepoint 


GpiUnrealizeColorTable Pre-Invocation 


Public symbol defined dynamic tracepoint: PMGPI. GPIUNREALIZECOLORTABLE 



Minor Code 


902 (0X0386) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 903 (0X0387) 


Description 

GpiQueryColorData Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCOLORDATA 

Minor Code 

903 (0X0387) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 904 (0X0388) 


Description 

GpiQueryLogColorTable Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLOGCOLORTABLE 

Minor Code 

904 (0X0388) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, Start = %d, Options = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 905 (0X0389) 


Description 

GpiQueryRealColors Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYREALCOLORS 

Minor Code 

905 (0X0389) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, Start = %d, Options = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 906 (0X038A) 


Description 

GpiQueryNearestColor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYNEARESTCOLOR 

Minor Code 

906 (0X038A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RequiredColor = %d, Options = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 907 (0X038B) 


Description 


GpiQueryColorlndex Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMGPI.GPIQUERYCOLORINDEX 


Minor Code 

907 (0X038B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%RGBColor = %d, Options = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 908 (0X038C) 


Description 

GpiQueryRGBColor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYRGBCOLOR 

Minor Code 

908 (0X038C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Colorlndex = %d, Options = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1000 (0X03E8) 


Description 

GpiSetColor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCOLOR 

Minor Code 

1000 (0X03E8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Color = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1001 (0X03E9) 


Description 

GpiQueryColor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCOLOR 

Minor Code 

1001 (OX03E9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1002 (0X03EA) 


Description 

GpiSetBackColor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBACKCOLOR 

Minor Code 

1002 (OX03EA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Color = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1003 (0X03EB) 


Description 


GpiQueryBackColor Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBACKCOLOR 


Minor Code 

1003 (OX03EB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1004 (0X03EC) 


Description 

GpiSetMix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETMIX 

Minor Code 

1004 (OX03EC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MixMode = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1005 (0X03ED) 


Description 

GpiQueryMix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMIX 

Minor Code 

1005 (OX03ED) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1006 (0X03EE) 


Description 

GpiSetBackMix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBACKMIX 

Minor Code 

1006 (OX03EE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MixMode = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1007 (0X03EF) 


Description 

GpiQueryBackMix Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBACKMIX 

Minor Code 

1007 (OX03EF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1008 (0X03F0) 


Description 


GpiSetAttrs Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI.GPISETATTRS 


Minor Code 

1008 (OX03FO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%DefMask = %d, AttrMask = %d, PrimType = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1009 (0X03F1) 


Description 

GpiQueryAttrs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYATTRS 

Minor Code 

1009 (OX03F1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%AttrMask = %d, PrimType = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1010 (0X03F2) 


Description 

GpiSetAttrMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETATTRMODE 

Minor Code 

1010 (OX03F2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%AttrMode = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 101 1 (0X03F3) 


Description 

GpiQueryAttrMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYATTRMODE 

Minor Code 

1011 (0X03F3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1100 (0X044C) 


Description 

GpiSetPatternSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPATTERNSET 

Minor Code 

1 1 00 (OX044C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%PatternSetlD = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1101 (0X044D) 


Description 



GpiQueryPatternSet Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPATTERNSET 

Minor Code 

1101 (OX044D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1102 (0X044E) 


Description 

GpiSetPatternRefPoint Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPATTERNREFPOINT 

Minor Code 

1102 (OX044E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%PatternRefPt = %a, GpiFH = %d 

Pattern Ref Pt->x = %d, PatternRefPt->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1103 (0X044F) 


Description 

GpiQueryPatternRefPoint Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPATTERNREFPOINT 

Minor Code 

1 1 03 (OX044F) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1104 (0X0450) 


Description 

GpiSetPattern Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPATTERN 

Minor Code 

1 1 04 (0X0450) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%PatternSymbol = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1 1 05 (0X0451 ) 


Description 

GpiQueryPattern Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPATTERN 

Minor Code 

1105 (0X0451) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1106 (0X0452) 



Description 


GpiBeginArea Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIBEGINAREA 

Minor Code 

1 1 06 (0X0452) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%AreaOption = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1107 (0X0453) 


Description 

GpiEndArea Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIENDAREA 

Minor Code 

1 1 07 (0X0453) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1200 (0X04B0) 


Description 

GpiSetLineType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETLINETYPE 

Minor Code 

1200 (0X04B0) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%LineType = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1201 (0X04B1) 


Description 

GpiQueryLineType Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLINETYPE 

Minor Code 

1201 (0X04B1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1202 (0X04B2) 


Description 

GpiSetLineWidth Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETLINEWIDTH 

Minor Code 

1202 (0X04B2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LineWidth = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1203 (0X04B3) 



Description 


GpiQueryLineWidth Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLINEWIDTH 

Minor Code 

1203 (OX04B3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1204 (0X04B4) 


Description 

GpiSetLineWidthGeom Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETLINEWIDTHGEOM 

Minor Code 

1204 (OX04B4) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LineWidthGeom = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1205 (0X04B5) 


Description 

GpiQueryLineWidthGeom Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLINEWIDTHGEOM 

Minor Code 

1205 (OX04B5) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1206 (0X04B6) 


Description 

GpiSetLineEnd Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETLINEEND 

Minor Code 

1206 (OX04B6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LineEnd = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1207 (0X04B7) 


Description 

GpiQueryLineEnd Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLINEEND 

Minor Code 

1207 (OX04B7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1208 (0X04B8) 



Description 


GpiSetLineJoin Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETLINEJOIN 

Minor Code 

1208 (OX04B8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%LineJoin = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1209 (0X04B9) 


Description 

GpiQueryLineJoin Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYLINEJOIN 

Minor Code 

1209 (OX04B9) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1210 (0X04BA) 


Description 

GpiSetCurrentPosition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCURRENTPOSITION 

Minor Code 

1210 (OX04BA) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 121 1 (0X04BB) 


Description 

GpiQueryCurrentPosition Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCURRENTPOSITION 

Minor Code 

1211 (OX04BB) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1212 (0X04BC) 


Description 

GpiBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIBOX 

Minor Code 

1212 (OX04BC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%vRound = %d, hRound = %d, Point = %a, 
Control = %d, GpiH = %d 


Point->x = %d, Point->y = %d 



PMGPI Major Code: 0X00C5 Minor Code: 1213 (0X04BD) 


Description 

GpiMove Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIMOVE 

Minor Code 

1213 (OX04BD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1214 (0X04BE) 


Description 

GpiLine Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPILINE 

Minor Code 

1214 (OX04BE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1215 (0X04BF) 



Description 

GpiPolyLine Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOLYLINE 

Minor Code 

1215 (0X04BF) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

%Point = %a, Count = %d, GpiH = %d 


Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1300 (0X0514) 


Description 

GpiSetArcParams Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETARCPARAMS 

Minor Code 

1300 (0X0514) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ArcParams = %a, GpiH = %d 
ArcParams-IP = %d, ArcParams->IQ = %d 
ArcParams-IR = %d, ArcParams->IS = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1301 (0X0515) 


Description 

GpiQueryArcParams Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYARCPARAMS 

Minor Code 


1301 (0X0515) 



Trace Groups 
Trace Types 
Traced Parameters 


No groups assigned. 
No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1302 (0X0516) 


Description 

GpiPointArc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOINTARC 

Minor Code 

1302 (0X0516) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1303 (0X0517) 


Description 

GpiFullArc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIFULLARC 

Minor Code 

1303 (0X0517) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Multiplier = %d, Control = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 1304 (0X0518) 


Description 

GpiPartialArc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPARTIALARC 

Minor Code 

1304 (0X0518) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%SweepAngle=%d, StartAngle=%d, Multiplier=%d, 
Centre=%a, GpiH = %d 
Centre->x = %d, Centre->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1305 (0X0519) 


Description 

GpiPolyFilletSharp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOLYFILLETSHARP 

Minor Code 

1305 (0X0519) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Sharpness = %a, Point = %a, Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1306 (0X051 A) 


Description 


GpiPolySpline Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI.GPIPOLYSPLINE 


Minor Code 

1306 (0X051 A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1307 (0X051 B) 


Description 

GpiPolyFillet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOLYFILLET 

Minor Code 

1307 (0X051 B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1400 (0X0578) 


Description 

GpiQueryTextBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYTEXTBOX 

Minor Code 

1400 (0X0578) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Count2 = %d, String = %a, Countl = %d, GpiH = %d 
String = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1401 (0X0579) 


Description 

GpiQueryDefCharBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDEFCHARBOX 

Minor Code 

1401 (0X0579) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1402 (0X057A) 


Description 

GpiSetCharSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARSET 

Minor Code 

1402 (OX057A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Lcid = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1403 (0X057B) 



Description 


GpiQueryCharSet Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARSET 

Minor Code 

1403 (OX057B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1404 (0X057C) 


Description 

GpiSetCharBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARBOX 

Minor Code 

1404 (OX057C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Size = %a, GpiH = %d 
Size->cx = %d, Size->cy 


PMGPI Major Code: 0X00C5 Minor Code: 1405 (0X057D) 


Description 

GpiQueryCharBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARBOX 

Minor Code 

1405 (OX057D) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1406 (0X057E) 


Description 

GpiSetCharAngle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARANGLE 

Minor Code 

1406 (0X057E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Gradient = %a, GpiH = %d 
Gradient->x = %d, Gradient->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1407 (0X057F) 


Description 

GpiQueryCharAngle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARANGLE 

Minor Code 

1407 (OX057F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1408 (0X0580) 



Description 


GpiSetCharShear Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARSHEAR 

Minor Code 

1408 (0X0580) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1409 (0X0581) 


Description 

GpiQueryCharShear Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARSHEAR 

Minor Code 

1409 (0X0581) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1410 (0X0582) 


Description 

GpiSetCharDirection Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARDIRECTION 

Minor Code 


1410 (0X0582) 



Trace Groups 


No groups assigned. 


Trace Types 
Traced Parameters 


No types assigned. 


%Direction = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 141 1 (0X0583) 


Description 

GpiQueryCharDirection Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARDIRECTION 

Minor Code 

1411 (0X0583) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1412 (0X0584) 


Description 

GpiSetCharMode Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCHARMODE 

Minor Code 

1412 (0X0584) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Mode = %d, GpiH = %d 



PMGPI Major Code: 0X00C5 Minor Code: 1413 (0X0585) 

GpiQueryCharMode Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARMODE 
1413 (0X0585) 

No groups assigned. 

No types assigned. 

%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1414 (0X0586) 

GpiCharStringPos Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPICHARSTRINGPOS 
1414 (0X0586) 

No groups assigned. 

No types assigned. 

%Vector=%a, String=%a, Count=%d, Options=%d, 

Rect=%a, GpiH = %d 
String = %s 

Rect->xLeft = %d, Rect->yBottom = %d 
Rect->xRight = %d, Rect->yTop = %d 




PMGPI Major Code: 0X00C5 Minor Code: 1415 (0X0587) 



Description 


GpiCharStringPosAt Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICHARSTRINGPOSAT 

Minor Code 

1415 (0X0587) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Vector=%a, String=%a, Count=%d, Options=%d, 
Rect=%a, Point=%a, GpiH = %d 
String = %s 

Rect->xLeft = %d, Rect->yBottom = %d 
Rect->xRight = %d, Rect->yTop = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1416 (0X0588) 


Description 

GpiCharString Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICHARSTRING 

Minor Code 

1416 (0X0588) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%String = %a, Count = %d, GpiH = %d 
String = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1417 (0X0589) 


Description 


GpiCharStringAt Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI.GPICHARSTRINGAT 


Minor Code 

1417 (0X0589) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%String = %a, Count = %d, Point = %a, GpiH = %d 
String = %s 

Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1418 (0X058A) 


Description 

GpiQueryCharStringPos Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARSTRINGPOS 

Minor Code 

1418 (OX058A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%String = %a, Count = %d, Options = %d, GpiH = %d 
String = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1419 (0X058B) 


Description 

GpiQueryCharStringPosAt Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCHARSTRINGPOSAT 

Minor Code 

1419 (OX058B) 


Trace Groups 



No groups assigned. 


Trace Types 


No types assigned. 


Traced Parameters 


%String = %a, Count = %d, Options = %d, 
Start = %a, GpiH = %d 
String = %s 

Start->x = %d, Start- >y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1500 (0X05DC) 


Description 

GpiSetMarkerSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETMARKERSET 

Minor Code 

1500 (0X05DC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MarkerSetlD = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1501 (0X05DD) 


Description 

GpiQueryMarkerSet Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMARKERSET 

Minor Code 

1501 (OX05DD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1502 (0X05DE) 


Description 

GpiSetMarker Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETMARKER 

Minor Code 

1502 (OX05DE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MarkerSymbol = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1503 (0X05DF) 


Description 

GpiQueryMarker Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMARKER 

Minor Code 

1503 (OX05DF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1504 (0X05E0) 


Description 


GpiSetMarkerBox Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI. GPISETMARKERBOX 


Minor Code 

1504 (OX05EO) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%MarkerBoxSize = %a, GpiH = %d 
MarkerBoxSize->cx = %d, MarkerBoxSize->cy = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1505 (0X05E1) 


Description 

GpiQueryMarkerBox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMARKERBOX 

Minor Code 

1505 (OX05E1 ) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1506 (0X05E2) 


Description 

GpiMarker Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIMARKER 

Minor Code 

1506 (OX05E2) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 

%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1507 (0X05E3) 

GpiPolyMarker Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOLYMARKER 
1507 (0X05E3) 

No groups assigned. 

No types assigned. 

%Point = %a, Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1600 (0X0640) 

Gpilmage Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIIMAGE 
1600 (0X0640) 

No groups assigned. 

No types assigned. 

%Data = %a, Length = %d, ImageSize = %a, 

Format = %d, GpiH = %d 
%Data = %b%b %b%b %b%b %b%b %b%b 
lmageSize->cx = %d, lmageSize->cy = %d 





PMGPI Major Code: 0X00C5 Minor Code: 1601 (0X0641) 


Description 

GpiPop Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPOP 

Minor Code 

1601 (0X0641) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1602 (0X0642) 


Description 

GpiPtVisible Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPTVISIBLE 

Minor Code 

1602 (0X0642) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1603 (0X0643) 


Description 


GpiRectVisible Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMGPI.GPIRECTVISIBLE 


Minor Code 

1603 (0X0643) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rect = %a, GpiH = %d 
Rect->xLeft = %d, Rect->yBottom = %d 
Rect->xRight= %d, Rect->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1604 (0X0644) 


Description 

GpiComment Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICOMMENT 

Minor Code 

1604 (0X0644) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Comment = %a, Count = %d, GpiH = %d 
Comment = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1700 (0X06A4) 


Description 

GpiDeleteSetld Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETESETID 

Minor Code 

1700 (0X06A4) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%Lcid = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1701 (0X06A5) 


Description 

GpiQueryNumberSetlds Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYNUMBERSETIDS 

Minor Code 

1701 (0X06A5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1702 (0X06A6) 


Description 

GpiQuerySetlds Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYSETIDS 

Minor Code 

1702 (0X06A6) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1703 (0X06A7) 



Description 


GpiLoadFonts Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPILOADFONTS 

Minor Code 

1703 (0X06A7) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Filename = %a, GpiFH = %d 
Filename = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1704 (0X06A8) 


Description 

GpiUnloadFonts Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIUNLOADFONTS 

Minor Code 

1704 (OX06A8) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Filename = %a, GpiFH = %d 
Filename = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1705 (0X06A9) 


Description 


GpiCreateLogFont Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMGPI. GPICREATELOGFONT 



1705 (OX06A9) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Lcid = %d, FontName = %a, GpiH = %d 
FontName = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1706 (0X06AA) 


Description 

GpiQueryFonts Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYFONTS 

Minor Code 

1706 (OX06AA) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Length = %d, FontsReq = %a, FaceName = %a, 
Options = %d, GpiFH = %d 
FontsReg = %d 
FaceName = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1707 (0X06AB) 


Description 

GpiQueryFontMetrics Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYFONTMETRICS 

Minor Code 

1707 (OX06AB) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

%Length = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1708 (0X06AC) 


Description 

GpiQueryKerningPairs Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYKERNINGPAIRS 

Minor Code 

1708 (0X06AC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%KerningPairs = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1709 (0X06AD) 


Description 

GpiQueryWidthTable Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYWIDTHTABLE 

Minor Code 

1709 (0X06AD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %d, FirstChar = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1710 (0X06AE) 



Description 


GpiSetCp Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCP 

Minor Code 

1710 (0X06AE) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%CodePage = %w, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 171 1 (0X06AF) 


Description 

GpiQueryCp Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCP 

Minor Code 

1711 (0X06AF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1712 (0X06B0) 


Description 

GpiQueryFontFileDescriptions Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYFONTFILEDESCRIPTIONS 

Minor Code 

1712 (0X06B0) 

Trace Groups 


No groups assigned. 



Trace Types 

No types assigned. 

Traced Parameters 

%Filename = %a, GpiH = %d 
Filename = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1800 (0X0708) 


Description 

GpiDeleteBitmap Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETEBITMAP 

Minor Code 

1800 (0X0708) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FIBitmap = %a, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1801 (0X0709) 


Description 

GpiSetBitmap Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBITMAP 

Minor Code 

1801 (0X0709) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FIBitmap = %a, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1802 (0X070A) 



Description 


GpiBitBIt Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIBITBLT 

Minor Code 

1802 (OX070A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, Rop = %d, Pointl = %a, 
Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1803 (0X070B) 


Description 

GpiWCBitBIt Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIWCBITBLT 

Minor Code 

1803 (OX070B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Options = %d, Rop = %d, Pointl = %a, 
Count = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1804 (0X070C) 


Description 


GpiCreateBitmap Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMGPI. GPICREATEBITMAP 



1804 (OX070C) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Data = %a, Options = %d, GpiH = %d 
Data = %s 


PMGPI Major Code: 0X00C5 Minor Code: 1805 (0X070D) 


Description 

GpiSetBitmapDimension Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBITMAPDIMENSION 

Minor Code 

1805 (OX070D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Hbitmap = %d, SizeL = %a 
SizeL->cx = %d, SizeL->cy = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1806 (0X070E) 


Description 

GpiQueryBitmapDimension Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBITMAPDIMENSION 

Minor Code 

1806 (OX070E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Hbitmap = %a 


PMGPI Major Code: 0X00C5 Minor Code: 1807 (0X070F) 


Description 

GpiQueryDeviceBitmapFormats Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYDEVICEBITMAPFORMATS 

Minor Code 

1807 (OX070F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count = %a, GpiFH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1808 (0X0710) 


Description 

GpiQueryBitmapParameters Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBITMAPPARAMETERS 

Minor Code 

1808 (0X0710) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%FIBitmap = %a 


PMGPI Major Code: 0X00C5 Minor Code: 1 809 (0X071 1 ) 


Description 


GpiQueryBitmapBits Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBITMAPBITS 


Minor Code 

1809 (0X0711) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, Long = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1810 (0X0712) 


Description 

GpiSetBitmapBits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBITMAPBITS 

Minor Code 

1810 (0X0712) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Data = %a, Scans = %d, ScanStart = %d, GpiH = %d 
Data = %s 


PMGPI Major Code: 0X00C5 Minor Code: 181 1 (0X0713) 


Description 

GpiSetPel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETPEL 

Minor Code 

1811 (0X0713) 

Trace Groups 

No groups assigned. 

Trace Types 


No types assigned. 



Traced Parameters 


%Point = %a, GpiH = %d 
%Point->x = %d, Point- >y 


PMGPI Major Code: 0X00C5 Minor Code: 1812 (0X0714) 


Description 

GpiQueryPel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYPEL 

Minor Code 

1812 (0X0714) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HPS = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1813 (0X0715) 


Description 

GpiSetBitmapid Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETBITMAPID 

Minor Code 

1813 (0X0715) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Lcid = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1814 (0X0716) 



Description 


GpiQueryBitmapHandle Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYBITMAPHANDLE 

Minor Code 

1814 (0X0716) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Lcid = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1900 (0X076C) 


Description 

GpiCreateRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICREATEREGION 

Minor Code 

1900 (OX076C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rct = %a, Count = %d, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1901 (0X076D) 


Description 


GpiSetRegion Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMGPI. GPISETREGION 



1901 (OX076D) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rct = %a, Count = %d, Hrgn = %a, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1902 (0X076E) 


Description 

GpiDestroyRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDESTROYREGION 

Minor Code 

1902 (OX076E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Hrgn = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1903 (0X076F) 


Description 

GpiCombineRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICOMBINEREGION 

Minor Code 

1903 (OX076F) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%Mode = %d, Src2 = %a, Srcl = %a, Dest = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1904 (0X0770) 

GpiEqualRegion Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIEQUALREGION 
1904 (0X0770) 

No groups assigned. 

No types assigned. 

%Src2 = %a, Srcl = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1905 (0X0771) 

GpiOffsetRegion Pre-Invocation 

Public symbol defined dynamic tracepoint: PMGPI. GPIOFFSETREGION 
1905 (0X0771) 

No groups assigned. 

No types assigned. 

%Poinlt = %a, Hrgn = %a, GpiH = %d 
Poinlt->x = %d, Pointl->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1906 (0X0772) 





Description 

GpiPtlnRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPTINREGION 

Minor Code 

1906 (0X0772) 

Trace Groups 

No groups assigned. 

Trace Tvpes 

No types assigned. 

Traced Parameters 

%Pointl = %a, Hrgn = %a, GpiH = %d 


Pointl->x = %d, Pointl->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1907 (0X0773) 


Description 

GpiRectlnRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIRECTINREGION 

Minor Code 

1907 (0X0773) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rct = %a, Hrgn = %a, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1908 (0X0774) 


Description 

GpiQueryRegionESox Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYREGIONBOX 

Minor Code 


1908 (0X0774) 



Trace Groups 


No groups assigned. 


Trace Types 
Traced Parameters 


No types assigned. 


%Hrgn = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1909 (0X0775) 


Description 

GpiQueryRegionRects Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYREGIONRECTS 

Minor Code 

1909 (0X0775) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rct = %a, Hrgn = %a, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 1910 (0X0776) 


Description 

GpiPaintRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPAINTREGION 

Minor Code 

1910 (0X0776) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



%HRgn = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2000 (0X07D0) 


Description 

GpiSetClipRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETCLIPREGION 

Minor Code 

2000 (OX07D0) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Hrgn = %a, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2001 (0X07D1) 


Description 

GpiQueryClipRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCLIPREGION 

Minor Code 

2001 (OX07D1) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Hps = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2002 (0X07D2) 


Description 


GpiQueryClipBox Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYCLIPBOX 


Minor Code 

2002 (OX07D2) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2003 (0X07D3) 


Description 

GpilntersectClipRectangle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIINTERSECTCLIPRECTANGLE 

Minor Code 

2003 (OX07D3) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rct = %a, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2004 (0X07D4) 


Description 

GpiExcludeClipRectangle Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIEXCLUDECLIPRECTANGLE 

Minor Code 

2004 (OX07D4) 

Trace Groups 

No groups assigned. 


Trace Types 



No types assigned. 


Traced Parameters 

%Rct = %a, GpiH = %d 
Rct->xLeft = %d, Rct->yBottom = %d 
Rct->xRight = %d, Rct->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2005 (0X07D5) 


Description 

GpiOffsetClipRegion Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIOFFSETCLIPREGION 

Minor Code 

2005 (OX07D5) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Point = %a, GpiFH = %d 
Point->x = %d, Point->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2100 (0X0834) 


Description 

GpiLoadMetaFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPILOADMETAFILE 

Minor Code 

2100 (0X0834) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Filename = %a, GpiFH = %d 


Filename = %s 



PMGPI Major Code: 0X00C5 Minor Code: 2101 (0X0835) 


Description 

GpiPlayMetaFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIPLAYMETAFILE 

Minor Code 

2101 (0X0835) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Count2 = %d, GpiH = %d 
OptArray = %a, Countl = %d 
OptArray = %s 


PMGPI Major Code: 0X00C5 Minor Code: 2102 (0X0836) 


Description 

GpiSaveMetaFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISAVEMETAFILE 

Minor Code 

2102 (0X0836) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Filename = %a, GpiFH = %d 
Filename = %s 


PMGPI Major Code: 0X00C5 Minor Code: 2103 (0X0837) 



Description 


GpiDeleteMetaFile Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIDELETEMETAFILE 

Minor Code 

2103 (0X0837) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2104 (0X0838) 


Description 

GpiCopyMetaFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPICOPYMETAFILE 

Minor Code 

2104 (0X0838) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2105 (0X0839) 


Description 

GpiQueryMetaFileLength Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMETAFILELENGTH 

Minor Code 

2105 (0X0839) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%HMF = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2106 (0X083A) 


Description 

GpiQueryMetaFileBits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPIQUERYMETAFILEBITS 

Minor Code 

2106 (0X083A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Length = %d, Offset = %d, GpiH = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2107 (0X083B) 


Description 

GpiSetMetaFileBits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. GPISETMETAFILEBITS 

Minor Code 

2107 (0X083B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Buffer = %a, Length = %d, Offset = %d, GpiH = %d 
Buffer = %s 


PMGPI Major Code: 0X00C5 Minor Code: 2300 (0X08FC) 



Description 


MTIDPStoreMeta Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTIDPSTOREMETA 

Minor Code 

2300 (0X08FC) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, Word = %w, Pbyte = %a, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2301 (0X08FD) 


Description 

MTEnableKerningMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTENABLEKERNINGMETA 

Minor Code 

2301 (0X08FD) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, PIDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2302 (0X08FE) 


Description 

MTDisplayFlagMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTDISPLAYFLAGMETA 

Minor Code 

2302 (0X08FE) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%Bool = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2303 (0X08FF) 


Description 

MTCreateLogColorTableMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTCREATELOGCOLORTABLEMETA 

Minor Code 

2303 (0X08FF) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ULong = %d,ULong = %d,ULong = %d,ULong = %d,PIDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2304 (0X0900) 


Description 

MTSetCodePageMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSETCODEPAGEMETA 

Minor Code 

2304 (0X0900) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ULong = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2305 (0X0901) 



Description 


MTDeleteSetIDMeta Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTDELETESETIDMETA 

Minor Code 

2305 (0X0901) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ULong = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2306 (0X0902) 


Description 

MTSetGraphicsFieldMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSETGRAPHICSFIELDMETA 

Minor Code 

2306 (0X0902) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Rect = %a, HDC = %d 
Rect->xLeft = %d, Rect->yBottom = %d 
Rect->xRight = %d, Rect->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2307 (0X0903) 


Description 


MTResetMeta Pre-Invocation 


Tracepoint 


Minor Code 


Public symbol defined dynamic tracepoint: PMGPI. MTRESETMETA 



2307 (0X0903) 


Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ULong = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2308 (0X0904) 


Description 

MTEraseMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTERASEMETA 

Minor Code 

2308 (0X0904) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2309 (0X0905) 


Description 

MTAssociateMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTASSOCIATEMETA 

Minor Code 

2309 (0X0905) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HDC = %d 



PMGPI Major Code: 0X00C5 Minor Code: 2310 (0X0906) 


Description 

MTVerifyPageUnits Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTVERIFYPAGEUNITS 

Minor Code 

2310 (0X0906) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%ULong = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 231 1 (0X0907) 


Description 

MTBitBItMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTBITBLTMETA 

Minor Code 

2311 (0X0907) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, Long = %d, Pointl = %a, HDC1= %d, FIDC2= %d 
Pointl->x = %d, Pointl->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2312 (0X0908) 


Description 


MTWCBitBItMeta Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMGPI.MTWCBITBLTMETA 


Minor Code 

2312 (0X0908) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HBITMAP = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2313 (0X0909) 


Description 

MTSetPelMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSETPELMETA 

Minor Code 

2313 (0X0909) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Pointl = %a, HDC = %d 
Pointl->x = %d, Pointl->y = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2314 (0X090A) 


Description 

MTSelectClipMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSELECTCLIPMETA 

Minor Code 

2314 (OX090A) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 



PMGPI Major Code: 0X00C5 Minor Code: 2315 (0X090B) 


Description 

MTClipRegionMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTCLIPREGIONMETA 

Minor Code 

2315 (0X090B) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%UShort = %w, Rect = %a, HDC = %d 
Rect->xLeft = %d, Rect->yBottom = %d 
Rect->xRight = %d, Rect->yTop = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2316 (0X090C) 


Description 

MTPaintRegionMeta Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTPAINTREGIONMETA 

Minor Code 

2316 (0X090C) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Hrgn = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2317 (0X090D) 



Description 


MTDevEscape Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTDEVESCAPE 

Minor Code 

2317 (0X090D) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, Long = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2318 (0X090E) 


Description 

MTRestorePS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTRESTOREPS 

Minor Code 

2318 (0X090E) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%Long = %d, HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2319 (0X090F) 


Description 

MTSavePS Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSAVEPS 

Minor Code 

2319 (OX090F) 

Trace Groups 


No groups assigned. 



Trace Types 
Traced Parameters 


No types assigned. 


%HDC = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2320 (0X0910) 


Description 

MTStartReadRequest Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSTARTREADREQUEST 

Minor Code 

2320 (0X0910) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2321 (0X091 1 ) 


Description 

MTEndReadRequest Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTENDREADREQUEST 

Minor Code 

2321 (0X0911) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2322 (0X0912) 



Description 


MTStartWriteRequest Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTSTARTWRITEREQUEST 

Minor Code 

2322 (0X0912) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2323 (0X0913) 


Description 

MTEndWriteRequest Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTENDWRITEREQUEST 

Minor Code 

2323 (0X0913) 

Trace Groups 

No groups assigned. 

Trace Types 

No types assigned. 

Traced Parameters 


%HMF = %d 


PMGPI Major Code: 0X00C5 Minor Code: 2324 (0X0914) 


Description 

MTLongByteSwap Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMGPI. MTLONGBYTESWAP 

Minor Code 

2324 (0X0914) 

Trace Groups 


No groups assigned. 



Trace Types 


No types assigned. 


Traced Parameters 


%ULong = %d 


PMSPL.DLL Trace Events 


The tracepoints for the PMSPL.DLL major code are identified in the following table. These tracepoints are dynamic tracepoints. 

Delay: 

Some of the trace information tables in this document contain large amounts of data and may take several seconds to display. 

Trace events for PMSPL Major Code: 0X00C6, sorted by minor code. 

Trace events for PMSPL Major Code: 0X00C6 .sorted by tracepoint. 


Trace Events for PMSPL Major Code: 0X00C6, Sorted by 
Minor Code 

00002 (0X0002) SpIControlDevice Pre-Invocation 

00003 (0X0003) SpIQueryDevice Pre-Invocation 

00004 (0X0004) SplEnumDevice Pre-Invocation 

00005 (0X0005) SpICreateDevice Pre-Invocation 

00006 (0X0006) SpISetDevice Pre-Invocation 

00007 (0X0007) SpIDeleteDevice Pre-Invocation 

00008 (0X0008) SpIReleaseJob Pre-Invocation 

00009 (0X0009) SplHoIdJob Pre-Invocation 

00010 (0X000A) SpIDeleteJob Pre-Invocation 

0001 1 (0X000B) DosPrintJobSchedule Pre-Invocation 

00012 (0X000C) DosPrintJobAdd Pre-Invocation 

00013 (0X000D) DosPrintJobAdd2 Pre-Invocation 

00014 (0X000E) SpIQueryJob Pre-Invocation 

00015 (0X000F) SpISetJob Pre-Invocation 

00016 (0X0010) SplEnumJob Pre-Invocation 

00017 (0X0011) SpICreateQueue Pre-Invocation 

00018 (0X0012) SplHoldQueue Pre-Invocation 

00019 (0X0013) SpIReleaseQueue Pre-Invocation 

00020 (0X0014) SpIDeleteQueue Pre-Invocation 

00021 (0X0015) SpIPurgeQueue Pre-Invocation 

00022 (0X0016) SpIQueryQueue Pre-Invocation 

00023 (0X0017) SpISetQueue Pre-Invocation 

00024 (0X0018) SplEnumQueue Pre-Invocation 

00025 (0X0019) SplEnumDriver Pre-Invocation 

00026 (0X001 A) SplEnumQueueProcessor Pre-Invocation 

00027 (0X001 B) SplEnumPort Pre-Invocation 

00028 (0X001 C) DosPrintJobGetld Pre-Invocation 

00029 (0X001 D) Spl32PrmSpool Pre-Invocation 

00030 (0X001 E) SpIQueryDriver Pre-Invocation 

00031 (0X001 F) SpISetDriver Pre-Invocation 

00032 (0X0020) SpICopyJob Pre-Invocation 

00033 (0X0021) SpIQueryJobFile Pre-Invocation 

00034 (0X0022) SplEnumPrinter SplEnumQueue Pre-Invocation 
00049 (0X0031) Spl32QmOpen Pre-Invocation 


00050 (0X0032) Spl32QmStartDoc Pre-Invocation 

00051 (0X0033) Spl32QmWrite Pre-Invocation 

00052 (0X0034) Spl32QmWriteFile Pre-Invocation 

00053 (0X0035) Spl32QmEndDoc Pre-Invocation 

00054 (0X0036) Spl32QmAbortDoc Pre-Invocation 

00055 (0X0037) Spl32QmClose Pre-Invocation 

00056 (0X0038) Spl32QmAbort Pre-Invocation 

00057 (0X0039) Spl32QmQueryPinfo Pre-Invocation 

00058 (0X003A) Spl32QmSetStatus Pre-Invocation 

00059 (0X003B) Spl32QmSetup Pre-Invocation 

00081 (0X0051) Spl32MessageBox Pre-Invocation 

00082 (0X0052) Prt320pen Pre-Invocation 

00083 (0X0053) Prt32Write Pre-Invocation 

00084 (0X0054) Prt32DevlOCtl Pre-Invocation 

00085 (0X0055) Prt32Close Pre-Invocation 

00086 (0X0056) Prt32Abort Pre-Invocation 

00087 (0X0057) PrtNewPage Pre-Invocation 

00088 (0X0058) PrtResetAbort Pre-Invocation 

00089 (0X0059) PrtAbortDoc Pre-Invocation 
00113 (0X0071) Spl32StdOpen Pre-Invocation 

00113 (0X0071) Spl32StdOpen Pre-Invocation 

00114 (0X0072) Spl32StdClose Pre-Invocation 

00114 (0X0072) Spl32StdClose Pre-Invocation 

00115 (0X0073) Spl32StdStart Pre-Invocation 

00116 (0X0074) Spl32StdStop Pre-Invocation 

00117 (0X0075) Spl32StdQueryLength Pre-Invocation 

00118 (0X0076) Spl32StdGetBits Pre-Invocation 

00119 (0X0077) Spl32StdDelete Pre-Invocation 

00256 (0X0100) SpIFSOpen Pre-Invocation 

00257 (0X0101) SpIFSFirstWrite Pre-Invocation 

00258 (0X0102) SpIFSWriteFail Pre-Invocation 

00259 (0X0103) SpIFSCIose Pre-Invocation 

00260 (0X0104) SpIFSSetTitle Pre-Invocation 

00261 (0X0105) SpIFSActCP Pre-Invocation 

00262 (0X0106) SpIFSVerifyCP Pre-Invocation 

00263 (0X0107) SpIFSReturnCPAct Pre-Invocation 

00264 (0X0108) AttachPort Pre-Invocation 

00265 (0X0109) DetachPort Pre-Invocation 

00304 (0X0130) PrintDestControl Pre-Invocation 

00305 (0X0131) PrintDestGetlnfo Pre-Invocation 

00306 (0X0132) PrintDestEnum Pre-Invocation 

00307 (0X0133) PrintDestAdd Pre-Invocation 

00308 (0X0134) PrintDestSetlnfo Pre-Invocation 

00309 (0X0135) PrintDestDel Pre-Invocation 

00320 (0X0140) PrintJobContinue Pre-Invocation 

00321 (0X0141) PrintJobPause Pre-Invocation 

00322 (0X0142) PrintJobDel Pre-Invocation 

00323 (0X0143) PrintJobSchedule Pre-Invocation 

00324 (0X0144) PrintJobAdd Pre-Invocation 

00325 (0X0145) PrintJobGetlnfo Pre-Invocation 

00326 (0X0146) PrintJobSetlnfo Pre-Invocation 

00327 (0X0147) PrintJobEnum Pre-Invocation 

00336 (0X0150) PrintQPause Pre-Invocation 

00337 (0X0151) PrintQPurge Pre-Invocation 

00338 (0X0152) PrintQContinue Pre-Invocation 

00339 (0X0153) PrintQAdd Pre-Invocation 

00340 (0X0154) PrintQDel Pre-Invocation 

00341 (0X0155) PrintQGetlnfo Pre-Invocation 

00342 (0X0156) PrintQSetlnfo Pre-Invocation 

00343 (0X0157) PrintQEnum Pre-Invocation 

00344 (0X0158) PrintDriverEnum Pre-Invocation 

00345 (0X0159) PrintQProcessorEnum Pre-Invocation 

00346 (0X01 5A) PrintPortEnum Pre-Invocation 
00368 (0X0170) SplWarning Pre-Invocation 

00368 (0X0170) SpIRWarning Pre-Invocation 

00369 (0X0171) SplError Pre-Invocation 

00369 (0X0171) SpIRError Pre-Invocation 

00370 (0X0172) SpIPanic Pre-Invocation 

00370 (0X0172) SpIRPanic Pre-Invocation 

00371 (0X0173) SplErrNotRunning Pre-Invocation 

00372 (0X0174) SplErrNoMemory Pre-Invocation 

00373 (0X0175) SpILogWarning Pre-Invocation 

00374 (0X0176) SpILogError Pre-Invocation 


00384 (0X0180) PostRefreshMsg Pre-Invocation 

32770 (0X8002) SpIControlDevice Post-Invocation 

32771 (0X8003) SpIQueryDevice Post-Invocation 

32772 (0X8004) SplEnumDevice Post-Invocation 

32773 (0X8005) SpICreateDevice Post-Invocation 

32774 (0X8006) SpISetDevice Post-Invocation 

32775 (0X8007) SpIDeleteDevice Post-Invocation 

32776 (0X8008) SpIReleaseJob Post-Invocation 

32777 (0X8009) SplHoIdJob Post-Invocation 

32778 (0X800A) SpIDeleteJob Post-Invocation 

32779 (0X800B) DosPrintJobSchedule Post-Invocation 

32780 (0X800C) DosPrintJobAdd Post-Invocation 

32781 (0X800D) DosPrintJobAdd2 Post-Invocation 

32782 (0X800E) SpIQueryJob Post-Invocation 

32783 (0X800F) SpISetJob Post-Invocation 

32784 (0X8010) SplEnumJob Post-Invocation 

32785 (0X8011) SpICreateQueue Post-Invocation 

32786 (0X8012) SplHoldQueue Post-Invocation 

32787 (0X8013) SpIReleaseQueue Post-Invocation 

32788 (0X8014) SpIDeleteQueue Post-Invocation 

32789 (0X8015) SpIPurgeQueue Post-Invocation 

32790 (0X8016) SpIQueryQueue Post-Invocation 

32791 (0X8017) SpISetQueue Post-Invocation 

32792 (0X8018) SplEnumQueue Post-Invocation 

32793 (0X8019) SplEnumDriver Post-Invocation 

32794 (0X801A) SplEnumQueueProcessor Post-Invocation 

32795 (0X801 B) SplEnumPort Post-Invocation 

32796 (0X801 C) DosPrintJobGetld Post-Invocation 

32797 (0X801 D) Spl32PrmSpool Post-Invocation 

32798 (0X801 E) SpIQueryDriver Post-Invocation 

32799 (0X801 F) SpISetDriver Post-Invocation 

32800 (0X8020) SpICopyJob Post-Invocation 

32801 (0X8021) SpIQueryJobFile Post-Invocation 

32802 (0X8022) SplEnumPrinter Post-Invocation 

32817 (0X8031) Spl32QmOpen Post- Invocation 

32818 (0X8032) Spl32QmStartDoc Post-Invocation 

32819 (0X8033) Spl32QmWrite Post-Invocation 

32820 (0X8034) Spl32QmWriteFile Post-Invocation 

32821 (0X8035) Spl32QmEndDoc Post-Invocation 

32822 (0X8036) Spl32QmAbortDoc Post-Invocation 

32823 (0X8037) Spl32QmClose Post-Invocation 

32824 (0X8038) Spl32QmAbort Post-Invocation 

32825 (0X8039) Spl32QmQueryPinfo Post-Invocation 

32826 (0X803A) Spl32QmSetStatus Post-Invocation 

32827 (0X803B) Spl32QmSetup Post-Invocation 

32849 (0X8051) Spl32MessageBox Post-Invocation 

32850 (0X8052) Prt320pen Post-Invocation 

32851 (0X8053) Prt32Write Post-Invocation 

32852 (0X8054) Prt32DevlOCtl Post-Invocation 

32853 (0X8055) Prt32Close Post-Invocation 

32854 (0X8056) Prt32Abort Post-Invocation 

32855 (0X8057) PrtNewPage Post-Invocation 

32856 (0X8058) PrtResetAbort Post-Invocation 

32857 (0X8059) PrtAbortDoc Post-Invocation 

32881 (0X8071) Spl32StdOpen Post-Invocation 

32882 (0X8072) Spl32StdClose Post-Invocation 

32883 (0X8073) Spl32StdStart Post-Invocation 

32884 (0X8074) Spl32StdStop Post-Invocation 

32885 (0X8075) Spl32StdQueryLength Post-Invocation 

32886 (0X8076) Spl32StdGetBits Post-Invocation 

32887 (0X8077) Spl32StdDelete Post-Invocation 

33024 (0X8100) SpIFSOpen Post-Invocation 

33025 (0X8101) SpIFSFirstWrite Post-Invocation 

33026 (0X8102) SpIFSWriteFail Post-Invocation 

33027 (0X8103) SpIFSCIose Post-Invocation 

33028 (0X8104) SpIFSSetTitle Post-Invocation 

33029 (0X8105) SpIFSActCP Post-Invocation 

33030 (0X8106) SpIFSVerifyCP Post-Invocation 

33031 (0X8107) SpIFSReturnCPAct Post-Invocation 

33032 (0X8108) AttachPort Post-Invocation 

33033 (0X8109) DetachPort Post-Invocation 

33034 (0X81 0A) GetNextld Post-Invocation 
33072 (0X8130) PrintDestControl Post-Invocation 


33073 (0X8131) PrintDestGetlnfo Post-Invocation 

33074 (0X8132) PrintDestEnum Post-Invocation 

33075 (0X8133) PrintDestAdd Post-Invocation 

33076 (0X8134) PrintDestSetlnfo Post-Invocation 

33077 (0X8135) PrintDestDel Post-Invocation 

33088 (0X8140) PrintJobContinue Post-Invocation 

33089 (0X8141) PrintJobPause Post-Invocation 

33090 (0X8142) PrintJobDel Post-Invocation 

33091 (0X8143) PrintJobSchedule Post-Invocation 

33092 (0X8144) PrintJobAdd Post-Invocation 

33093 (0X8145) PrintJobGetlnfo Post-Invocation 

33094 (0X8146) PrintJobSetlnfo Post-Invocation 

33095 (0X8147) PrintJobEnum Post-Invocation 

33104 (0X8150) PrintQPause Post-Invocation 

33105 (0X8151) PrintQPurge Post-Invocation 

33106 (0X8152) PrintQContinue Post-Invocation 

33107 (0X8153) PrintQAdd Post-Invocation 

33108 (0X8154) PrintQDel Post-Invocation 

33109 (0X8155) PrintQGetlnfo Post-Invocation 

33110 (0X8156) PrintQSetlnfo Post-Invocation 

33111 (0X8157) PrintQEnum Post-Invocation 

33112 (0X8158) PrintDriverEnum Post-Invocation 

33113 (0X8159) PrintQProcessorEnum Post-Invocation 

33114 (0X81 5A) PrintPortEnum Post-Invocation 


Trace Events for PMSPL Major Code: 0X00C6, Sorted by 
Tracepoint 


Attach Port 00264 (0X0108) 

Attach Port 33032 (0X8108) 

DetachPort 00265 (0X0109) 
DetachPort 33033 (0X8109) 
DosPrintJobAdd 00012 (0X000C) 
DosPrintJobAdd 32780 (0X800C) 
DosPrintJobAdd2 00013 (0X000D) 
DosPrintJobAdd2 32781 (0X800D) 
DosPrintJobGetld 00028 (0X001 C) 
DosPrintJobGetld 32796 (0X801 C) 
DosPrintJobSchedule 00011 (0X000B) 
DosPrintJobSchedule 32779 (0X800B) 
GetNextld 33034 (0X81 0A) 
PRT320PEN 00082 (0X0052) 
PRT32WRITE 00083 (0X0053) 
PostRefreshMsg 00384 (0X0180) 
PrintDestAdd 00307 (0X0133) 
PrintDestAdd 33075 (0X8133) 
PrintDestControl 00304 (0X0130) 
PrintDestControl 33072 (0X8130) 
PrintDestDel 00309 (0X0135) 
PrintDestDel 33077 (0X8135) 
PrintDestEnum 00306 (0X0132) 
PrintDestEnum 33074 (0X8132) 
PrintDestGetlnfo 00305 (0X0131) 
PrintDestGetlnfo 33073 (0X8131) 
PrintDestSetlnfo 00308 (0X0134) 
PrintDestSetlnfo 33076 (0X8134) 
PrintDriverEnum 00344 (0X0158) 
PrintDriverEnum 33112 (0X8158) 
PrintJobAdd 00324 (0X0144) 
PrintJobAdd 33092 (0X8144) 
PrintJobContinue 00320 (0X0140) 
PrintJobContinue 33088 (0X8140) 
PrintJobDel 00322 (0X0142) 
PrintJobDel 33090 (0X8142) 


PrintJobEnum 00327 (0X0147) 

PrintJobEnum 33095 (0X8147) 
PrintJobGetlnfo 00325 (0X0145) 
PrintJobGetlnfo 33093 (0X8145) 
PrintJobPause 00321 (0X0141) 
PrintJobPause 33089 (0X8141) 
PrintJobSchedule 00323 (0X0143) 
PrintJobSchedule 33091 (0X8143) 
PrintJobSetlnfo 00326 (0X0146) 
PrintJobSetlnfo 33094 (0X8146) 
PrintPortEnum 00346 (0X01 5A) 
PrintPortEnum 33114 (0X81 5A) 

PrintQAdd 00339 (0X0153) 

PrintQAdd 33107 (0X8153) 

PrintQContinue 00338 (0X0152) 
PrintQContinue 33106 (0X8152) 

PrintQDel 00340 (0X0154) 

PrintQDel 33108 (0X8154) 

PrintQEnum 00343 (0X0157) 

PrintQEnum 33111 (0X8157) 

PrintQGetlnfo 00341 (0X0155) 

PrintQGetlnfo 33109 (0X8155) 

PrintQPause 00336 (0X0150) 

PrintQPause 33104 (0X8150) 
PrintQProcessorEnum 00345 (0X0159) 
PrintQProcessorEnum 33113 (0X8159) 
PrintQPurge 00337 (0X0151) 

PrintQPurge 33105 (0X8151) 

PrintQSetlnfo 00342 (0X0156) 

PrintQSetlnfo 33110 (0X81 56) 

Prt32Abort 00086 (0X0056) 

Prt32Abort 32854 (0X8056) 

Prt32Close 00085 (0X0055) 

Prt32Close 32853 (0X8055) 

Prt32DevlOCtl 00084 (0X0054) 
Prt32DevlOCtl 32852 (0X8054) 

Prt320pen 32850 (0X8052) 

Prt32Write 32851 (0X8053) 

PrtAbortDoc 00089 (0X0059) 

PrtAbortDoc 32857 (0X8059) 

PrtNewPage 00087 (0X0057) 

PrtNewPage 32855 (0X8057) 

PrtResetAbort 00088 (0X0058) 

PrtResetAbort 32856 (0X8058) 
SPL32STDCLOSE 001 14 (0X0072) 
SPL32STDDELETE 00119 (0X0077) 
SPL32STDOPEN 00113 (0X0071) 
SPL32STDQUERYLENGTH 001 1 7 (0X0075) 
SPL32STDSTART 00115 (0X0073) 
SPL32STDSTOP 001 1 6 (0X0074) 
Spl32MessageBox 00081 (0X0051) 
Spl32MessageBox 32849 (0X8051) 
Spl32PrmSpool 00029 (0X001 D) 
Spl32PrmSpool 32797 (0X801 D) 
Spl32QmAbort 00056 (0X0038) 
Spl32QmAbort 32824 (0X8038) 
Spl32QmAbortDoc 00054 (0X0036) 
Spl32QmAbortDoc 32822 (0X8036) 
Spl32QmClose 00055 ( 0X0037) 
Spl32QmClose 32823 (0X8037) 
Spl32QmEndDoc 00053 (0X0035) 
Spl32QmEndDoc 32821 (0X8035) 
Spl32QmOpen 00049 (0X0031) 
Spl32QmOpen 32817 (0X8031) 
Spl32QmQueryPinfo 00057 (0X0039) 
Spl32QmQueryPinfo 32825 (0X8039) 
Spl32QmSetStatus 00058 (0X003A) 
Spl32QmSetStatus 32826 (0X803A) 
Spl32QmSetup 00059 (0X003B) 
Spl32QmSetup 32827 (0X803B) 
Spl32QmStartDoc 00050 (0X0032) 
Spl32QmStartDoc 32818 (0X8032) 
Spl32QmWrite 00051 (0X0033) 


Spl32QmWrite 32819 (0X8033) 
Spl32QmWriteFile 00052 (0X0034) 
Spl32QmWriteFile 32820 (0X8034) 
Spl32StdClose 00114 (0X0072) 
Spl32StdClose 32882 (0X8072) 

Spl32Std Delete 32887 (0X8077) 
Spl32StdGetBits 00118 (0X0076) 
Spl32StdGetBits 32886 (0X8076) 
Spl32StdOpen 001 1 3 (0X0071 ) 
Spl32StdOpen 32881 (0X8071) 
Spl32StdQueryLength 32885 (0X8075) 
Spl32StdStart 32883 (0X8073) 
Spl32StdStop 32884 (0X8074) 

SpIControl Device 00002 (0X0002) 
SpIControl Device 32770 (0X8002) 
SpICopyJob 00032 (0X0020) 

SpICopyJob 32800 (0X8020) 
SpICreateDevice 00005 (0X0005) 
SpICreateDevice 32773 (0X8005) 
SpICreateQueue 00017 (0X0011) 
SpICreateQueue 32785 (0X8011) 
SpIDeleteDevice 00007 (0X0007) 
SpIDeleteDevice 32775 (0X8007) 
SpIDeleteJob 00010 (0X000A) 
SpIDeleteJob 32778 (0X800A) 
SpIDeleteQueue 00020 (0X0014) 
SpIDeleteQueue 32788 (0X8014) 
SplEnumDevice 00004 (0X0004) 
SplEnumDevice 32772 (0X8004) 
SpiEnumDriver 00025 (0X0019) 
SplEnumDriver 32793 (0X8019) 
SplEnumJob 00016 (0X0010) 

SpiEnumJob 32784 (0X8010) 

SplEnumPort 00027 (0X001 B) 
SplEnumPort 32795 (0X801 B) 
SplEnumPrinter 00034 (0X0022) 
SplEnumPrinter 32802 (0X8022) 
SpiEnumQueue 00024 (0X0018) 
SpiEnumQueue 32792 (0X8018) 
SplEnumQueueProcessor 00026 (0X001 A) 
SplEnumQueueProcessor 32794 (0X801 A) 
SpiErrNoMemory 00372 (0X0174) 
SpiErrNotRunning 00371 (0X0173) 
SplError 00369 (0X0171) 

SpIFSActCP 00261 (0X0105) 

SpIFSActCP 33029 (0X8105) 

SpIFSCIose 00259 (0X0103) 

SpIFSCIose 33027 (0X8103) 
SpIFSFirstWrite 00257 (0X0101) 
SpiFSFirstWrite 33025 (0X8101) 
SpiFSOpen 00256 (0X0100) 

SpIFSOpen 33024 (0X8100) 
SpIFSFteturnCPAct 00263 (0X0107) 
SpiFSReturnCPAct 33031 (0X8107) 
SpIFSSetTitle 00260 (0X0104) 
SpIFSSetTitle 33028 (0X8104) 
SpIFSVerifyCP 00262 (0X0106) 
SpiFSVerifyCP 33030 (0X8106) 
SpIFSWriteFail 00258 (0X0102) 
SpIFSWriteFail 33026 (0X8102) 
SplHoidJob 00009 (0X0009) 

SplHoidJob 32777 (0X8009) 

SplHoldQueue 00018 (0X0012) 
SplHoldQueue 32786 (0X8012) 
SpILogError 00374 (0X0176) 
SpILogWarning 00373 (0X0175) 

SpIPanic 00370 (0X0172) 

SpIPurgeQueue 00021 (0X0015) 
SpIPurgeQueue 32789 (0X8015) 
SpIQueryDevice 00003 (0X0003) 
SpIQueryDevice 32771 (0X8003) 
SpIQueryDriver 00030 (0X001 E) 
SpIQueryDriver 32798 (0X801 E) 


SpIQueryJob 00014 (0X000E) 
SpIQueryJob 32782 (0X800E) 
SpIQueryJobFile 00033 (0X0021) 
SpIQueryJobFile 32801 (0X8021) 
SpIQueryQueue 00022 (0X0016) 
SpIQueryQueue 32790 (0X8016) 
SpIRError 00369 (0X0171) 
SpIRPanic 00370 (0X0172) 
SpIRWarning 00368 ( 0X0170) 
SpIReleaseJob 00008 (0X0008) 
SpIReleaseJob 32776 (0X8008) 
SpIReleaseQueue 00019 (0X0013) 
SpIReleaseQueue 32787 (0X8013) 
SpISetDevice 00006 (0X0006) 
SpISetDevice 32774 (0X8006) 
SpISetDriver 00031 (0X001 F) 
SpISetDriver 32799 (0X801 F) 
SpISetJob 00015 (0X000F) 
SpISetJob 32783 (0X800F) 
SpISetQueue 00023 (0X0017) 
SpISetQueue 32791 (0X8017) 
SplWarning 00368 (0X0170) 


PMSPL Major Code: 0X00C6 Minor Code: 2 (0X0002) 


Description 

SpIControlDevice Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIControlDevice 

Minor Code 

2 (0X0002) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulControl=%F, PortName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 3 (0X0003) 


Description 

SpIQueryDevice Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryDevice 

Minor Code 

3 (0X0003) 

Trace Groups 


DOS 


Trace Types 

PRE 

Traced Parameters 

ulLevel=%F, cbBuf=%F, pszPrintDeviceName=%s 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 4 (0X0004) 


Description 

SplEnumDevice Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumDevice 

Minor Code 

4 (0X0004) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulLevel=%F, cbESuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 5 (0X0005) 


Description 

SpICreateDevice Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICreateDevice 

Minor Code 

5 (0X0005) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulLevel=%F, cbESuf=%F, ComputerName=%s 



PMSPL Major Code: 0X00C6 Minor Code: 6 (0X0006) 

SpISetDevice Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpISetDevice 
6 (0X0006) 

DOS 
PRE 

pszPrinter=%s, ulParmNum=%F ulLevel=%F, cbBuf=%F 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 7 (0X0007) 

SpIDeleteDevice Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteDevice 
7 (0X0007) 

DOS 
PRE 

pszPrinter=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 8 (0X0008) 

SpIReleaseJob Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIReleaseJob 






Minor Code 


8 (0X0008) 


Trace Groups 

DOS 


Trace Types 

PRE 


Traced Parameters 


ulJob=%F, ComputerName=%s, QueueName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 9 (0X0009) 


Description 

SplHoIdJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplHoIdJob 

Minor Code 

9 (0X0009) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulJob=%F, ComputerName=%s, QueueName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 10 (0X000A) 


Description 

SpIDeleteJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteJob 

Minor Code 

10 (0X0O0A) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulJob=%F, ComputerName=%s, QueueName=%s 



PMSPL Major Code: 0X00C6 Minor Code: 1 1 (0X000B) 


Description 

DosPrintJobSchedule Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobSchedule 

Minor Code 

11 (OXOOOB) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulJob=%w, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 12 (0X000C) 


Description 

DosPrintJobAdd Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobAdd 

Minor Code 

12 (OXOOOC) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, cbBuf=%w, pBuf=%r%F 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 13 (0X000D) 


Description 


DosPrintJobAdd2 Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMSPL.DosPrintJobAdd2 


Minor Code 

13 (OXOOOD) 

Trace Groups 

DOS 


Trace Types 

PRE 


Traced Parameters 


QueueName=%s, ulLevel=%w, cbBuf=%w, pBuf=%r%F 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 14 (0X000E) 


Description 

SpIQueryJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryJob 

Minor Code 

14 (OXOOOE) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulJob=%F, ulLevel=%F, cbBuf=%F 
ComputerName=%s, QueueName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 15 (0X000F) 


Description 

SpISetJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetJob 

Minor Code 

15 (OXOOOF) 

Trace Groups 

DOS 

Trace Types 


PRE 



Traced Parameters 

ulJob=%F, ulParmNum=%F ulLevel=%F, cbBuf=%F, pBuf=%u 
ComputerName=%s QueueName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 16 (0X0010) 


Description 

SplEnumJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumJob 

Minor Code 

16 (0X0010) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ulLevel=%F, cbBuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 1 7 (0X001 1 ) 


Description 

SpICreateQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICreateQueue 

Minor Code 

17 (0X0011) 

Trace Groups 

DOS 

Trace Tvpes 

PRE 

Traced Parameters 

ulLevel=%F, cbBuf=%F, pbBuf=%r%F 


ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 18 (0X0012) 



Description 


SplHoldQueue Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplHoldQueue 

Minor Code 

18 (0X0012) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 19 (0X0013) 


Description 

SpIReleaseQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIReleaseQueue 

Minor Code 

19 (0X0013) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 20 (0X0014) 


Description 

SpIDeleteQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteQueue 

Minor Code 

20 (0X0014) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


PRE 


QueueName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 21 (0X0015) 


Description 

SpIPurgeQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIPurgeQueue 

Minor Code 

21 (0X0015) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 22 (0X0016) 


Description 

SpIQueryQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryQueue 

Minor Code 

22 (0X0016) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ulLevel=%F, cbBuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 23 (0X0017) 



Description 


SpISetQueue Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetQueue 

Minor Code 

23 (0X0017) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


QueueName=%s, ulParmNum=%F ulLevel=%F, cbBuf=%F, pBuf=%r%F 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 24 (0X0018) 


Description 

SplEnumQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumQueue 

Minor Code 

24 (0X0018) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulLevel=%F, cbBuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 25 (0X0019) 


Description 

SplEnumDriver Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumDriver 

Minor Code 


25 (0X0019) 



Trace Groups 


DOS 


Trace Types 
Traced Parameters 


PRE 


ulLevel=%F, cbESuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 26 (0X001 A) 


Description 

SplEnumQueueProcessor Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumQueueProcessor 

Minor Code 

26 (0X001 A) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulLevel=%F, cbESuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 27 (0X001 B) 


Description 

SplEnumPort Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumPort 

Minor Code 

27 (0X001 B) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


ulLevel=%F, cbBuf=%F, ComputerName=%s 



PMSPL Major Code: 0X00C6 Minor Code: 28 (0X001 C) 

DosPrintJobGetld Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobGetld 
28 (0X001 C) 

DOS 
PRE 

hFile=%F, cblnfo=%F 


PMSPL Major Code: 0X00C6 Minor Code: 29 (0X001 D) 

Spl32PrmSpool Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32PrmSpool 
29 (0X001 D) 

DOS 
PRE 

psz I n Log Addr=%s, pszOutLogAdd r=%s 


PMSPL Major Code: 0X00C6 Minor Code: 30 (0X001 E) 

SpIQueryDriver Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryDriver 
30 (0X001 E) 






Trace Groups 


DOS 


Trace Types 

PRE 

Traced Parameters 

ulLevel=%F, cbBuf=%F, DriverName=%s, PrinterName=%s 
ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 31 (0X001 F) 


Description 

SpISetDriver Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetDriver 

Minor Code 

31 (0X001 F) 

Trace Groups 

DOS 

Trace Tvpes 

PRE 

Traced Parameters 



ulLevel=%F, ulParmNum=%F, cbBuf=%F 
DriverName=%s, PrinterName=%s, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 32 (0X0020) 


Description 

SpICopyJob Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICopyJob 

Minor Code 

32 (0X0020) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 



SourceJoblD=%F, srcQueue=%s, srcComputer=%s 
TargetQueue=%s, TargetComputer=%s 


PMSPL Major Code: 0X00C6 Minor Code: 33 (0X0021) 


Description 

SpIQueryJobFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryJobFile 

Minor Code 

33 (0X0021) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


JoblD=%F, Queue=%s, Computer=%s 


PMSPL Major Code: 0X00C6 Minor Code: 34 (0X0022) 


Description 

SplEnumPrinter SplEnumQueue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumPrinter 

Minor Code 

34 (0X0022) 

Trace Groups 

DOS 


Trace Types 

PRE 

Traced Parameters 


uLevel=%F, flType=%F, cbBuf=%F, ComputerName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 49 (0X0031) 


Description 



Spl32QmOpen Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmOpen 

Minor Code 

49 (0X0031) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


cData =%F pQMOPENDATA=%F pszLogAddress=%F 
pszDriverName=%F pdriv=%F pszDataType=%F 
pszComment=%F pszQueueProcName=%F pszQProcParams=%F 
pszSpoolerParams=%F pszNetworkParams=%F 
LogAddr-%s DriverName-%s DataType-%s 
pdriv->cb=%F pdriv->IVersion=%F pdriv->szDeviceName-%s 
SpoolerParams-%s Comment-%s QProc-%s QProcParms-%s 


PMSPL Major Code: 0X00C6 Minor Code: 50 (0X0032) 


Description 

Spl32QmStartDoc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmStartDoc 

Minor Code 

50 (0X0032) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpl=%F, pszDocument=%s 


PMSPL Major Code: 0X00C6 Minor Code: 51 (0X0033) 


Description 


Spl32QmWrite Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSPL.Spl32QmWrite 


Minor Code 

51 (0X0033) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpI =%F cbDataln=%F pbData=%F 


PMSPL Major Code: 0X00C6 Minor Code: 52 (0X0034) 


Description 

Spl32QmWriteFile Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmWriteFile 

Minor Code 

52 (0X0034) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpl=%F Filename to write=%s 


PMSPL Major Code: 0X00C6 Minor Code: 53 (0X0035) 


Description 

Spl32QmEndDoc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmEndDoc 

Minor Code 

53 (0X0035) 

Trace Groups 

SPLQM 

Trace Types 

PRE 


Traced Parameters 



hSpI =%F 


PMSPL Major Code: 0X00C6 Minor Code: 54 (0X0036) 


Description 

Spl32QmAbortDoc Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmAbortDoc 

Minor Code 

54 (0X0036) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpi =%F 


PMSPL Major Code: 0X00C6 Minor Code: 55 (0X0037) 


Description 

Spl32QmClose Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmClose 

Minor Code 

55 (0X0037) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpi =%F 


PMSPL Major Code: 0X00C6 Minor Code: 56 (0X0038) 


Description 


Spl32QmAbort Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSPL.Spl32QmAbort 


Minor Code 

56 (0X0038) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


hSpI =%F 


PMSPL Major Code: 0X00C6 Minor Code: 57 (0X0039) 


Description 

Spl32QmQueryPinfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmQueryPinfo 

Minor Code 

57 (0X0039) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 


Logical address=%s 


PMSPL Major Code: 0X00C6 Minor Code: 58 (0X003A) 


Description 

Spl32QmSetStatus Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmSetStatus 

Minor Code 

58 (0X0O3A) 

Trace Groups 

SPLQM 

Trace Types 

PRE 

Traced Parameters 



Job ID=%w, NewStatus=%w, Logical address=%s, pszStatus=%s 


PMSPL Major Code: 0X00C6 Minor Code: 59 (0X003B) 

Spl32QmSetup Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmSetup 
59 (0X0O3B) 

SPLQM 
PRE 

Type=%F DopData-%F %F %F %F 
LogAddr-%s DriverName-%s DataType-%s 
pdriv->cb=%F pdriv->IVersion=%F pdriv->szDeviceName-%s 



PMSPL Major Code: 0X00C6 Minor Code: 81 (0X0051) 



Spl32MessageBox Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32MessageBox 
81 (0X0051) 

PRT 

PRE 


Traced Parameters 


fErrlnfo=%F, fErrData=%F, fStyle=%F, LogAddr=%s 
Caption=%s, Text=%s 


PMSPL Major Code: 0X00C6 Minor Code: 82 (0X0052) 



Description 


Prt320pen Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PRT320PEN 

Minor Code 

82 (0X0052) 

Trace Groups 

PRT 

Trace Types 

PRE 

Traced Parameters 


pszDeviceName=%s, openFlag=%F, openMode=%F, reserved=%F 


PMSPL Major Code: 0X00C6 Minor Code: 83 (0X0053) 


Description 

Prt32Write Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PRT32WRITE 

Minor Code 

83 (0X0053) 

Trace Groups 

PRT 

Trace Types 

PRE 

Traced Parameters 


hFile=%F, pchData=%F, cbData=%F, *pchData=%r%b 


PMSPL Major Code: 0X00C6 Minor Code: 84 (0X0054) 


Description 

Prt32DevlOCtl Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Prt32DevlOCtl 

Minor Code 

84 (0X0054) 

Trace Groups 


PRT 



Trace Types 

PRE 

Traced Parameters 

hFile=%F, uFunction=%F, uCategory=%F 
*pchParm=%F, *pchData=%F 


PMSPL Major Code: 0X00C6 Minor Code: 85 (0X0055) 


Description 

Prt32Close Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Prt32Close 

Minor Code 

85 (0X0055) 

Trace Groups 

PRT 

Trace Types 

PRE 

Traced Parameters 


hFile=%F 


PMSPL Major Code: 0X00C6 Minor Code: 86 (0X0056) 


Description 

Prt32Abort Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Prt32Abort 

Minor Code 

86 (0X0056) 

Trace Groups 

PRT 

Trace Types 

PRE 

Traced Parameters 


hFile=%F 



PMSPL Major Code: 0X00C6 Minor Code: 87 (0X0057) 

PrtNewPage Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrtNewPage 
87 (0X0057) 

PRT 
PRE 

hFile=%F ulPageNumber=%F 


PMSPL Major Code: 0X00C6 Minor Code: 88 (0X0058) 

PrtResetAbort Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrtResetAbort 
88 (0X0058) 

PRT 
PRE 

hFile=%F 


PMSPL Major Code: 0X00C6 Minor Code: 89 (0X0059) 

PrtAbortDoc Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrtAbortDoc 
89 (0X0059) 






Trace Groups 


PRT 


Trace Types 
Traced Parameters 


PRE 


hFile=%F, pchData=%F, cbData=%F, ulFlags=%F 


PMSPL Major Code: 0X00C6 Minor Code: 113 (0X0071) 


Description 

Spl32StdOpen Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDOPEN 

Minor Code 

113 (0X0071) 

Trace Groups 

STD 


Trace Types 

PRE 

Traced Parameters 


hDC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 113 (0X0071) 


Description 

Spl32StdOpen Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdOpen 

Minor Code 

113 (0X0071) 

Trace Groups 

STD 


Trace Types 

PRE 

Traced Parameters 


hDC=%F 



PMSPL Major Code: 0X00C6 Minor Code: 114 (0X0072) 

Spl32StdClose Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDCLOSE 
114 (0X0072) 

STD 
PRE 

hDC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 114 (0X0072) 

Spl32StdClose Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdClose 
114 (0X0072) 

STD 
PRE 

hDC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 115 (0X0073) 

Spl32StdStart Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDSTART 





Minor Code 



115 (0X0073) 


Trace Groups 

STD 


Trace Types 

PRE 


Traced Parameters 


hDC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 116 (0X0074) 


Description 

Spl32StdStop Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDSTOP 

Minor Code 

1 1 6 (0X0074) 

Trace Groups 

STD 


Trace Types 

PRE 

Traced Parameters 


hDC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 117 (0X0075) 


Description 

Spl32StdQueryLength Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDQUERYLENGTPI 

Minor Code 

1 1 7 (0X0075) 

Trace Groups 

STD 


Trace Types 

PRE 

Traced Parameters 


hMetaFile=%F 



PMSPL Major Code: 0X00C6 Minor Code: 118 (0X0076) 

Spl32StdGetBits Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdGetBits 
118 (0X0076) 

STD 
PRE 

hMetaFile=%F, offData=%F, cbData=%F, pchData=%F 


PMSPL Major Code: 0X00C6 Minor Code: 119 (0X0077) 

Spl32StdDelete Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SPL32STDDELETE 
119 (0X0077) 

STD 
PRE 

hMetaFile=%F 


PMSPL Major Code: 0X00C6 Minor Code: 256 (0X0100) 

SpIFSOpen Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSOpen 






Minor Code 


256 (0X0100) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


uFlandle=%w Codepage=%w, Key=%F, Port=%s 


PMSPL Major Code: 0X00C6 Minor Code: 257 (0X0101) 


Description 

SpIFSFirstWrite Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSFirstWrite 

Minor Code 

257 (0X0101) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


uHandle=%w 


PMSPL Major Code: 0X00C6 Minor Code: 258 (0X0102) 


Description 

SpIFSWriteFail Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSWriteFail 

Minor Code 

258 (0X0102) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


uHandle=%w, ErrorCode=%w 



PMSPL Major Code: 0X00C6 Minor Code: 259 (0X0103) 

SpIFSCIose Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSCIose 
259 (0X0103) 

FS 
PRE 

uFlandle=%w 


PMSPL Major Code: 0X00C6 Minor Code: 260 (0X0104) 

SpIFSSetTitle Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSSetTitle 
260 (0X0104) 

FS 
PRE 

uFlandle=%w, Title=%s 


PMSPL Major Code: 0X00C6 Minor Code: 261 (0X0105) 

SpIFSActCP Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSActCP 






Minor Code 


261 (0X0105) 


Trace Groups 

FS 


Trace Types 

PRE 


Traced Parameters 


uFlandle=%w, CodePage=%w 


PMSPL Major Code: 0X00C6 Minor Code: 262 (0X0106) 


Description 

SpIFSVerifyCP Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSVerifyCP 

Minor Code 

262 (0X0106) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


uHandle=%w, CodePage=%w 


PMSPL Major Code: 0X00C6 Minor Code: 263 (0X0107) 


Description 

SpIFSReturnCPAct Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSReturnCPAct 

Minor Code 

263 (0X0107) 

Trace Groups 

FS 


Trace Types 

PRE 

Traced Parameters 


uHandle=%w 



PMSPL Major Code: 0X00C6 Minor Code: 264 (0X0108) 

AttachPort Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. AttachPort 
264 (0X0108) 

FS 
PRE 

pPort=%F, PortName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 265 (0X0109) 

DetachPort Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. DetachPort 
265 (0X0109) 

FS 
PRE 

pPort=%F, PortName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 304 (0X0130) 

PrintDestControl Pre-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestControl 






Minor Code 


304 (0X0130) 


Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


pszDest=%s, Control=%F 


PMSPL Major Code: 0X00C6 Minor Code: 305 (0X0131) 


Description 

PrintDestGetlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestGetlnfo 

Minor Code 

305 (0X0131) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


pszName=%s, level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 306 (0X0132) 


Description 

PrintDestEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestEnum 

Minor Code 

306 (0X0132) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%F, cbBuf=%F 



PMSPL Major Code: 0X00C6 Minor Code: 307 (0X0133) 


Description 

PrintDestAdd Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestAdd 

Minor Code 

307 (0X0133) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level%F, Buf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 308 (0X0134) 


Description 

PrintDestSetlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestSetlnfo 

Minor Code 

308 (0X0134) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


pszPrinter=%s, level=%F, cbBuf=%F, parmnum=%F 
Buf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 309 (0X0135) 


Description 


PrintDestDel Pre-Invocation 


Tracepoint 



Public symbol defined dynamic tracepoint: PMSPL.PrintDestDel 


Minor Code 

309 (0X0135) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


pszPrinter=%s, level=%F 


PMSPL Major Code: 0X00C6 Minor Code: 320 (0X0140) 


Description 

PrintJobContinue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobContinue 

Minor Code 

320 (0X0140) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Job ID=%F, User Name=%s 


PMSPL Major Code: 0X00C6 Minor Code: 321 (0X0141) 


Description 

PrintJobPause Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobPause 

Minor Code 

321 (0X0141) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 



Job ID=%F, User Name=%s 


PMSPL Major Code: 0X00C6 Minor Code: 322 (0X0142) 


Description 

PrintJobDel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobDel 

Minor Code 

322 (0X0142) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Job ID=%F, User Name=%s 


PMSPL Major Code: 0X00C6 Minor Code: 323 (0X0143) 


Description 

PrintJobSchedule Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobSchedule 

Minor Code 

323 (0X0143) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Job ID=%w 


PMSPL Major Code: 0X00C6 Minor Code: 324 (0X0144) 


Description 


PrintJobAdd Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSPL.PrintJobAdd 


Minor Code 

324 (0X0144) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%w, QueueName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 325 (0X0145) 


Description 

PrintJobGetlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobGetlnfo 

Minor Code 

325 (0X0145) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Job ID=%F, level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 326 (0X0146) 


Description 

PrintJobSetlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobSetlnfo 

Minor Code 

326 (0X0146) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 



Job ID=%F, level=%F, cbBuf=%F, parmnum=%F 


PMSPL Major Code: 0X00C6 Minor Code: 327 (0X0147) 


Description 

PrintJobEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobEnum 

Minor Code 

327 (0X0147) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%F, cbBuf=%F, Qname=%s 


PMSPL Major Code: 0X00C6 Minor Code: 336 (0X0150) 


Description 

PrintQPause Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQPause 

Minor Code 

336 (0X0150) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s 


PMSPL Major Code: 0X00C6 Minor Code: 337 (0X0151) 


Description 


PrintQPurge Pre-Invocation 



Tracepoint 


Public symbol defined dynamic tracepoint: PMSPL. PrintQPurge 


Minor Code 

337 (0X0151) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s 


PMSPL Major Code: 0X00C6 Minor Code: 338 (0X0152) 


Description 

PrintQContinue Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQContinue 

Minor Code 

338 (0X0152) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s 


PMSPL Major Code: 0X00C6 Minor Code: 339 (0X0153) 


Description 

PrintQAdd Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQAdd 

Minor Code 

339 (0X0153) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 



level=%F, Buf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 340 (0X0154) 


Description 

PrintQDel Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQDel 

Minor Code 

340 (0X0154) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s, level=%F 


PMSPL Major Code: 0X00C6 Minor Code: 341 (0X0155) 


Description 

PrintQGetlnfo Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQGetlnfo 

Minor Code 

341 (0X0155) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s, level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 342 (0X0156) 


Description 



PrintQSetlnfo Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQSetlnfo 

Minor Code 

342 (0X0156) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


Qname=%s, level=%F, cbBuf=%F, parmnum=%F 


PMSPL Major Code: 0X00C6 Minor Code: 343 (0X0157) 


Description 

PrintQEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQEnum 

Minor Code 

343 (0X0157) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 344 (0X0158) 


Description 

PrintDriverEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDriverEnum 

Minor Code 

344 (0X0158) 

Trace Groups 

PRINTX 

Trace Types 


PRE 



Traced Parameters 


level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 345 (0X0159) 


Description 

PrintQProcessorEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQProcessorEnum 

Minor Code 

345 (0X0159) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 346 (0X01 5A) 


Description 

PrintPortEnum Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintPortEnum 

Minor Code 

346 (0X01 5A) 

Trace Groups 

PRINTX 

Trace Types 

PRE 

Traced Parameters 


level=%F, cbBuf=%F 


PMSPL Major Code: 0X00C6 Minor Code: 368 (0X0170) 



Description 


SplWarning Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplWarning 

Minor Code 

368 (0X0170) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


Function-%s, ReturnCode=%F, Other=%F 


PMSPL Major Code: 0X00C6 Minor Code: 368 (0X0170) 


Description 

SpIRWarning Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIRWarning 

Minor Code 

368 (0X0170) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


Return Address=%F, rc=%F, value=%F 


PMSPL Major Code: 0X00C6 Minor Code: 369 (0X0171) 


Description 

SplError Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplError 

Minor Code 

369 (0X0171) 

Trace Groups 

ERROR 

Trace Types 


PRE 



Traced Parameters 


Function-%s, ReturnCode=%F, Other=%F 


PMSPL Major Code: 0X00C6 Minor Code: 369 (0X0171) 


Description 

SpIRError Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIRError 

Minor Code 

369 (0X0171) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


Return Address=%F, rc=%F, value=%F 


PMSPL Major Code: 0X00C6 Minor Code: 370 (0X0172) 


Description 

SpIPanic Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIPanic 

Minor Code 

370 (0X0172) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


Function-%s, RetumCode=%F, Other=%F 


PMSPL Major Code: 0X00C6 Minor Code: 370 (0X0172) 



Description 


SpIRPanic Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIRPanic 

Minor Code 

370 (0X0172) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


Return Address=%F, rc=%F, value=%F 


PMSPL Major Code: 0X00C6 Minor Code: 371 (0X0173) 


Description 

SplErrNotRunning Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplErrNotRunning 

Minor Code 

371 (0X0173) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 

No parameters traced. 


PMSPL Major Code: 0X00C6 Minor Code: 372 (0X0174) 


Description 

SplErrNoMemory Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplErrNoMemory 

Minor Code 

372 (0X0174) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 



DosError=%F 


PMSPL Major Code: 0X00C6 Minor Code: 373 (0X0175) 


Description 

SpILogWarning Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpILogWarning 

Minor Code 

373 (0X0175) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


PMError=%F 


PMSPL Major Code: 0X00C6 Minor Code: 374 (0X0176) 


Description 

SpILogError Pre-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpILogError 

Minor Code 

374 (0X0176) 

Trace Groups 

ERROR 

Trace Types 

PRE 

Traced Parameters 


PMError=%F 


PMSPL Major Code: 0X00C6 Minor Code: 384 (0X0180) 


Description 



PostRefreshMsg Pre-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PostRefreshMsg 

Minor Code 

384 (0X0180) 

Trace Groups 

REFRESH 


Trace Types 

PRE 

Traced Parameters 


Type=%F, JoblD=%F, Queue=%s 


PMSPL Major Code: 0X00C6 Minor Code: 32770 (0X8002) 


Description 

SpIControlDevice Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIControlDevice 

Minor Code 

32770 (0X8002) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32771 (0X8003) 


Description 

SpIQueryDevice Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryDevice 

Minor Code 

32771 (0X8003) 

Trace Groups 

DOS 

Trace Types 


POST 



Traced Parameters 


rc=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32772 (0X8004) 


Description 

SplEnumDevice Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumDevice 

Minor Code 

32772 (0X8004) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, cReturned=%F, cTotal=%F 
pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32773 (0X8005) 


Description 

SpICreateDevice Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICreateDevice 

Minor Code 

32773 (0X8005) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32774 (0X8006) 



Description 


SpISetDevice Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetDevice 

Minor Code 

32774 (0X8006) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32775 (0X8007) 


Description 

SpIDeleteDevice Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteDevice 

Minor Code 

32775 (0X8007) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32776 (0X8008) 


Description 

SpIReleaseJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIReleaseJob 

Minor Code 

32776 (0X8008) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32777 (0X8009) 


Description 

SplHoIdJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplHoIdJob 

Minor Code 

32777 (0X8009) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32778 (0X800A) 


Description 

SpIDeleteJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteJob 

Minor Code 

32778 (0X800A) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32779 (0X800B) 



Description 


DosPrintJobSchedule Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobSchedule 

Minor Code 

32779 (0X800B) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32780 (0X800C) 


Description 

DosPrintJobAdd Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobAdd 

Minor Code 

32780 (0X800C) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, pulJob=%w, pszFileName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 32781 (0X800D) 


Description 

DosPrintJobAdd2 Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobAdd2 

Minor Code 

32781 (0X800D) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F, pulJob=%w, pszFileName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 32782 (0X800E) 


Description 

SpIQueryJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryJob 

Minor Code 

32782 (0X800E) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32783 (0X800F) 


Description 

SpISetJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetJob 

Minor Code 

32783 (0X800F) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32784 (0X8010) 



Description 


SplEnumJob Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumJob 

Minor Code 

32784 (0X8010) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32785 (0X8011) 


Description 

SpICreateQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICreateQueue 

Minor Code 

32785 (0X8011) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32786 (0X8012) 


Description 

SpIFIoldQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFIoldQueue 

Minor Code 

32786 (0X8012) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32787 (0X8013) 


Description 

SpIReleaseQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIReleaseQueue 

Minor Code 

32787 (0X8013) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32788 (0X8014) 


Description 

SpIDeleteQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIDeleteQueue 

Minor Code 

32788 (0X8014) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32789 (0X8015) 



Description 


SpIPurgeQueue Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIPurgeQueue 

Minor Code 

32789 (0X8015) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32790 (0X8016) 


Description 

SpIQueryQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryQueue 

Minor Code 

32790 (0X8016) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32791 (0X8017) 


Description 

SpISetQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetQueue 

Minor Code 

32791 (0X8017) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32792 (0X8018) 


Description 

SplEnumQueue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumQueue 

Minor Code 

32792 (0X8018) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pbBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32793 (0X8019) 


Description 

SplEnumDriver Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumDriver 

Minor Code 

32793 (0X8019) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32794 (0X801 A) 



Description 


SplEnumQueueProcessor Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumQueueProcessor 

Minor Code 

32794 (0X801 A) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32795 (0X801 B) 


Description 

SplEnumPort Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumPort 

Minor Code 

32795 (0X801 B) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32796 (0X801 C) 


Description 

DosPrintJobGetld Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. DosPrintJobGetld 

Minor Code 

32796 (0X801 C) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F, JobID =%F plnfo=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32797 (0X801 D) 


Description 

Spl32PrmSpool Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32PrmSpool 

Minor Code 

32797 (0X801 D) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32798 (0X801 E) 


Description 

SpIQueryDriver Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryDriver 

Minor Code 

32798 (0X801 E) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32799 (0X801 F) 



Description 


SpISetDriver Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpISetDriver 

Minor Code 

32799 (0X801 F) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32800 (0X8020) 


Description 

SpICopyJob Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpICopyJob 

Minor Code 

32800 (0X8020) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, NewJoblD=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32801 (0X8021) 


Description 

SpIQueryJobFile Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIQueryJobFile 

Minor Code 

32801 (0X8021) 

Trace Groups 


DOS 



Trace Types 
Traced Parameters 


POST 


rc=%F, FileName=%s 


PMSPL Major Code: 0X00C6 Minor Code: 32802 (0X8022) 


Description 

SplEnumPrinter Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SplEnumPrinter 

Minor Code 

32802 (0X8022) 

Trace Groups 

DOS 


Trace Types 

POST 

Traced Parameters 


rc=%F, cReturned=%F, cTotal=%F, cbNeeded=%F, pBuf=%r%F 


PMSPL Major Code: 0X00C6 Minor Code: 32817 (0X8031) 


Description 

Spl32QmOpen Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmOpen 

Minor Code 

32817 (0X8031) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


Spool File Flandle=%F, Possible ErrorCode=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32818 (0X8032) 



Description 


Spl32QmStartDoc Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmStartDoc 

Minor Code 

32818 (0X8032) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32819 (0X8033) 


Description 

Spl32QmWrite Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmWrite 

Minor Code 

32819 (0X8033) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32820 (0X8034) 


Description 

Spl32QmWriteFile Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmWriteFile 

Minor Code 

32820 (0X8034) 

Trace Groups 


SPLQM 



Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32821 (0X8035) 


Description 

Spl32QmEndDoc Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmEndDoc 

Minor Code 

32821 (0X8035) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


Job ID=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32822 (0X8036) 


Description 

Spl32QmAbortDoc Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmAbortDoc 

Minor Code 

32822 (0X8036) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32823 (0X8037) 



Description 


Spl32QmClose Post-Invocation 


Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmClose 

Minor Code 

32823 (0X8037) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32824 (0X8038) 


Description 

Spl32QmAbort Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmAbort 

Minor Code 

32824 (0X8038) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32825 (0X8039) 


Description 

Spl32QmQueryPinfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmQueryPinfo 

Minor Code 

32825 (0X8039) 

Trace Groups 


SPLQM 



Trace Types 
Traced Parameters 


POST 


Job ID=%w 


PMSPL Major Code: 0X00C6 Minor Code: 32826 (0X803A) 


Description 

Spl32QmSetStatus Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmSetStatus 

Minor Code 

32826 (0X803A) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32827 (0X803B) 


Description 

Spl32QmSetup Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32QmSetup 

Minor Code 

32827 (0X803B) 

Trace Groups 

SPLQM 

Trace Types 

POST 

Traced Parameters 


rc=%F Type=%F DopData-%F %F %F %F 
LogAddr-%s DriverName-%s DataType-%s 


pdriv->cb=%F pdriv->IVersion=%F pdriv->szDeviceName-%s 



PMSPL Major Code: 0X00C6 Minor Code: 32849 (0X8051) 

Spl32MessageBox Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32MessageBox 
32849 (0X8051) 

PRT 
POST 

rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32850 (0X8052) 

Prt320pen Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Prt320pen 
32850 (0X8052) 

PRT 
POST 

rc=%F, hFile=%F, ActionTaken=%F, Dos Filehandle=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32851 (0X8053) 

Prt32Write Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Prt32Write 






Minor Code 


32851 (0X8053) 


Trace Groups 
Trace Types 
Traced Parameters 


PRT 

POST 

RC=%F, cbWritten=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32852 (0X8054) 


Description 

Prt32DevlOCtl Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Prt32DevlOCtl 

Minor Code 

32852 (0X8054) 

Trace Groups 

PRT 

Trace Types 

POST 

Traced Parameters 


RC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32853 (0X8055) 


Description 

Prt32Close Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Prt32Close 

Minor Code 

32853 (0X8055) 

Trace Groups 

PRT 

Trace Tvpes 

POST 

Traced Parameters 



RC=%F 



PMSPL Major Code: 0X00C6 Minor Code: 32854 (0X8056) 

Prt32Abort Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Prt32Abort 
32854 (0X8056) 

PRT 
POST 

RC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32855 (0X8057) 

PrtNewPage Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrtNewPage 
32855 (0X8057) 

PRT 
POST 

RC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32856 (0X8058) 

PrtResetAbort Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrtResetAbort 






Minor Code 


32856 (0X8058) 


Trace Groups 

PRT 

Trace Types 

POST 


Traced Parameters 


RC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32857 (0X8059) 


Description 

PrtAbortDoc Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrtAbortDoc 

Minor Code 

32857 (0X8059) 

Trace Groups 

PRT 

Trace Types 

POST 

Traced Parameters 


RC=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32881 (0X8071) 


Description 

Spl32StdOpen Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdOpen 

Minor Code 

32881 (0X8071) 

Trace Groups 

STD 


Trace Types 

POST 

Traced Parameters 


fSuccess=%F 



PMSPL Major Code: 0X00C6 Minor Code: 32882 (0X8072) 

Spl32StdClose Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdClose 
32882 (0X8072) 

STD 
POST 

fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32883 (0X8073) 

Spl32StdStart Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdStart 
32883 (0X8073) 

STD 
POST 

fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32884 (0X8074) 

Spl32StdStop Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdStop 






Minor Code 


32884 (0X8074) 


Trace Groups 
Trace Types 
Traced Parameters 


STD 

POST 

pBuffer(HSDT)=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32885 (0X8075) 


Description 

Spl32StdQueryLength Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdQueryLength 

Minor Code 

32885 (0X8075) 

Trace Groups 

STD 


Trace Types 

POST 

Traced Parameters 


Length=%F 


PMSPL Major Code: 0X00C6 Minor Code: 32886 (0X8076) 


Description 

Spl32StdGetBits Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdGetBits 

Minor Code 

32886 (0X8076) 

Trace Groups 

STD 


Trace Types 

POST 

Traced Parameters 


fSuccess=%F 



PMSPL Major Code: 0X00C6 Minor Code: 32887 (0X8077) 

Spl32Std Delete Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. Spl32StdDelete 
32887 (0X8077) 

STD 
POST 

fSuccess=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33024 (0X8100) 

SpIFSOpen Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSOpen 
33024 (0X8100) 

FS 

POST 

rc=%w, Jobld=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33025 (0X8101) 

SpIFSFirstWrite Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSFirstWrite 






Minor Code 


33025 (0X8101) 


Trace Groups 

FS 


Trace Types 

POST 


Traced Parameters 


Error=%w, CP Activation length=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33026 (0X8102) 


Description 

SpIFSWriteFail Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSWriteFail 

Minor Code 

33026 (0X8102) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Error=%w, Response=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33027 (0X8103) 


Description 

SpIFSCIose Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSCIose 

Minor Code 

33027 (0X8103) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


rc=%w 



PMSPL Major Code: 0X00C6 Minor Code: 33028 (0X8104) 

SpIFSSetTitle Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSSetTitle 
33028 (0X8104) 

FS 

POST 
rc=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33029 (0X8105) 

SpIFSActCP Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSActCP 
33029 (0X8105) 

FS 

POST 
rc=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33030 (0X8106) 

SpIFSVerifyCP Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSVerifyCP 






Minor Code 


33030 (0X8106) 


Trace Groups 

FS 


Trace Types 

POST 


Traced Parameters 


DosPFSVerifyFont rc=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33031 (0X8107) 


Description 

SpIFSReturnCPAct Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. SpIFSReturnCPAct 

Minor Code 

33031 (0X8107) 

Trace Groups 

FS 


Trace Types 

POST 

Traced Parameters 


Error=%w, CP Activation length=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33032 (0X8108) 


Description 

AttachPort Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. AttachPort 

Minor Code 

33032 (0X8108) 

Trace Groups 

FS 

Trace Tvpes 

POST 

Traced Parameters 



rc=%w 



PMSPL Major Code: 0X00C6 Minor Code: 33033 (0X8109) 

DetachPort Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. DetachPort 
33033 (0X8109) 

FS 

POST 
rc=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33034 (0X81 0A) 

GetNextld Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. GetNextld 
33034 (0X81 0A) 

PRINTX 
POST 

Returned Job ID =%w 


PMSPL Major Code: 0X00C6 Minor Code: 33072 (0X8130) 

PrintDestControl Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestControl 






Minor Code 


33072 (0X8130) 


Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33073 (0X8131) 


Description 

PrintDestGetlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestGetlnfo 

Minor Code 

33073 (0X8131) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, *pcbNeeded=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33074 (0X8132) 


Description 

PrintDestEnum Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestEnum 

Minor Code 

33074 (0X8132) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 



PMSPL Major Code: 0X00C6 Minor Code: 33075 (0X8133) 

PrintDestAdd Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestAdd 
33075 (0X8133) 

PRINTX 
POST 

rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33076 (0X8134) 

PrintDestSetlnfo Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestSetlnfo 
33076 (0X8134) 

PRINTX 
POST 

rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33077 (0X8135) 

PrintDestDel Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintDestDel 






Minor Code 


33077 (0X8135) 


Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33088 (0X8140) 


Description 

PrintJobContinue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobContinue 

Minor Code 

33088 (0X8140) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33089 (0X8141) 


Description 

PrintJobPause Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobPause 

Minor Code 

33089 (0X8141) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 



PMSPL Major Code: 0X00C6 Minor Code: 33090 (0X8142) 

PrintJobDel Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobDel 
33090 (0X8142) 

PRINTX 
POST 

rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33091 (0X8143) 

PrintJobSchedule Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobSchedule 
33091 (0X8143) 

PRINTX 
POST 

rc=%w 


PMSPL Major Code: 0X00C6 Minor Code: 33092 (0X8144) 

PrintJobAdd Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobAdd 






Minor Code 


33092 (0X8144) 


Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%w, JoblD=%w, Filename=%s 


PMSPL Major Code: 0X00C6 Minor Code: 33093 (0X8145) 


Description 

PrintJobGetlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobGetlnfo 

Minor Code 

33093 (0X8145) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33094 (0X8146) 


Description 

PrintJobSetlnfo Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobSetlnfo 

Minor Code 

33094 (0X8146) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 



PMSPL Major Code: 0X00C6 Minor Code: 33095 (0X8147) 


Description 

PrintJobEnum Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintJobEnum 

Minor Code 

33095 (0X8147) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33104 (0X8150) 


Description 

PrintQPause Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQPause 

Minor Code 

33104 (0X8150) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33105 (0X8151) 


Description 


PrintQPurge Post-Invocation 


Tracepoint 


Public symbol defined dynamic tracepoint: PMSPL. PrintQPurge 



Minor Code 


33105 (0X8151) 


Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33106 (0X8152) 


Description 

PrintQContinue Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQContinue 

Minor Code 

33106 (0X8152) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33107 (0X8153) 


Description 

PrintQAdd Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQAdd 

Minor Code 

33107 (0X8153) 

Trace Groups 

PRINTX 

Trace Tvpes 

POST 

Traced Parameters 



rc=%F 



PMSPL Major Code: 0X00C6 Minor Code: 33108 (0X8154) 

PrintQDel Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintQDel 
33108 (0X8154) 

PRINTX 
POST 

rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33109 (0X8155) 

PrintQGetlnfo Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintQGetlnfo 
33109 (0X8155) 

PRINTX 
POST 

rc=%F, cbNeeded=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33110 (0X8156) 

PrintQSetlnfo Post-Invocation 

Public symbol defined dynamic tracepoint: PMSPL. PrintQSetlnfo 






Minor Code 


33110 (0X8156) 


Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33111 (0X8157) 


Description 

PrintQEnum Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQEnum 

Minor Code 

33111 (0X8157) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 


PMSPL Major Code: 0X00C6 Minor Code: 33112 (0X8158) 


Description 

PrintDriverEnum Post-Invocation 

Tracepoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintDriverEnum 

Minor Code 

33112 (0X8158) 

Trace Groups 

PRINTX 

Trace Types 

POST 

Traced Parameters 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 



PMSPL Major Code: 0X00C6 Minor Code: 331 1 3 (0X81 59) 


DescriDtion 

PrintQProcessorEnum Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintQProcessorEnum 

Minor Code 

33113 (0X8159) 

Trace GrouDS 

PRINTX 

Trace TvDes 
Traced Parameters 

POST 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 


PMSPL Major Code: 0X00C6 Minor Code: 331 1 4 (0X81 5A) 


DescriDtion 

PrintPortEnum Post-Invocation 

TraceDoint 

Public symbol defined dynamic tracepoint: PMSPL. PrintPortEnum 

Minor Code 

331 14 (0X81 5A) 

Trace GrouDS 

PRINTX 

Trace TvDes 
Traced Parameters 

POST 


rc=%F, cbNeeded=%F, cTotal=%F, cReturned=%F 


CONFIG.SYS RAS Statements 

OS/2 provides a number of CONFIG.SYS commands and settings specifically for RAS purposes. Some of these are described in the OS/2 
Command Reference, and will not be discussed in detail here. A number of commands were introduced or enhanced in APAR PJ12258, 
which is applicable to OS/2 2.11. All the commands described here are available with OS/2 Warp 3.0. 


The following CONFIG.SYS commands comprise the RAS set. Those not completely documented in the OS/2 Command Reference are 
now discussed in detail. 


• AUTOFAIL (see the OS/2 Command Reference). 

• DUMPPROCESS 

• REIPL 

• RASKDATA 

• SCKILLFEATUREENABLED 

• SHAPIEXCEPTIONHANDLER 

• SHELLEXCEPTIONHANDLER 

• SUPPRESSPOPUPS 

• TRACE (see the OS/2 Command Reference). Also see the System Trace Facility - User Guide chapter in this book. 

• TRACEBUF (see the OS/2 Command Reference). 

• TRACEFMT (see the OS/2 Command Reference). 

• TRAPDUMP 


AUTOFAIL 


AUTOFAIL modifies the processing of media errors. See the OS/2 Command Reference. 


DUMPPROCESS 


This command allows the user to activate the process dump facility. When active, any ring 3 (application) process that traps will result in a 
memory dump being written to a unique dump file. The dump file takes a name of the form PDUMP.nnn where nnn is an index that is 
incremented each time a new process dump is created. 

The contents of the dump comprise unformatted system and user storage that relates to the trapping process. Included in this are: 

PTDA 

• TCB &TSD 

• Registers 

• Arena records 
MTE and SMTEs 

• LDT 

• ring 0 stack 

• ring 3 stack 
Syntax. 

DUMPPROCESS=x 


Parameters 


X 


This specifies the drive letter (excluding the colon) to which process dump data sets will be written. These takes the 
name PDUMP.nnn and reside in the root directory of the drive specified. The name and directory cannot be 
overridden by the user. 


Note: 


See the Process Dump Formatter section of the Dump Formatter User Guide for information on formatting Process Dumps. 


REIPL 


This command allows the user to automate the re-booting (re-IPLing) of the system following an IPE. 

Syntax. 


REIPL=ON | OFF 


Parameters 


ON 

OFF 


Notes: 


This specifies the system it to be automatically re-booted following an IPE. 

This specified that the system is not to be automatically re-booted following an IPE. The system will remain hung until 
manually restarted. 


REIPL only applied to pre-WARP systems if APAR PJ12258 has been applied. 

REIPL has no effect when TRAPDUMP=ON|RO is specified. Whether the system is re-booted following a stand-alone dump is 
governed by the OS2DUMP module. If the the dump is to hard-disk then automatic re-boot occurs, otherwise not. 


RASKDATA 


The RASKDATA statement directs the kenel to retain various system control blocks in memory for debugging purposes. 

Syntax. 


RASKDATA= [OTE] [, LOCKS I NOLOCKS] 


Parameters 


OTE 

causes the OTE, STE and SMTE loader structures to be retained in resident memory for use by the Dump Formatter 
.LM command.. 

The default behaviour is for OTE and SMTE structure to be allocated from resident memeory, which can causes 
these to become paged out and thus not present in a system dump. 

LOCKS 

causes long and short term lock records to be retained for use by the Dump Formatter .MK command. 


The default behaviour under the RETAIL kernel is not to retain lock records. 


The default behaviour under the HSTRICT and ALLSTRICT kernels is to retain lock records. 

LOCKS and NOLOCKS are mutually exclusive options. 

NOLOCKS 

causes long and short term lock records not to be retained. If this option is specified then the Dump Formatter .MK 
command will not function. 

The default behaviour under the RETAIL kernel is not to retain lock records. 

The default behaviour under the HSTRICT and ALLSTRICT kernels is to retain lock records. 

Remarks 

Use of RASKDATA will impact resident memory requirements may force greater paging activity if insufficient memory is available. 

The OTE option was introduced with OS/2 Warp V3.0 fix pack 35 and OS/2 Warp V4.0 fix pack 1 0. 

The LOCKS and NOLOCKS options were introduced with OS/2 Warp V3.0 fix pack 40 and OS/2 Warp V4.0 fix pack 1 0. 

All options are available with OS/2 Warp E-Server 


SCKILLFEATUREENABLED 


This command enables the Kill Feature of the Warp Centre introduced with OS/2 Warp V4.0. 

Syntax. 


SET SCKILLFEATUREENABLED=YES I NO 


Parameters 


YES 


Enables the kill Feature of the Warp Centre. 


NO 


Disables the kill Feature of the Warp Centre. This is the default setting. 


Note: 


The Kill Feature is invoked by clicking on the window list icon of the Warp Centre while holding down the Ctrl key. This causes a list 
of all execting processes to be displayed. Selecting a process from this list will cause it to be terminated, following a confirmation 
prompt. 


SHAPIEXCEPTIONHANDLER 


This command disables or enables the registration of the exception handler in the PMSHAPI.DLL module. 
Syntax. 

SET SHAPIEXCEPTIONHANDLER=ON | OFF 

Parameters 


This is the default setting. The shell API DLL exception handler is enabled and normal error recovery takes place 
whenever a user PM application or the desktop traps. 

OFF 

The shell API DLL exception handler is disabled. No additional error recovery provided by the shell takes place when 
a user application or the desktop traps. 

Notes: 


Exception handler registration only occurs during PMSHAPI.DLL initialisation. Therefore, a change to the specification of 
SHAPIEXCEPTIONHANDLER will require the system to be rebooted. 

The Shell API DLL exception handler will attempt to clean up an application's PM resources. 

Under certain circumstances application traps can be pervasive. Either the default error recovery is too efficient to allow the trap to 
be intercepted or analysed, or the trap recurses to a more serious problem, from which it is also difficult to determine the underlying 
cause. SHAPIEXCEPTIONHANDLER may be used under these circumstances to allow the problem to be intercepted closer to the 
point of occurrence. 

SHAPIEXCEPTIONHANDLER may be used with TRAPDUMP to force a system dump at the point of failure. 

Hangs in the shell during initialisation may be the result of a re-cursive trap. SHAPIEXCEPTIONHANDLER may be used to 
intercept this condition. 

Since it if difficult to determine whether a potential shell problem involves PMSHELL.EXE or PMSHAPI.DLL then it is 
recommended to use SHAPIEXCEPTIONHANDLER with SHELLEXCEPTIONHANDLER. 


SHELLEXCEPTIONHANDLER 


This command disables or enables the registration of the exception handler in the PMSHELL.EXE module. 
Syntax. 


SET SHELLEXCEPTIONHANDLER=ON | OFF 


Parameters 


ON 

This is the default setting. The shell's exception handler is enabled and normal error recovery takes place whenever 
a user PM application or the desktop traps. 

OFF 

The shell's exception handler is disabled. No additional error recovery provided by the shell takes place when a user 
application or the desktop traps. 

Notes: 


Exception handler registration only occurs during PMSHELL.EXE initialisation. Therefore, a change to the specification of 
SHELLEXCEPTIONHANDLER will require the system to be rebooted. 

The Shell's exception handler will attempt to clean up an application's PM resources. In addition if the application is the Desktop (or 
whatever is specified in RUNWORKPLACE), then it is restarted. 

Under certain circumstances application traps can be pervasive. Either the default error recovery is too efficient to allow the trap to 
be intercepted or analysed, or the trap recurses to a more serious problem, from which it is also difficult to determine the underlying 
cause. SHELLEXCEPTIONHANDLER may be used under these circumstances to allow the problem to be intercepted closer to the 
point of occurrence. 

SHELLEXCEPTIONHANDLER may be used with TRAPDUMP to force a system dump at the point of failure. 

Hangs in the shell during initialisation may be the result of a re-cursive trap. SHELLEXCEPTIONHANDLER may be used to 


intercept this condition. 

Since it if difficult to determine whether a potential shell problem involves PMSHELL.EXE or PMSHAPI.DLL then it is 
recommended to use SHELLEXCEPTIONHANDLER with SHAPIEXCEPTIONHANDLER. 


SUPPRESSPOPUPS 


This command allows the user to suppress the display of trap information pop-up messages and instead direct to trap information to a log 
data set. 

Syntax. 


SUPPRESSPOPUPS=x 


Parameters 


This specifies the drive letter (excluding the colon) to which the pop-up log data set will be written. The log takes the 
name POPUPLOG.OS2 and resides in the root directory of the drive specified. The name and directory cannot be 
overridden by the user. 

From Fix Pack 29 of OS/2 Warp V3.0 and OS/2 Warp V4.0 GA, trap screen pop-ups are by default logged by default 
in POPUPLOG.OS2 in to root directory of the boot drive and not suppressed, x may specify 0 to disable automatic 
logging. In addition, the TRAPLOG command provides a command line interface to control trap screen logging and 
suppression independently. 


TRACE 


TRACE specifies whether tracing of static trace events is to be active from system initialisation or not. See the OS/2 Command Reference 
for details. See also the System Trace Facility - User Guide chapter in this book. 


TRACEBUF 


TRACEBUF specifies the size of the system trace buffer. See the OS/2 Command Reference for details. 


TRACEFMT 


The TRACEFMT utility is used to extract and format the system trace from the either a saved trace buffer or the currently active trace buffer. 
See the OS/2 Command Reference for details. 


TRAPDUMP 


Warning: Potential Data Loss 


Misuse of this facility may cause loss of vital data. Please read carefully the complete description before use. 


The TRAPDUMP command controls the stand-alone (system) dump facility of OS/2. It will enable initiation of a stand-alone dump at the 
instant a ring 3 trap occurs for which no exception handler has intervened. 

Ring 0 traps may be also intercepted only on 2.1 1 systems to which APAR PJ12258 has been applied (kernel revision 6.624), or on OS/2 
Warp. 

Pre-Warp considerations: The dump process is performed by the hidden module OS2DUMP, which resides in the root directory of the boot 
drive. OS2DUMP as supplied with GA versions of OS/2 2.x dumps only to diskette. It may be replaced with a version supplied with OS/2 
Problem Determination Package (OS2PDP) which will dump to a hard disk FAT partition that has volume label SADUMP or to diskette, 
depending upon TRAPDUMP command specification. 

The GA 2.x version of OS2DUMP requires the first dump diskette be freshly prepared using the CREATEDD command and subsequent 
diskettes to be formatted. See the on-line OS/2 Command Reference for details of CREATEDD. 

The OS/2 Problem Determination Package (OS2PDP) version of OS2DUMP only requires formatted diskettes, the use of CREATEDD being 
redundant. 

When dumping to hard disk the dump partition must to be made known to TRAPDUMP. This is done by specifying an optional second 
parameter. 

OS/2 Warp considerations: Under OS/2 Warp the CREATEDD command is unnecessary and is not distributed with the system. Ordinarily 
formatted diskettes may be used. Furthermore the enhanced version of OS2DUMP that allows dumping to a hard-disk FAT partition is 
standard. The partition volume label must be SADUMP. 

Syntax. 


TRAPDUMP= [ON | OFF | RO] [,PD] [,]X: 


Parameters 


ON 

Specifies that the stand-alone dump process will be automatically initiated whenever an unrecoverable ring 3 trap 
occurs. For 2.1 1 systems with APAR PJ12258 or OS/2 Warp, any system IPE (including ring 0 traps) will also initiate 
a dump when ON is specified. 

OFF 

Specifies that the stand-alone dump process will not initiate automatically when an unrecoverable trap occurs. This is 
the default option. It does not prohibit the use of the Ctrl-Alt-Numlock-Numlock or Ctrl-Alt-FI 0-F1 0 key sequence or 
the use of DosForceSystemDump to force a system dump to be initiated. 

RO 

Specifies that only ring zero traps and IPEs will automatically initiate the stand-alone dump process. This option 
applies only to 2.1 1 systems with APAR PJ12258 or OS/2 Warp. 

Note: 

When an IPE occurs the dump is taken immediately on displaying the IPE trap screen. For the purposes of 
dump analysis the formatted registers from the IPE screen should be located from the video buffer, which 
may be viewed using the analyse option from PMDF. 

PD 

Specifies that a system level process dump will be attempted if the user uses either the Ctrl-Alt-Numlock-Numlock or 
Ctrl-Alt-FI 0-F1 0 key sequences. If for some reason the process dump doesn not compete, a second key sequence 
will initiate a system dump. On completion of either the system or process dump, the system is re-booted 
automatically. 

X: 

specifies the hard-disk FAT partition to which OS2DUMP will write a stand-alone dump. The partition letter must have 
the colon suffix. 

Note: 


The partition may be specified with either ON or OFF. When specified with OFF it will allow a stand-alone dump initiated by 
Ctrl-Alt-Numlock-Numlock or Ctrl-Alt-FI 0-F10 key sequences to be written to the dump partition. 

Mountable media other than diskette drives are not detectable by OS2DUMP. The letter specifying the dump partition must be 


calculated as if any such media were not present. 

Only hard disk logical drives and primary partitions may be specified. 

When dumping to a hard disk partition is selected the system is automatically re-booted on completion of the dump. 
System Dump parameter may also be set dynamically from the command line by using the TRAPDUMP command. 

Warnings: 

The stand-alone dump process will erase all data on the dump media (disk partition or diskettes) before writing the dump. 
Do not specify a disk partition or use diskettes that contain vital data. 


Miscellaneous RAS Command Utilities 


OS/2 provides a number of command line utilities for use in problem in problem determination and controlling system RAS settings 
synamically. The commands described in this section have not been formally documented at all versions of OS/2 and so are described here. 

The commands described are: 

TRAPDUMP 

TRAPLOG 

SYSDUMP 


TRAPDUMP 


The TRAPDUMP command allows the conditions under which a trap will initiate a System Dump to be set dynamically. 

Warning: 

The initiation of a System Dump causes an immediate termination of the system without any shutdown. No file system shutdown is 
performed. The system behaves as if a fatal crash has occurred, thus under rare circumstances data can be lost. 

Syntax. 

TRAPDUMP [[ON] | [OFF] | [ RO ] ] [x:] [/NOCHECK] [QUERY] 


Parameters 

ON 

OFF 

RO 


enables all application and system traps to initiate a System Dump. 

disables automatic dump initiation. 

enables only Ring 0 traps to initiate a System Dump. 


x: 


specifies the Dump Partition. 


/NOCHECK 

disable the check for system level OS/2 Warp V4.0. This parameter is now obsolete, since the TRAPDUMP 
command is now abailable on all supported releases of OS/2. 

QUERY 

shows the current settings for TRAPDUMP as a CONFIG.SYS statement and an equivalent command line command. 

Remarks 


ON, OFF and RO parameters are mutually exclusive. 

The PD option of the CONFIG.SYS TRAPDUMP cannot be set dynamically. 

TRAPDUMP was made available at fix pack 29 for OS/2 Warp V3.0 and base releases of later versions of OS/2. 


TRAPLOG 


The TRAPLOG command allows dynamic control of trap and exceptions popup message logging and display. 

Syntax. 

TRAPLOG [x: | NOLOG] [POPUPS I NOPOPUPS] 


Parameters 


x: 

NOLOG 

POPUPS 

NOPOPUPS 


Remarks 


specifies that trap information is to be logged in x:\POPUPLOG.OS2, x: being any partition drive letter. 

disables logging of trap information. 

enables the trap information pop-up message (SYS317x). 

disables the trap information pop-up message. 


If neither POPUPS nor NOPOPUPS is specified then the state of POPUP suppression is left unchanged. 

If neither x: nor NOLOG is specified then the state of logging is left unchanged. 

An applicaiton may temporarily disable exception popup messages by use of the DosError API. Use of yhis will not affect 
logging. 

TRAPLOG was made available at fix pack 29 for OS/2 Warp V3.0 and base releases of later versions of OS/2. 


SYSDUMP 


The SYSDUMP command forces a System Dump to be initiated immediately regardless of the TRAPDUMP settings. 

Warning: 

The initiation of a System Dump causes an immediate termination of the system without any shutdown. No file system shutdown is 


performed. The system behaves as if a fatal crash has occurred thus under rare circumstances data can be lost. 

Syntax. 

SYSDUMP [/NOPROMPT] 

Parameters 

/NOPROMPT 

The user will not be prompted for a confirmation to preceed with initiating a system dump. The default behaviour is to 
prompt for confirmation with following message: 

"Do you want to force a system dump? (Y/N) " 


Remarks 

The SYSDUMP command may be used from within a CMD file to automate the creation of a system dump. 


OS/2 RAS Application Programming Interfaces 


This chapter describes the subset of OS/2 RAS APIs for use by application programmers, which are not described in the OS/2 Technical 

Library, Control Programming Reference. 

CAUTION: 

Some RAS Programming interfaces may be specific to a particular release of OS/2 or have release specific function. 

The APIs discussed in this section are: 

DosSysTrace 

DosGetSTDA 

DosForceSystemDump 

DosDumpProcess 

DosSuppressPopUps 

DosQueryRASInfo 

16-bit Error Logging APIs: 

DosLogRegister 
DosLogEntry 
DosLogRead 
32-bit Error Logging APIs: 

LogOpen 

LogClose 


LogAddEntries 


DosSysTrace (Static Trace Event Recording) 


Static trace recording is available as both an API and a DevHIp routine. 
Select one of the following: 

• DosSysTrace 
DevHlp_RAS 


DosSysTrace (Add a Trace Record to the System Trace 
Buffer) 


DosSysTrace allows a subsystem or system extension to add information to the system trace buffer. 
Note: DosSysTrace is a 16-bit API. 


Coding Examples. 


EXTRN DosSysTrace : FAR 


PUSH 

WORD 

MajorCode 

; major trace event code 

(240-255) 

PUSH 

WORD 

Length 

; length of the variable 
; area to be recorded (0- 

length 

-512) 

PUSH 

WORD 

MinorCode 

; minor trace event code 

(0-255) 

PUSH0 

OTHER 

Data 

; pointer to the area to 
; (address parameter) 

be traced 

CALL 

DOSSYSTRACE 




16-bit MASM Example 


APIRET1 6 APIENTRY1 6 DosSysTrace (USHORT MajorCode, USHORT Length, 

USHORT MinorCode, PCHAR pData) ; 

32-bit code Example using CSet/2 


Parameters 


MajorCode 

The major code to be placed in the trace buffer. Only the low order byte is used. The high order byte should be 0 for 
future compatibility reasons, but no error checking of the high order byte is performed. 

Length 

The length of the area pointed to by the address parameter. If a length greater than 51 2 is specified, only 51 2 bytes 
will be recorded. If a length of 0 is specified, the address parameter will not be used; however, a dummy doubleword 
must be pushed on the stack so that all calls use the same stack space. 

MinorCode 

The minor code to be placed in the trace buffer. This code identifies the specific trace event. Only the low order byte 
is used. The high order byte should be 0 for future compatibility reasons, but no error checking of the high order byte 
is performed. 

pData 

The address of the variable length data area which contains additional information that the system trace function will 
add to the trace buffer. If a length of 0 is specified, the address will not be used, but a value must still be added to the 
stack. 

Results. 


DosSysTrace returns the following vaules: 


NO_ERROR 


ERROR_SYSTEM_TRACE (Trace is disabled for that event) 


IF AX = 0 

Data traced 

ELSE 

AX = Error_System_Trace 
Data not traced 


Note: An example of when data would not be traced is if the major event code is not currently selected for tracing. 


Remarks. 


All trace records consist of a header and optional data. The header record is built by DosSysTrace and contains: 

• Major event code 

• Minor event code 

• Process ID of caller 

■ Time stamp when the time is different from the previous trace record 

• Flag field 

• Data field (optional) 

The optional data field contains the variable-length data as passed by the caller. 

The trace facility maintains an array of 32 bytes (256 bits), in which each bit represents a major event code. This array is updated each time 
the user enables or disables tracing of a major event. The trace facility checks this array each time it is called to ensure that the major event 
specified is currently enabled for tracing. The array is located in the Global Information Segment. 

A prototype definition for DosSysTrace may be found under RAS API Prototypes. 


DevHIp RAS (Add a Trace Record to the System Trace 
Buffer) 

The DevHlp_RAS function provides a service for device drivers to add information to the System Trace buffer. 

Note: DevFllp_RAS is a 1 6-bit API. 

Coding Example. 


MOV 

AX, MajorCode 

; major trace event code 

(240-255) 

MOV 

BX, Length 

; length of data area (0- 

-512 bytes) 

MOV 

CX, MinorCode 

; minor trace event code 

(0-255) 

LDS 

SI, pData 

; pointer to trace data 


MOV 

DL, 28H 

; DevHlp_RAS function code 

CALL 

[Device_Help] 

; invoke device helper 



16-bit MASM Example 


Parameters. 

MajorCode 

The major code to be placed in the trace buffer. Only the low order byte is used. The high order byte should be 0 for 
future compatibility reasons, but no error checking of the high order byte is performed. 


Length 


The length of the area pointed to by the address parameter. If a length greater than 51 2 is specified, only 51 2 bytes 


will be recorded. If a length of 0 is specified, the address parameter will not be used; however, a dummy doubleword 
must be pushed on the stack so that all calls use the same stack space. 


MinorCode 

The minor code to be placed in the trace buffer. This code identifies the specific trace event. Only the low order byte 
is used. The high order byte should be 0 for future compatibility reasons, but no error checking of the high order byte 
is performed. 

pData 

The address of the variable length data area which contains additional information that the system trace function will 
add to the trace buffer. If a length of 0 is specified, the address will not be used, but a value must still be added to the 
stack. 

Results. 


If CF = 0 

Trace record placed in trace buffer 
Else 

Data not traced 


The possible errors are : 

• Tracing suspended 

• Minor code not being traced 

• PID not being traced 

• Trace overrun 


Remarks. 


The trace facility maintains an array of 32 bytes (256 bits), in which each bit represents a major event code. This array is updated each time 
the user enables or disables tracing of a major event. The device driver must check this array before calling DevHlp_RAS to ensure that the 
major event specified is currently enabled for tracing. This array is located in the Global Infoformation Segment. 

All registers are preserved. Interrupts are disabled while the trace data is saved and then re-enabled if they were initially enabled. 


DosGetSTDA (Get The System Trace Data Area) 


The DosGetSTDA API is a 16 bit API that returns a copy of the system trace buffer (STDA). 

Syntax 

The following 16 bit C language function prototype can be used to call the DosGetSTDA API: 


// 16 bit compiler 

extern unsigned far pascal DosGetSTDA ( SEL, SHORT, SHORT ); 
// 32 bit compiler 

APIRET1 6 APIENTRY1 6 DosGetSTDA ( SEL, SHORT, SHORT ); 

Where: SEL is the selector to the private buffer 

SHORT is the offset to the private buffer 
SHORT is the size of the buffer 
(maximum value = 64KB) 
records 


Returns: 0 - indicates correct operation, buffer is now filled 

with copy of the system trace buffer 
ERROR_SYSTEM_TRACE - System trace is not enabled 


Linker Considerations 


In order to successfully resolve DosGetSTDA function calls in your program, the following lines must be added to the Linker Definition 
(DEF) file: 


IMPORTS 

DOS GETSTDA=DOS CALL 1 .119 


Remarks 


DosGetSTDA returns a buffer that contains a copy of the system trace buffer. The buffer is circular with a header record that contains 
pointers to the first and last data bytes and a pointer to the next byte that was available for writing (the buffer is a snapshot of the system 
trace buffer at the time that the API was called). A set of trace records follows the header. Each trace record contains a trace event trailer 
and optionally a timestamp and/or a data field. A Timestamp record is optional and will only exist if bit 2 of the flag field in the Trace Event 
Trailer is set to OFF. 

The trace event data contains the information describing each individual trace event. The events traced may be from OS/2 system supplied 
or other user supplied tracepoints. In either case the data is dependent on each individual tracepoint. Descriptions of the data and formatting 
instructions for the OS/2 system supplied tracepoints can be found in the System Tracepoints Reference chapter. 


Trace Buffer Structures 


Note: 


The from OS/2 2.1 1 fix pack 91 and OS/2 3.0 fix pack 8 the format of the STDA has changed to allow more meaningful time-stamp 
information. See New STDA Format at the end of this section for details. 


Circular Trace Buffer (STDA) 


Pointer to 
First (#1) 

Entry #3 

SYSTRACE . 0 


Pointer 1 
Pointer 2 
Pointer 3 

Timestamp 

Flags 

Process ID 
Minor Code 
Length 
Major Code 


Pointer to Pointer to 
Next (#3) Last (#2) 

Entry #10 

2 


Major Code 
Length 
Minor Code 
Process ID 
Flags 
Timestamp 
Data (2 bytes) 


Field Descriptions: Trace Control Record 


Name 

ID of Data Area 
Pointer 1 
Pointer 2 
Pointer 3 


#Bytes Description 
8 Contains ASCII 'SYSTRACE' 

2 Offset of first byte of the trace buffer 

2 Offset of last byte of the trace buffer 

2 Offset of next available byte in the 

trace buffer 


Field Descriptions: Trace Event Trailer Record (with Timestamp) 


Name 


#Bytes Description 


Timestamp 


Flags 


PID 

Minor Code 


2 Timestamp in seconds and hundredths of seconds (Conditional 

on bit 1 in the Flags byte) 

1 Trace record flag 

Bit 0 : 0 indicates an internal kernel generated trace 
record. 

Bit 1: 0 indicates that a time-stamp is present. 

Bit 2: 1 signifies that the trace record was generated in 
protect mode . 

Bit 3: 0 signifies a static trace record, 1 a dynamic trace 
record . 

Bit 4: 1 indicates an incomplete dynamic trace record. 

Bit 5-7: reserved. 

2 ID of the process calling the API being traced 

2 Minor Event Code 


Length 2 Length of data for the traced API 

Major Code 1 Major Event Code 


Remarks 


The buffer returned by DosGetSTDA is a simple circular buffer that is a snapshot of the OS/2 System T race buffer at the time that the API 
was called. The actual System Trace buffer is emptied by the call. The buffer contains a header record that has pointers to the FIRST, LAST 
and NEXT bytes in the buffer. The offsets of the FIRST and LAST bytes are constant and the offset to NEXT is used to indicate the last 
(most recent) trace record in the buffer. This pointer is logically moved backwards as the buffer is traversed. Since it is possible for a trace 
record to wrap back to the end of the buffer, it is necessary to look at each part of the data individually (trailer, timestamp and data) to 
determine whether the length of the data is greater than the distance between NEXT and FIRST. If the length is greater, then the data is 
continued at the offset to LAST. 

For example (see figure below), the buffer has been traversed until the pointer to NEXT is at byte 26. The event trailer record is 8 bytes and 
the distance from NEXT to FIRST is 12, so the trailer is in contiguous memory. The pointer to NEXT is then set to byte 18. There is a 
timestamp which is two bytes. Our distance to FIRST is now 4 so the timestamp is contiguous and the pointer to NEXT is reset to 16. This 
record has 4 bytes of data attached to it. The distance to FIRST at this point is 2, so the data is wrapped: 2 bytes are adjacent to the NEXT, 
and the other 2 bytes begin at the pointer to LAST. 


First (Byte 14) 


Next (byte 26) 


Last 


TRACE HEADER T EVENT TRAILER T EVENT TRAILER (other trace 

(14 BYTES) DATA S DATA LENGTH: 4 S DATA LENGTH: 0 records) DATA 


2 Bytes 


2 Bytes 


End of data in the trace buffer is indicated by a trace event trailer that contains a major code field of zero and a length field of zero. 

The display format of the OS/2 system supplied tracepoint data is described in the System Tracepoints Reference chapter. Note that for 
data using the '%S' (ASCIIZ string) format type, the first byte of the data is reserved, bytes two and three contain the actual length of the 
string and the string begins at byte 4. 

TRACEFMT Unformatted Trace Buffer 

The trace formatter (TRACEFMT) is able to save the unformatted STDA buffer for formatting at a later date. The format of this buffer is as 
follows: 


File Header 


STDA LN DATETIME 


CHECK KEY 


0 


4 


f 


la 


STDA 


SYSTRACE STA END NXT TRACE RECORDS 
la 22 24 26 28 


Remarks 

STDA LN 

ULONG length of the STDA read by DosGetSTDA. Length is 1 greater than then STDA end offset. 

DATETIME 

A DATETIME structure returned by DosGetDateTime when this file buffer is created. 

CHECK KEY 

The DATETIME field Exclusively ORed with the string constant ''TRCFMTBUFF$" 

STDA 

The STDA returned by DosGetSTDA. 

Note: 


DosGetSTDA resets the internal start, end and next offsets after the STDA has been read. This allows trace formatting programs to 
detect an empty buffer. 

For GA OS/2 2.x and 3.x the default start offset is OxOOOe. 

After fix pack 91 (OS/2 2.1 1) and fix pack 8 (OS/2 3.0) the the default start offset is 0x001 e. 


New STDA Format 


From fix pack 8 (OS/2 3.0) and fix pack 91 (OS/2 2.1 1) the system trace was enhanced to provide improved time-stamp information. Each 
trace records is time-stamped in hours, minutes, seconds and 1/100 seconds. The trace logging start and stop times are also logged and 
displayed by the TRACEFMT command. 

The spare bytes between the end of the STDA header and first trace record have been reserved for storing trace start and stop times. These 
are of the following format: 


STDA 


yymdhnscYYMDHNSC TRACE RECORDS 
28 30 38 


Where: 

yymdhnsc is the TRACE ON date and time in years, months, days, hours, seconds and 100th seconds. 

YYMDHNSC is the TRACE OFF date and time in years, months, days, hours, seconds and 100th seconds. 

The time-stamp field of a trace record in now 4 bytes and contains in addition hours and minutes. The following diagram compares the 
different trace records of both old and new formats: 

Old format with time-stamp: 


Optional Data s h f Pid Min Len Maj 



-4 


5 


7 


0 12 3 

Old format without time-stamp: 

Optional Data f Pid Min Len Maj 
-8 -4 0 1 3 5 7 


New format with time-stamp: 

Optional Data H M s h f Pid Min Len Maj 
-8 -4 0123457 9a 


where: 

Optional Data 

H 

M 

s 

h 

Pid 

Min 

Len 

Maj 

Notes: 


is trace data of length specified by the Len field, 
is time in hours, 
is time in minutes, 
is time in seconds, 
is time in 1/1 00 seconds. 

is the process id under which the entry was logged. Zero implies interrupt time, 
is the minor code. 

is the length of the optionally traced data, 
is the major code. 


The format of the buffer used by TRACEFMT has not changed. Thus, as long as a correct header is appended to the extracted 
STDA then the new TRACEFMT will format the traced data. 

The new TRACEFMT will also format trace data of the older format. 

STDAs of the new and old formats may be distinguished by the value of the start offset in the STDA header: 

For the old format this is OxOOOe. 

For the new format this is 0x001 e. 


DosForceSystemDump (Force a System Stand Alone Dump) 


DosForceSystemDump allows an application to initiate a stand-alone system dump. 

Syntax 

APIRET APIENTRY DosForceSystemDump (ULONG reserved); 

32-bit code Example using CSet/2 



Parameters 


reserved 


Reserved doubleword field that is set to OL. 


Returns. 

There is no return from this API. 

Remarks. 

There is no return from this API. The system is halted abruptly and a stand-alone dump is initiated. After the stand-alone dump process has 
completed the system must be re-booted. 

No shut down activity is performed when this API is called. File system buffers are not written to disk, cache is not flushed and files are not 
closed. Data loss may result. 

DosForceSystemDump is equivalent to using the Ctrl-Alt-Numlock-Numlock key sequence. 

C Language prototype definitions for the DosForceSystemDump API may be found under RAS API Prototypes. 

To format a system dump see The Dump Formatter User Guide. 

For related information see: 


TRAPDUMP CONFIG.SYS command 

CREATEDD command in the OS/2 Command Reference 


DosDumpProcess (Enable/Disable ProcessDump) 


DosDumpProcess allows an application: 

• to enable or disable dynamically the Process Dump Facility. 

• to force a process dump for a given process. 

P.The default setting is for Process Dump to be disabled unless overridden by the DUMPPROCESS CONFIG.SYS command. 

Syntax 

APIRET APIENTRY DosDumpProcess (ULONG Flag, ULONG Drive, PID pid) ; 

32-bit code Example using CSet/2 


Parameters 

Flag 


Doubleword field that may take one of the following values: 
(DDP_DISABLEPROCDUMP OxOOOOOOOOL) 

disable process dumps 

(DDP_ENABLEPROCDUMP 0x00000001 L) 

enable process dumps to be taken to a file in the root directory of a drive specified by the Drive parameter. 

(DDP_PERFORMPROCDUMP 0x00000002L) 


Drive 

Doubleword containing the ASCII value of the drive letter to which the PDUMP.nnn dump files will be written when 
DDP_ENABLEPROCDUMP is specified. For DDP_DISABLEPROCDUMP this parameter is ignored. 


pid 


Doubleword containing the process Id of the process to be dumped. 


This option is valid only with DDP_PERFORMPROCDUMP. If zero is specified for Pid then the current process is 
dumped. 

Returns. 

Return Code. 

DosDumpProcess returns the following values: 


0 


NO_ERROR 


87 


ERROR_INVALID_PARAMETER 


303 


ERROR_INVALID_PROCID 


Remarks. 

When Process dump is enabled a dump file is written whenever a ring 3 process traps. The file takes a name PDUMP.nnn where nnn is 
incremented sequentially (staring from 000) for each successive dump. 

The directory to which PDUMP.nnn will be written is always the root directory of Dr/Ve. 

C Language prototype definitions for the DosDumpProcess may be found under RAS API Prototypes. 

The content of a Process Dump comprises register information at time of trap, system control blocks (TCB, TSD, PTDA, MTE, SMTE, OTE, 
VMAR, VMOB, LTD) that describe the state of the process at the time of error, ring 0 and ring 3 stack data for the trapping process. 

See the Process Dump Formatter section of the Dump Formatter User Guide for information on formatting Process Dumps. 

Note: 


DDP_PERFORMPROCDUMP is not available in some early releases of OS/2 V2.11 


DosSuppressPopUps (Suppress Trap Exception Pop-Up 
Messages) 


DosSuppressPopUps allows an application to enable or disable dynamically Trap Exception pop-up suppression and to specify the drive 
where the pop-up suppression log will be recorded. 

The default setting is for disabled pop-up suppression unless overridden by the SUPPRESSPOPUPS CONFIG.SYS command. 

Syntax 

APIRET API ENTRY DosSuppressPopUps (ULONG Flag, ULONG Drive); 

32-bit code Example using CSet/2 


Parameters 

Flag 

Doubleword field that may take one of the following values: 

• (SPU_DISABLESUPPRESSION OxOOOOOOOOL) 

Disable pop-up suppression 

• (SPU_ENABLESUPPRESSION 0x00000001 L) 

Enable pop-up suppression and pop-up logging to file POPUPLOG.OS2 on drive specified by the Drive parameter. 


Drive 


Doubleword containing the ASCII value of the drive letter to which the POPUPLOG.OS2 log file will be written when 
SPU_ENABLESUPPRESSION is specified. With SPU_DISABLESUPPRESSION, Drive is ignored. 

Returns. 

Return Code. 

DosSuppressPopups returns the following values: 


0 


NO_ERROR 


87 


ERROR_INVALID_PARAMETER 


Remarks. 

The directory to which POPUPLOG.OS2 will be written is always the root directory of Drive. 
A prototype definition of DosSuppressPopUps may be found under RAS API Prototypes. 
See also DosError API in the Control Program Programming Reference. 


DosQueryRASInfo (Query RAS Information) 


DosQueryRASInfo returns information about active trace event recording and System Logging facility from the Global Information Segment 
(InfoSegGDT). dump. 

Syntax 

APIRET APIENTRY DosQueryRASInfo (ULONG Index, PPVOID Addr) ; 

32-bit code Example using CSet/2 


Parameters 

Index 

Doubleword field that may take one of the following values: 

(SPU_SIS_MEC_TABLE 0x00000001 L) 

Return the address of the table of actively traced major event codes in the InfoSegGDT. The table is 32 bytes long, each bit represents each 
major event code from 0 to 255. 

• (SIS_SYS_LOG Ox00000002L) 

Return the address of the SYSLOG status word from the InfoSegGDT. The status may contain a combination of: 

(LF_LOGENABLE 0x0001 ) Logging enabled 
(LF_LOGAVAILABLE 0x0002) Logging available 

Returns. 

Return Code 

DosQueryRASInfo returns the following values: 

0 

NO_ERROR 


5 


ERROR ACCESS DENIED 


ERROR_INVALID_PARAMETER 


Remarks. 

For related information see: 

• Logging Facility 

• The OS/2 Trace Facility 


16 Bit Error Logging API's for IBM OS/2 Version 2.1 

This section describes the "Logging Facility for OS/2 2.1". This comprises a set of 3 APIs, the logging deamon (LOG. SYS) and the log 
formatter (SYSLOG). 

Both the Logging Deamon and Log Formatter are described in the OS/2 Command Reference - see LOG. SYS under DEVICE statement of 
CONFIG.SYS and the SYSLOG command. 

Note: 

C Language prototype definitions for the Error Logging APIs may be found under RAS API Prototypes. 

The following topics are described in this section: 

• Static vs Dynamic Error Log Record I.D. Registration 

• DosLogRegister API 

• DosLogEntry API 

• DosLogRead API 

• Error Log Entry Formatting DLL Routines 


Dynamic vs. Static Error Log Record I.D. Registration 


OS/2 2.0 users of the DosLogEntry API will not need to use the DosLogRegister API. The DosLogRegister API is only maintained on 
OS/2 2.0 to support existing OS/2 1 .3 programs that did need to use the API. 

The OS/2 2.0 version of the DosLogRegister API will always return a "default" Error Log record I.D.. It will accept a format template string 
as an input, but it will do nothing with the string since format template strings will not be saved within the OS/2 2.0 version of the Error Log 
file. 

The OS/2 2.0 version of the DosLogEntry API will behave similarly to the OS/2 1 .3 version of the API. Since the OS/2 2.0 version of the 
system Error Logging facility no longer supports the saving of format template strings within the Error Log file, it is necessary to provide a 
method by which DosLogEntry callers can associate their Error Log entry with a formatting (.DLL) routine. The OS/2 2.0 version of the 
DosLogEntry API will make a special interpretation of the Originator Name field within the packet header. It will be assumed that this name 
field (if not NULL) contains the name of a Error Log formatting .DLL module. 


DosLogRegister 


There are two major differences between the OS/2 2.0 version of DosLogRegister and the 1 .3 version of the API: 


DosLogRegister no longer supports dynamic registration of Error Log record I.D.’s. Instead, the API always returns a single 


'default" value. 


• DosLogRegister no longer supports entry format template registration. While the API still accepts a format template as part of 
its input data packet, the format template will not be acted upon in any way. 

DosLogRegister continues to support the existing alert notification registration function. 

The description of the OS/2 2.0 version of the DosLogRegister API follows: 

Syntax 


APIRET16 API ENTRY 16 DosLogRegister ( (PUSHORT) LogHandle, 

(PVOID) LogRegList, 
(PUSHORT) RequestID) 


32-bit code Example using CSet/2 


Parameters 

LogHandle 

The address of the word in which the system will return the handle of a named pipe that will be transparently used in 
subsequent DosLogRead calls. 

LogRegList 

The address of the log registry buffer. 

RequestID 

The address of the word that the system will fill in with a "default" Error Log record I.D. (if the 'Error Log record I.D.' 
field in the log registry buffer is set by the caller to -1) 

Returns 

Return code 

DosLogRegister returns the following values 


non-zero 

Failure. 

Possible reasons for failure are: 

Facility unavailable 
Record I.D. in use 
Registration failed (general failure) 
Invalid I.D. 

Too many open files 
Too many semaphores 
Semaphore not found 
User semaphore limit reached 
Request timed out without satisfaction 
Error Log buffer temporarily full 

Remarks 

Log Registry Buffer format description: 


length of the registration data 


2 



reserved 


2 


Error Log record I.D. 2 
offset to the format template layout field 2 
semaphore name string variable length 
format template layout variable length 


Where: 

'length of the registration data' 

is the total number of bytes in the current Log Registry Buffer (this length includes the two byte length field itself) 


'reserved' 


is a two byte reserved field 


'Error Log record I.D.' 

contains the Error Log record I.D. that caller wishes to be registered for. If the field is set to OxFFFF (-1), then a 
"default" record I.D. is returned in the word pointed to by the'RequestID' parameter. This field can be used to specify 
an alert notification record I.D. (that is, the caller wishes to be alerted whenever an Error Log Entry containing this 
record I.D. is logged). 

'offset to the format template layout field' 

is the offset within the Log Registry Buffer to the start of the format template layout area. 

'semaphore name string' 

is the name of a system semaphore, created with the nonexclusive option, that will be used to alert the caller's 
process when an Error Log entry containing the specified 'Error Log record I.D.' is logged. The name string is an 
ASCIIZ string. 

'format template layout' 

is an area within the Log Registry Buffer that contains the formatting structure information that is placed within the 1 .3 
Error Log file. This area is not used in the OS/2 2.0 version of the DosLogFtegister call. Flowever, the 'length of the 
registration data' field should reflect the size of this area. 

In order to resolve successfully DosLogFtegister function calls in your program, the following lines must be added to the Linker Definition 
(DEF) file: 


IMPORTS 

DOSLOGREGISTER=DOSCALLl .195 


DosLogEntry 


There are two major differences between the OS/2 2.0 version of DosLogEntry and the 1 .3 version of the API: 

• Since the DosLogFtegister API will only return a "default" Error Log record I.D. to its caller, the DosLogEntry caller must 
override this "default" record with the appropriately statically allocated record I.D. if the caller wishes to see the "correct" record 
I.D. in the Error Log record. 

• Since there is no explicit "Error Log record formatting DLL module name" field in the DosLogEntry log data packet, the API will 
attempt to interpret the 'Originator Name' field in the packet's header portion as a formatting DLL module name. 

The description of the OS/2 2.0 version of the DosLogEntry API follows: 

Syntax 


APIRET16 API ENTRY 16 DosLogEntry ( (USHORT) Function, 



(PVOID) LogData) 


32-bit code Example using CSet/2 


Parameters 

Function 

specifies the type of log entry: 

OH Reserved 

1H Error Logging 

2H-FFFFH Reserved 

LogData 

is the address of the log data buffer that contains one or more variable length log packets. 

Returns 

Return Code. 

DosLogEntry returns the following values: 

0 

Success 


non-zero 

Failure 

Possible reasons for failure: 

Invalid function 

Facility unavailable 

Facility suspended 

Error Log buffer temporarily full 

Remarks 

Error Log Data Buffer format description: 

Multiple log packets can be included within a single log data buffer. In the following diagram, the size of each field is indicated in bytes 


# of log packets (within the buffer) 2 

length of the current log packet 2 < 

Error Log record I.D. 2 

time of logging 4 

date of logging 4 

originator name 8 

qualifier name 4 

Error Log entry data <= 1024 < 


multiple 
log packets 
within a 
single log 
data buffer 


Where: 

'# of log packets' 

is the number of separate packets contained within the user's buffer 

'length of the current log packet' 



is the number of bytes in the current log packet within the user's log data buffer (this length includes the length of all 
the log packet control fields and the size of the Error Log entry data). 

'Error Log record I.D.' 

is the record I.D. for the current Error Log entry (I.D. registration will be statically registered by the OS/2 development 
organization). The caller may pass in the "default" Error Log record I.D. that is returned by the DosLogRegister API. 

'time of logging' 

is filled in by the system Error Logging facility ) 

'date of logging' 

is filled in by the system Error Logging facility 

'originator name' 

is a primary name field that is provided by the caller 

'qualifier name' 

is a secondary name field that is provided by the caller 

'Error 

Log entry data' is an optional variable length set of data that can be supplied by the caller (the format of the data is 
under the control of the caller). 

In order to successfully resolve DosLogEntry function calls in your program, the following lines must be added to the Linker Definition 
(DEF) file: 


IMPORTS 

DOS LOGENTRY=DOS CALL 1 . 1 93 


DosLogRead 


The description of the OS/2 2.0 version of the DosLogRead API follows: 


APIRET16 API ENTRY 16 DosLogRead ( (USHORT) LogHandle, 

(USHORT) Length, 

(PVOID) LogBuffer, 

(PUSHORT) ReadSize) 

32-bit code Example using CSet/2 


Parameters 

LogHandle 

Length 

LogBuffer 

ReadSize 

Returns 


is the named pipe handle returned by DosLogRegister() 
is the length (in words) of the caller's log buffer 

is the address of the caller's buffer, into which the system Error Logging facility will place a single Error Log entry 
packet (formatted in the manner of the 1 6 bit DosLogEntry API). 


is the address of a word, into which the system Error Logging facility will place the number of bytes that it wrote into 
the caller's log buffer. If a zero is returned here, then there was no Error Log packet to return. 


Return code 



DosLogRead returns the following values: 


0 


indicating Success. 


non-zero 


indicating error 
Possible reasons for failure: 

Invalid log handle 
Facility unavailable 
Buffer too small 

In order to resolve successfully DosLogRead function calls in your program, the following lines must be added to the Linker Definition (DEF) 
file: 


IMPORTS 

DOS LOGREAD=DOS CALL 1 .196 


DosLogRead returns Error Log entries that are formatted in the manner of the 16 bit DosLogEntry API. 


Error Log Entry Formatting DLL Routines 


Each Error Log record within an Error Log file can contain the name of a formatting DLL module. A formatting DLL module is invoked by the 
SYSLOG utility when SYSLOG encounters an Error Log record that contains the name of the DLL module. 

Each formatting module contains a single formatting routine that can be identified by an ordinal value of 1 . The formatting routine can be 
designed to handle a single type of Error Log entry or to handle multiple types of Error Log entries. When SYSLOG passes control to a 
formatting routine, it passes the entire Error Log record (both header portion and data portion) to the formatting routine. The formatting 
routine has the complete flexibility to format an Error Log entry as it deems appropriate. 

SYSLOG uses the DosLoadModule API to create a run-time link to the specified formatting DLL module. It uses the DosFreeModule API 
to free the DLL module after it receives its response from the formatting routine. 

There are no specific rules that govern the naming of a formatting DLL module. However, since it is desirable to reduce the possibility of 
"colliding" with another DLL module of the same name, it is suggested that a formatting DLL module be labelled with a name that adheres to 
the following standard form: 


ELGxxxxx.DLL (where "xxxxx" corresponds to the Error 

Log record I.D. (in ecimal) of any one 
of the types of records that the formatting 
routine is designed to handle) 


for example, "ELG00127.DLL" is a standardized name for a formatting DDL 
module that recognizes (among other things) 

Log records with I.D. of 127 (decimal) 


This standard naming convention is suggested because it is assumed that the Error Log records of any one I.D. will only be recognized by a 
single formatting routine. Therefore the use of the "xxxxx" suffix (based on record I.D.) should assure uniqueness for the formatting module 
name. 

The static Error Log record I.D. registration mechanism that is enforced by the OS/2 development organization will attempt to keep a list not 
only of the Error Log record I.D.'s in use, but also the names of the formatting DLL modules that correspond to each record I.D.. This will 
also help to reduce the possibility of formatting DLL module names "colliding". 

In addition to its single formatting routine, each formatting DLL module must contain a global variable named "ELOG_FORMAT". For OS/2 
2.0, this exported global variable must be set to a value of 1 . When SYSLOG loads a prospective formatting DLL module it attempts to 



access this global variable and check whether it has the expected value of 1 . If the global variable check fails, then SYSLOG can conclude 
that it has accidentally loaded another DLL module with the same name as the formatting module that is mentioned in the Error Log entry. 
This check is intended as a form of protective validation for SYSLOG. The variable will in future releases be used as a revision level for the 
SYSLOG/formatting DLL module interface specification. 

When a user constructs a Error Log entry formatting DLL module, care should be taken not to export the names of its constituent formatting 
routine (though the required ELOG_FORMAT global variable must be exported). Not exporting the module name will save storage space 
within the OS/2 kernel. The SYSLOG utility will be written to use the "ordinal" version of the DosGetProcAddr API. 

Error Log record formatting DLL routines must be written as 32 bit procedures. A typical Error Log record formatting DLL routine will have to 
accept the parameters: 


ULONG ELGxxxxx ( (PVOID) 
(ULONG) 


Log_Record, (PVOID) String_Buf fer , 

Buf fer_Length, (PULONG) String_Length) 


Parameters 

LogRecord 

a linear pointer to an Error Log record that is being passed from SYSLOG to the formatting routine. The Error Log 
record adheres to the format that is described in the section that follows entitled "Error Log File Entry Format", except 
that the linear pointer points to the "TOT_LENGTFI" field (since the "PREV_PTR" and "PREV_SIZE" fields are of no 
interest to a formatting routine). 

StringBuffer 

is a linear pointer to a buffer provided by SYSLOG so that the formatting routine can return a series of ASCIIZ strings 
to SYSLOG. Each ASCIIZ string should correspond to a line of formatted display. Each ASCIIZ string should be 
limited to a maximum of 80 characters. SYSLOG will paint each string "line" within its client window. The strings 
should not contain NEWLINE characters. SYSLOG will automatically format the header portion of the Error Log entry. 
The formatted output prepared by this routine will follow the formatted header display. 

BufferLength 

is a 32 bit integer that contains the maximum size of the the 'String_Buffer'. 

StringLength 

is a pointer to a 32 bit integer that is set by the formatting routine to the total length of the ASCIIZ strings that have 
been placed in ’String_Buffer’. 


Returns 


ELGxxxxx returns the following: 

0 

indicating success. 


-1 


indicates insufficient space in ’String_Buffer’ positive values indicate formatting routine errors. 


If a formatting DLL routine returns a positive error code to SYSLOG, SYSLOG will format the header portion of the Error Log record in the 
standard manner, display the returned formatting routine error code (as a line within the formatted display), and then format the data portion 
of the Error Log record as a hexadecimal dump. 


If an Error Log record fails to point to a formatting DLL module, or if the formatting DLL module cannot be successfully loaded and validated, 
then SYSLOG will format the header portion of the Error Log record in the standard manner, display a message that a formatting routine 
was not specified or could not be successfully invoked (as a line within the formatted display), and then format the data portion of the Error 
Log record as a hexadecimal dump. 


If there is insufficient space in the 'String_Buffer', then the formatting routine will return a -1 status code, and will place the required length of 
the formatted display string in the caller's output length variable. SYSLOG can react to this error by recalling the formatting routine with a 
larger 'String_Buffer'. 


SYSLOG will contain logic to format the standard SNA Generic Alert entry (that is, Error Log record I.D. of 2). This is necessary since most 
of the existing Error Log calls are used to pass generic alerts (and the existing calls can not pass in formatting DLL routine names). This 
design choice does not prevent future Error Log callers to specify a record I.D. of 2 and also to pass in the name of a formatting DLL routine 
that knows how to specially format that Generic Alert entry. 


32-Bit Error Logging API's for IBM OS/2 Version 2.1 and 3.0 



This section describes the "Logging Facility for OS/2 2.1 and 3.0". This comprises a set of 4 APIs, a DevPIlp function, the logging deamon 
(LOGDAEM.EXE), logging device driver (LOG. SYS) and the log formatter (SYSLOG). 

The Logging Deamon, Device Driver and Log Formatter are described in the OS/2 Command Reference - see LOG. SYS under DEVICE 
statement of CONFIG.SYS and the SYSLOG command. 

Note: 

C Language prototype definitions for the Error Logging APIs may be found under RAS API Prototypes. 

The following topics are described in this section: 

• LogOpen API 

• LogClose API 

■ LogAddEntries API 

■ 32-bit Error Log Entry Formatting DLL Routines 

■ DevHlp_LogEntry Device Driver interface 

The set of four 32-bit logging APIs provide equivalent functionality to the three 16-bit logging APIs discussed in the previous section. They 
may be used as a complete replacement to the 16-bit set. 


LogOpen 


LogOpen is a 32-bit system Error Logging facility high level API. It is used to open a connection to the facility (through the System Logging 
Service device driver). 

The description of the LogOpen API call follows: 

Syntax 


APIRET APIENTRY LogOpen (PHFILE phf); 


Parameters 

phf 

points to a file handle holder that on return will hold an open file handle 

Returns 

Return code. 

LogOpen returns the following values: 

0 

Success. 


non-zero 


Facility not available. 


Remarks 

The file handle that is returned by the LogOpen API is required in all subsequent high level system Error Logging facility API calls. 

In order to resolve successfully LogOpen function calls in your program, the following lines must be added to the Linker Definition (DEF) file 


IMPORTS 

LogOpen=DOSCALLl . 430 


LogClose 


LogClose is a 32-bit system Error Logging facility high level API. It is used to close a connection to the facility. 
The description of the LogClose API call follows: 

Syntax 


APIRET API ENTRY LogClose (HFILE hf); 


Parameters 

hf 

is the file handle returned by LogOpen() 

Returns 

Return code. 

LogClose returns the following values: 

0 

Success. 


non-zero 


Failure. Possible reason: facility not open. 


Remarks 

In order to resolve successfully LogClose function calls in your program, the following lines must be added to the Linker Definition (DEF) 
file: 


IMPORTS 

LogClose=DOSCALLl .431 


Log Add Entries 


LogAddEntries is a 32-bit system Error Logging facility high level API. It is used to allow application processes to add Error Log entries to 
the internal Error Log buffer that is maintained by the System Logging Service device driver. 

The description of the LogAddEntries API call follows: 

Syntax 



APIRET API ENTRY LogAddEntries (HFILE hf, ULONG service, 

PVOID log_data_address) ; 


Parameters 

hf 

service 


is the file handle returned by LogOpenQ 


specifies the class of logging facility: 

0x0 Reserved 

0x1 Error Loggging 

0x2 - Oxffff Reserved 


log_data_address 

is the address of a buffer that contains a variable length Error Log entry. The first word of the buffer contains the 
number of packets in the Error Log entry 

Returns 

Return code. 

LogAddEntries return the following values: 


0 


Success 


non-zero 

Failure 

Possible reasons for failure are: 


Invalid log type 

Facility unavailable 

Facility suspended 

Facility not open 

Error Log buffer temporarily full 

Remarks 

Error Log Entry Buffer format description: 

Multiple Error Log packets can be included within a single Error Log entry buffer. If multiple packets are included within a single buffer, each 
individual packet should be aligned on a double word boundary. In the following diagram, the size of each field is indicated in bytes: 


packet revision number 2 

# of Error Log entry packets 2 

length of this Error Log entry packet 2 < 

Error Log record I.D. 2 


status flags 


4 


qualifier name 
reserved 


4 multiple 

Error 

4 Log entry 

packets 

4 within a 


time of logging 



date of logging 


4 


single 
Error Log 
Entry Buffer 

originator name 8 or 256 

process name (optional) 0 or 260 

formatting DLL module name (optional) 12 

Error Log entry data <= 3400 < 


Where 

'packet revision number' 

is an integer value that can be used to distinguish error logging packets that are intended to be handled by different 
revisions of the LogAddEntries API. For the initial version of the API, this field should be set to a value of 1 . This 
field is included in the packet to support future backward compatibility. 

'# of Error Log entry packets' 

is the number of separate packets contained within the user's buffer. 

'length of this Error Log entry packet' 

is the number of bytes in the current Error Log entry packet within the user's Error Log Entry Buffer (this length 
includes the length of all the Error Log entry packet control fields and the size of the Error Log entry text). To support 
efficient logging execution, this length should be a multiple of 4 bytes (i.e. if necessary the user should pad the Error 
Log entry packet). 


'Error Log record I.D.' 

is the record I.D. for the current Error Log entry (I.D. registration will be statically registered by the OS/2 development 
organization). 


'status flags' 

is a two byte flag holder that contains three single bit flags: 

(BIT 0) is used to indicate whether the current Error Log entry packet contains space in which the Error Logging 
facility can place a long process name ("on" indicates YES, "off" indicates NO); 

(BIT 1) is used to indicate whether the current Error Log entry packet contains an 8 byte originator name or a 256 
byte originator name ("on" indicates a 256 byte originator name, "off" indicates an 8 byte originator name); 

(BIT 2) is used to indicate that the caller has placed time and date values in the Error Log entry packet and does not 
wish to have those values modified during the logging process ("on" indicates that the Error Log entry packet already 
contains time and date values, "off" indicates the packet does not already contain time and date values); 

All the other 29 bits in 'status flags' are considered reserved at this time and will be zeroed by the LogAddEntries 
API. 


'qualifier name' 
'reserved' 

'time of logging' 

'date of logging' 

'originator name' 
'process name' 


is a secondary name field that is provided by the caller 
is a four byte reserved field 

is filled in by the system Error Logging facility (unless BIT 2 of the 'status flags field is "on", indicating that the caller 
has preset a time value). 

is filled in by the system Error Logging facility (unless BIT 2 of the 'status flags field is "on", indicating that the caller 
has preset a date value); 

is a primary name field that is provided by the caller. 

is an optional long process name field that will be filled in by the Error Logging facility if the field is provided by the 
caller in the Error Log entry packet. 


'formatting DLL module name' 

is the optional name of a DLL module that houses a formatting routine that recognizes this type of Error Log entry 



and can format it for display by the SYSLOG utility. The name is specified as an ASCIIZ string that can be up to eight 
characters in length. If no module name is specified in this field, then SYSLOG will display the data portion of the 
Error Log entry as a hexadecimal dump. 


'Error Log entry data' 

is an optional variable length set of data that can be supplied by the caller (the format of the string is under the 
control of the caller). 

The format and function of the LogAddEntries API call is very similar to that of the 16-bit DosLogEntry call. There are several functional 
differences from the DosLogEntry call: 

• The user-supplied error log entry Record I.D. will now be a statically allocated value rather than a dynamically allocated value. 

• The maximum size of the originator name field in the caller's packet has been increased from 8 bytes to 256 bytes. The caller 
can specify whether the packet contains an 8 byte originator name field or a 256 byte originator name field. 

• The maximum size of the variable length data portion within the caller's packet has been increased from 1 024 bytes to 3400 
bytes 

• The order of the fields within the Error Log entry has been slightly rearranged to support the creation of smaller internal control 
messages. 

In order to resolve successfully LogAddEntries function calls in your program, the following lines must be added to the Linker Definition 
(DEF) file: 


IMPORTS 

LogAddEntries=DOSCALLl .432 


32-Bit Error Log Entry Formatting DLL Routines 


Each Error Log record within an Error Log file can contain the name of a formatting DLL module. A formatting DLL module ise invoked by 
the SYSLOG utility when SYSLOG encounters an Error Log record that contains the name of the DLL module. 

Each formatting module contains a single formatting routine that can be identified by an ordinal value of 1 . The formatting routine can be 
designed to handle a single type of Error Log entry or to handle multiple types of Error Log entries. When SYSLOG passes control to a 
formatting routine, it passes the entire Error Log record (both header portion and data portion) to the formatting routine. The formatting 
routine has the complete flexibility to format an Error Log entry as it deems appropriate. 

SYSLOG uses the DosLoadModule API to create a run-time link to the specified formatting DLL module. It also uses the DosFreeModule 
API to free the DLL module after it receives its response from the formatting routine. 

There are no specific rules that govern the naming of a formatting DLL module. Flowever, since it is desirable to reduce the possibility of 
"colliding" with another DLL module of the same name, it is suggested that a formatting DLL module be labeled with a name that adheres to 
the following standard form: 


ELGxxxxx.DLL (where "xxxxx" corresponds to the Error 

Log record I.D. (in ecimal) of any one 
of the types of records that the formatting 
routine is designed to handle) 


e.g. "ELG00127.DLL" is a standardized name for a formatting 

DDL module that recognizes (among other things) Error 
Log records with I.D. of 127 (decimal) 


This standard naming convention is suggested because it is assumed that the Error Log records of any one I.D. will only be recognized by a 
single formatting routine. Therefore the use of the "xxxxx" suffix (based on record I.D.) should assure uniqueness for the formatting module 
name. 


The static Error Log record I.D. registration mechanism that is enforced by the OS/2 RAS development group will attempt to keep a list not 



only of the Error Log record I.D.'s in use, but also the names of the formatting DLL modules that correspond to each record I.D.. This may 
also help to reduce the possibility of formatting DLL module names "colliding". 

In addition to its single formatting routine, each formatting DLL module must contain a global variable named "ELOG_FORMAT". This 
exported global variable must be set to a value of 1 . When SYSLOG loads a prospective formatting DLL module it will attempt to access this 
global variable and check whether it has the expected value of 1 . If the global variable check fails, then SYSLOG can conclude that it has 
accidentally loaded another DLL module with the same name as the formatting module that is mentioned in the Error Log entry. This check 
is intended as a form of protective validation for SYSLOG. The variable may in future releases be used a sort of revision level for the 
SYSLOG/formatting DLL module interface specification. That is why it will initially be forced to a value of 1 . 

When a user constructs a Error Log entry formatting DLL module, care should be taken not to export the names of its constituent formatting 
routine (though the required ELOG_FORMAT global variable must be exported). Not exporting the module name will save storage space 
within the OS/2 kernel. 

Error Log record formatting DLL routines must be written as 32-bit procedures. A typical Error Log record formatting DLL routine will have to 
accept the parameters: 


APIRET API ENTRY ELGxxxxx (PVOID Log_Record, 

PVOID String_Buf fer , 
ULONG Buf fer_Length, 
PULONG String_Length) ; 


Parameters 

Log_Record 

is a linear pointer to an Error Log record that is being passed from SYSLOG to the formatting routine. The Error Log 
record adheres to the format that is described in the section that follows entitled "Error Log File Entry Format", except 
that the linear pointer points to the "TOT_LENGTFI” field (since the "PREV_PTR" and "PREV_SIZE" fields are of no 
interest to a formatting routine). 

String_Buffer 

is a linear pointer to a buffer provided by SYSLOG so that the formatting routine can return a series of ASCIIZ strings 
to SYSLOG. Each ASCIIZ string should correspond to a line of formatted display. Each ASCIIZ string should be 
limited to a maximum of 80 characters. SYSLOG will paint each string "line" within its client window. The strings 
should not contain NEWLINE characters. SYSLOG will automatically format the header portion of the Error Log entry. 
The formatted output prepared by this routine will follow the formatted header display. 

Buffer_Length 

is a 32 bit integer that contains the maximum size of the the 'String_Buffer'. 

String_Length 

is a pointer to a 32 bit integer that is set by the formatting routine to the total length of the ASCIIZ strings that have 
been placed in 'String_Buffer'. 

Returns 


ELGxxxxx returns the following: 


0 


indicating success. 


-1 


indicates insufficient space in 'String_Buffer' positive values indicate formatting routine errors. 


Remarks 


If a formatting DLL routine returns a positive error code to SYSLOG, SYSLOG will format the header portion of the Error Log record in the 
standard manner, display the returned formatting routine error code (as a line within the formatted display), and then format the data portion 
of the Error Log record as a hexadecimal dump. 

If an Error Log record fails to point to a formatting DLL module, or if the formatting DLL module cannot be successfully loaded and validated, 
then SYSLOG will format the header portion of the Error Log record in the standard manner, display a message that a formatting routine 
was not specified or could not be successfuly invoked (as a line within the formatted display), and then format the data portion of the Error 
Log record as a hexadecimal dump. 

If there is insufficient space in the 'String_Buffer', then the formatting routine will return a -1 status code, and will place the required length of 
the formatted display string in the caller's output length variable. SYSLOG can react to this error by recalling the formatting routine with a 
larger 'String_Buffer'. 



SYSLOG contains logic to format the standard SNA Generic Alert entry (i.e. Error Log record I.D. of 2). This is necessary since most of the 
existing Error Log calls are used to pass generic alerts (and the existing calls can not pass in formatting DLL routine names). This design 
choice does not prevent future Error Log callers to specify a record I.D. of 2 and also to pass in the name of a formatting DLL routine that 
knows how to specially format that Generic Alert entry. 


DevHlp_l_ogEntry Device Driver Interface 

DevHlp_LogEntry provides a device driver interface to the logging facility. 

The description of the LogEntry DevHIp function follows: 


Calling sequence - LES 

BX, log_data_address 

MOV 

CX, service 

MOV 

DL, DevHlp_LogEntry 

CALL 

[Device_Help] 


/* LogEntry function 
code 0x3b */ 


Parameters 


log_data_address 

is the address of a buffer that contains a variable length Error Log entry. (See the section on the LogAddEntries high 
level API for further details.) level API for further details.) 


service 


the class of logging facility: 

0x0 

0x1 

0x2 - 0x2f 
0x80 - 0x8f 
0x90 

0x91 - Oxffff 


Reserved 

"Old-Style" Error Logging call ("old" 16-bit (DosLogEntry-style) data packet 
provided). 

Reserved for future use. 

Reserved for internal use by the System Logging Service device driver. 

"New_Style" Error Logging call ("new" 32-bit (LogAddEntries-style) data 
packet provided). 

Reserved for future use. 


Returns 

Return code in AX: 


0 


Success 


non-zero 

Failure. 

Possible errors: 

Invalid log type 
Facility unavailable 
Facility suspended 


Remarks 

When CX is set to 80FI, DS:SI is set to point to the device driver header block of the System Logging Service device driver. 



RAS API Prototypes 


The following is a sample C language header file that contains sample prototype definitions for the RAS APIs. 


/* definitions for DosDumpProcess */ 


#def ine DDP_DISABLEPROCDUMP 
#def ine DDP_ENABLEPROCDUMP 
#def ine DDP_PERFORMPROCDUMP 


OxOOOOOOOOL 

OxOOOOOOOlL 

0x00000002L 


/* disable process dumps */ 
/* enable process dumps */ 
/* perform process dump */ 


/* definitions for DosSuppressPopUps */ 

#def ine SPU_DISABLESUPPRESSION OxOOOOOOOOL 
#def ine SPU_ENABLESUPPRESSION OxOOOOOOOlL 


/* disable popup suppression */ 
/* enable popup suppression */ 


/* definitions for DosQueryRASInfo Index */ 


#def ine SIS_MMIOADDR 
#def ine SIS_MEC_TABLE 
#def ine SIS_SYS_LOG 
#def ine LF_LOGENABLE 
#def ine LF_LOGAVAILABLE 


0 

1 

2 

0x0001 /* Logging 

0x0002 /* Logging 


enabled */ 
available */ 


APIRET API ENTRY 


DosQueryRASInfo (ULONG Index, PPVOID Addr) ; 


APIRET API ENTRY 
APIRET API ENTRY 
APIRET API ENTRY 


DosForceSystemDump (ULONG reserved) ; 

DosDumpProcess (ULONG Flag, ULONG Drive, PID Pid) ; 
DosSuppressPopUps (ULONG Flag, ULONG Drive) ; 


APIRET16 API ENTRY 16 DosSysTrace (USHORT Majorcode, USHORT Length, 

USHORT Minorcode, PCHAR pData) ; 


APIRET16 API ENTRY 16 DosGetSTDA (SEL, SHORT, SHORT ); 


/* 32-bit Logging Facility Function Prototypes 


*/ 


/* 

/* Logging Defines 

/* 

#def ine ERRLOG_SERVICE 1L 

#def ine ERRLOG_VERSION 1 


*/ 

*/ 

*/ 


/* 

/* LogRecord status bits 

/* 

#def ine LF_BIT_PROCNAME 
#def ine LF_BIT_ORIGIN_256 
#def ine LF_BIT_DATETIME 
#def ine LF_BIT_SUSPEND 
#def ine L F_B I T_RE S UME 
#def ine LF_BIT_REDIRECT 
#def ine LF_B I T_GET STATUS 
#def ine LF_BIT_REGISTER 
#def ine L F_B I T_REMO T E_F AIL 


OxOOOlL 

0x0002L 

0x0004L 

0x0008L 

OxOOlOL 

0x0020L 

0x0040L 

0x0080L 

OxOlOOL 


*/ 

*/ 

*/ 


/* */ 

/* Log Entry Record Header for 2.X */ 

/* This is format used by 2.0 device */ 

/* drivers and callers of LogAddEntries */ 

/* */ 

typedef struct LogRecord 

{ 


USHORT 

len ; 

/* 

this record length (includes len field) 

*/ 

USHORT 

rec_id ; 

/* 

record id 

*/ 

ULONG 

status ; 

/* 

record status bits (see LF_BIT_) 

*/ 

UCHAR 

qualifier [4] ; 

/* 

qualifier tag 

*/ 

ULONG 

reserved ; 




ULONG 

t ime ; 

/* 

hours minutes seconds hundreds 

*/ 

ULONG 

date ; 

/* 

day month (USHORT) year 

*/ 

UCHAR 

data[l] ; 

/* 

begin of variable data that includes: 

*/ 



/* Originator (256 bytes if LF_BIT_ORIGIN_256) 

*/ 


/* else 8 bytes long */ 
/* Processname (260 bytes) only if status */ 
/* LF_B I T_P ROCNMAME set */ 



} LOGRECORD ; 

typedef LOGRECORD far *PLOGREC 


/* FormatDLLName ( 12 bytes) 
/* Variable data 


*/ 

*/ 


/* */ 

/* Format of buffer sent to LogAddEntries */ 

/* */ 

typedef struct LogEntryRec 
{ 

USHORT version ; /* this version is 1 */ 

USHORT count ; /* number of log records in this buffer*/ 

LOGRECORD logrec ; /* repeated count times */ 

} LOGENTRYREC ; 

typedef LOGENTRYREC far *P LOGENTRYREC ; 


/* */ 

/* Logging facility Function prototypes */ 

/* */ 

APIRET APIENTRY LogOpen ( PHFILE phf ); 


APIRET APIENTRY LogClose ( HFILE hf ); 


APIRET APIENTRY LogAddEntries ( HFILE hf, ULONG ulService, PVOID pLogEntries ); 


/* 16-bit Logging Facility Function Prototypes 


*/ 


APIRET1 6 APIENTRY1 6 DosLogRegister (PUSHORT LogHandle, 

PVOID LogRegList, 
PUSHORT Request ID) ; 


APIRET1 6 APIENTRY1 6 DosLogEntry (USHORT Function, 

PVOID LogData) ; 

APIRET1 6 APIENTRY1 6 DosLogRead (USHORT LogHandle, 

USHORT Length, 
PVOID LogBuffer, 
PUSHORT ReadSize) ; 


OS/2 System Control Block Reference 


This chapter contains details of some of the more important system control blocks used in debugging. 

Where major differences in format exist between ALLSTRICT and RETAIL, and between versions of OS/2 then each version of the control 
block is given. Otherwise only OS/2 Warp V3.0 ALLSTRICT kernel versions of the control blocks are given and may be assumed to be 
applicable to also RETAIL and earlier versions of OS/2. 

Warning: 

The information given in this is for debugging purposes only. The layout of the control blocks may change from one release of OS/2 to the 
next. They are not to be considered a programming interface. 


The following System Components are included in this chapter and an overview is provided in the next section: Overview of Kernel 
Components and Interfaces. 

Miscellaneous System Control Blocks 

This section describes system structures that are common to all components. These include: SAS and RMP. 
Semaphore Management 

This section describes the control blocks used for RamSem, FSRamSem Ksem, SysSem, PM/GRE, 32-bit, and 
MuxWait Semaphores. 


Memory Management 


This section describes the following control blocks used by Memory Management: 


VMAL, VMOB, VMAR, VMCO, VMAT, VMAH, VMKH, PAI, PGDATA, PF and VP. 

Scheduler/Dispatcher 

This section describes the following control blocks used by Thread and Process Management: 

PTDA, TCB, TSD, Ijmp, GISEG, LISEG, PIB, TIB, EXENT and Exception Handler structures. 

System Loader 

This section describes the following control blocks used by the System Loader component: 

MTE, SMTE, OTE, STE 

File System 

This section describes the following control blocks used by the File System component: 

SFT, MFT, FSC, RLR, VPB, DBP, CDS, BUF, Named and Anonymous Pipes. 

I/O and Device Driver 

This section describes the structures that relate to low level I/O. These include: Request Packets, BIOS Parameters 
Blocks and Device Driver Headers, Virtual Device Driver Entry Points. 


Overview of Kernel Components and Interfaces 


The OS2KRNL modules lies at the heart of OS/2 - it is essentially operating system. 

The kernel comprises an number of internal components, each responsible for a different aspect of running the system. It also has a number 
of interfaces that provides services to applications, device drivers and file systems. 

These aspects are now considered in a little more detail and are summarised in the diagram shown under: The OS/2 Kernel's Interfaces 
(steady state). 


Kernel Components 


Task management and the Scheduler. 

This is responsible for thread and process management. The functions performed include: 

Thread and Process creation and termination. 

Thread scheduling (priority and state management). 

Preparing threads for dispatching. 

Blockin and Running. 

Implementing the Thread and Process related APIs. 

The Scheduler's principle control blocks are: 

PTDA Per Task Data Area 

TCB Thread Control Block 

TSD Thread Swappable Data 

TSS Task State Segment (H/W) 

System Loader 

This is responsible for load module management. The Loader's principle responsibilities include: 


Bringing modules into memory and performing fixups. 


Managing modules resources. 


Managing dynamic linking. 

Tracking module references. 

Deleting modules from memory. 

Managing the discaring and swapping of module pages. 

Implementing module related APIs. 

The Loader's principle control blocks are: 

MTE Module Table Entry 

SMTE Swappable Module Table Entry 

OTE Object Table Entry 

STE Segment Table Entry 

Memory Management 

Memory Management is responsible for managing physical, virtual, and swapper memory. It's principle roles include: 

Allocation and assignment of physical pages of memory. 

Allocation and assignment of virtual storage. 

Managing the swapper. 

Memory locking. 

Implementing memory related APIs. 

The principle control blocks of Memory Management are: 


VMAR 

Virtual Memory Arena Record 

VMOB 

Virtual Memory Object Record 

PF 

Page Frame Structure 

VP 

Virtual Page Structure 

PTE 

Page Table Entry (H/W) 


File System 

The File System kernel component responsibilities include: 

Access to FAT formatted media. 

Interfacing with File System Drivers for accessing non-FAT media. 
Managing and tracking the status of all open files. 

Path Management 

File sharing and serialisation. 

Providing helper Kernel services for FSDs. 

Implementation of all File System APIs. 

The principle control blocks of the File System include: 


MFT 

Master File Table Entry 

SFT 

System File Table Entry 

CDS 

Current Directory Structure 



FSC 


File System Control Block 


Device and I/O Management 

This component is responsible for interfacing with Physical Device Drivers. Its responsibilities include: 

Routing requests to PDDs from applications 
Managing interrupts 

Providing helper kernel services for PDDs. 

The principle control blocks for device management include: 


IRQI 

IRQ Information Array 

DIRQ 

Device IRQ Information 

REQ 

PDD request Packet. 

DEV 

PDD device header. 


Virtual Dos Machine 

This component is responsible for providing the entire Dos Machine emulation. This has not been covered in this 
book, except for the Virtual Device Driver interface. 


Kernel Interfaces 


The Kernel provides the following external interfaces: 

Application (R3/2) Interface. 

Application access kernel services via GDT call gates. These are called either directly from the application program 
or via the DOSCALL1 .DLL module, where additional Ring 3 processing is required before calling the kernel. Some 
system interfaces are able to be implemented entirely within Ring 2/3. In these cases, DOSCALL1 .DLL does not 
make any kernel calls. 

The kernel interfaces are represented by a fictitious module called DOSCALLS.DLL. 

File System Driver (FSD) 

The FSDs run in ring 0 as separately loaded modules. They are provided a set of interfaces to the kernel via the 
FSD_FHIp (File System FHelper) calls. 

Physical Device Driver (PDD) 

The PDDs run in ring 0 as separately loaded modules. They are provided a set a interfaces to the kernel via the 
Dev_Fllp (Device FHelper) calls. 

Virtual Device Driver (VDD) 

The VDDs run in ring 0 as separately loaded modules. They are provided a set a interfaces to the kernel via the 
VDD_Fllp (Virtual Device Driver FHelper) calls. 

Compatibility BIOS 

The compatibility BIOS resides within the OS2LDR module. It provides a hardware implementation independent layer 
through which the kernel access the BIOS. The interface to the CBIOS from the kernel is provided by the Dos_Fllp 
(Dos FHelper Services). These are not available for access by PDDs, VDDs or FSDs, however a limited set of 
Dos_Fllp calls are provided via the TESTCFG.SYS and OEMHLP$ device drivers. 

Notes: 


OEMFILP$ is not a separately loaded module - it is resident within the OS2LDR module. 

OS2LDR is responsible for loading the Kernel at system initialisation time. It does not get involved with the 
loading of Application Programs, PDDs, VDDs for FSDs during normal running - that function is performed 
by the System Loader component of the Kernel. 



The OS/2 Kernel's Interfaces 
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Miscelaneous System Control Block Reference 


The following control blocks are described in this section: 

System Anchor Segment (SAS) 

Block Management Package (BMP) 

Record Management Package (RMP) 

An overview of the Miscellaneous System Control Blocks follows: 


Miscellaneous System Diagrams 


The following diagrams are illustrated: 

The System Anchor Segment 


The System Anchor Segment 


The System Anchor Segment 
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System Anchor Segment (SAS) for OS/2 Warp V4.0 and OS/2 
Warp V3.0 


The SAS is the common anchor for many system control blocks and control block chains. 


Pointers 

70:0 maps the SAS as a read-only segment. 
78:0 maps the SAS as a read/write segment. 


Locations 
VM Owner 
Format 

SAS Base Section. 


Built statically within the OS2KRNL load module. 

os2krnl (Oxffaa) 


Field Name 

Offset 

Length 

Type 

Description 

SAS_signature 

+ 0 

4 

A 

"SAS " 



SAS_tables_data 

+ 4 

2 

W 

offset 

to 

tables section 

SAS_f lat_sel 

+ 6 

2 

W 

FLAT selector for kernel data 

SAS_conf ig_data 

+ 8 

2 

w 

offset 

to 

configuration section 

SAS_dd_data 

+a 

2 

w 

offset 

to 

device driver section 

SAS_vm_data 

+c 

2 

w 

offset 

to 

Virtual Memory section 

SAS_task_data 

+e 

2 

w 

offset 

to 

Tasking section 

S AS_RAS_dat a 

+ 10 

2 

w 

offset 

to 

RAS section 

S AS_f i 1 e_dat a 

+ 12 

2 

w 

offset 

to 

File System section 

S AS_i n f o_dat a 

+ 14 

2 

w 

offset 

to 

infoseg section 


SAS_tables_section Protected Mode tables section. 


Field Name 

Offset Length 

Type 

Description 


SAS_tbl_GDT 

+ 0 2 

W 

selector 

for 

GDT 

SAS_tbl_LDT 

+ 4 2 

W 

selector 

for 

LDT 

SAS_tbl_IDT 

+ 6 2 

W 

selector 

for 

IDT 

SAS_tbl_GDTPOOL 

+ 8 2 

W 

selector 

for 

GDTPOOL 


SAS_config_section Configuration Section section. 

Field Name Offset Length Type Description 

SAS_conf ig_table +02 W offset for Device Configuration Table 


(DevConf igTbl) 


SAS_dd_section Device Driver Section. 

Field Name Offset Length Type Description 

SAS_dd_bimodal_chain +02 W offset for the first bimodal device 

driver's device header 

SAS_dd_real_chain +22 W offset for the address of the first real 

mode device driver's device header 

SAS_dd_DPB_segment +42 W selector for Drive Parameter Block (DPB) 

segment 

SAS_dd_CDA_anchor_p +6 2 W selector for ABIOS protected mode Common 

Data Area 

SAS_dd_CDA_anchor_r +82 W segment for ABIOS real mode Common Data 

Area 

SAS_dd_FSC +a 2 W selector for FSC 

SAS_vm_section Virtual Memory Management section. 

Field Name Offset Length Tgpe Description 

SAS_vm_arena +04 D Flat offset of arena records 

SAS_vm_ob ject +44 D Flat offset of object records 

SAS_vm_context +84 D Flat offset of context records 

SAS_vm_krnl_mte +c 4 D Flat offset of kernel MTE records 

SAS_vm_glbl_mte +10 4 D Flat offset of global MTE linked list. 

Note this field points into the chain to 
pick up global MTEs only. Use 
SAS_vm_all_mte to find all the MTEs. 

SAS_vm_pft +14 4 D Flat offset of page frame table 

SAS_vm_prt +18 4 D Flat offset of page range table 

SAS_vm_swap +lc 4 D Pointer to flat offset of swapper disk 

frame bit map followed by the size of 
the bit map in bits WARNING: the bit 

map offset and size are volatile 

SAS_vm_idle_head +20 4 D Flat offset of Idle Head 

SAS_vm_f ree_head +24 4 D Flat offset of Free Head 

SAS_vm_heap_inf o +28 4 D Flat offset of Heap Array 

SAS_vm_all_mte +2c 4 D Flat offset of all MTEs linked list 

SAS_task_section Tasking section. 

Field Name Offset Length Tgpe Description 

SAS_task_PTDA +02 W selector for current PTDA 

SAS_task_ptdaptrs +24 D FLAT offset for process tree head 

SAS_task_threadptrs +64 D FLAT address for TCB address array 

SAS_task_tasknumber +a 4 D offset for current TCB number 



SAS_task_threadcount +e 4 D 


SAS_RAS_section RAS section. 


Field Name 

Offset Length 

Type 

SAS_RAS_STDA_p 

+ 0 2 

W 

SAS_RAS_STDA_r 

+ 2 4 

D 

S AS_RAS_e vent_ma s k 

+ 6 4 

D 


SAS_file_section File System section. 


Field Name 

Offset 

Length 

Type 

SAS_f ile_MFT 

+ 0 

4 

D 

SAS_f ile_SFT 

+ 4 

2 

W 

SAS_f ile_VPB 

+ 6 

2 

W 

SAS_f ile_CDS 

+ 8 

2 

W 

SAS_f ile_buf fers 

+a 

2 

W 

SAS_info_section Information Segment section. 

Field Name 

Offset 

Length 

Type 

SAS_inf o_global 

+ 0 

2 

W 

SAS_inf o_local 

+ 2 

4 

D 

SAS_inf o_localRM 

+ 6 

4 

D 

SAS_inf o_CDIB 

+a 

2 

W 


offset for ThreadCount 


Description 

selector for System Trace Data Area 
(STDA) 

segment for System Trace Data Area 
(STDA) 

offset for trace event mask 


Description 
handle to MFT PTree 

selector for System File Table (SFT) 
segment 

selector for Volume Parameter Block 
(VPB) segment 

selector for Current Directory Structure 
(CDS) segment 

selector for buffer segment 


Description 

selector for global info seg 
address of curtask local infoseg 
address of DOS task's infoseg 
selector for Codepage Data 


Block Management Package Header (VMBH) for OS/2 Warp 
V4.0 and OS/2 Warp V3.0 


The BMP is a generalised facility used to manage tables of fixed length entities. The BMP consists of a header followed by the table it 
manages. The use of the BMP is many and varied, but almost always occurs where an expandable table of fixed length entries is required 
by the system. 


Pointers 


The VMBH prefixes tables, which are pointed to by: 

parVMOne 


The table of VM Arena Records (VMARs). 


Locations 
VM Owner 


pobVMOne 

palVMAIiases. 

_pcoVMOne 

s2BmpSel 

pFSLIST_BMP 

NmpBmpSel 

pVPBBMP 

_pFPEMVMBH 

pkshdVMDescs 

psIhLockHandles 

_pbhPvwRPD 

_paPTDA 

_paTCB 

Many. 

The VMBH is usualy part of the the object from which 


The table of VM Object Records (VMOBs). 

The table of VM Alias Records (VMALs). 

The table of VM Context Records (VMCO). 

BMP Selector for Device Driver Strategy 2 Request 
Packets. 

ListIO BMP segment. 

BMP Selector for Named Pipe NP Structures. 

Volume Parameters Block BMP. 

Floating point emulator BMP. 

BMP for Swappable Kernel Pleap Descriptors (VMKSHD). 
BMP for Memory Lock Handles. 

PerfView counters 

The array of PTDA structures. 

The array of TCB structures. 

BMP is allocted, thus adopts the object id of the table. 


Format 

VMBH BMP Header Structure. 


Field Name 

Offset 

bh_pbFreeHead 

+ 0 

bh_pbEndBlocks 

+ 4 

bh_pbEndVirt 

+ 8 

bh_pbLastBusy 

+C 

bh_pfnisbusy 

+ 10 

bh_f iller 

+ 14 

bh_f lpgtype 

+ 18 

bh_cbPerBlock 

+ 1 c 

bh_hob 

+ le 

3h_flpgtype flag definitions. 

Name 

Bit Mask 


Offset Length Type Description 

4 D Free list pointer 

4 D End of valid blocks 

4 D End of virtual memory 

4 D Pointer to last busy block 

4 D Busy block identifier function 

4 D Paragraph boundary filler 

4 D New page type flags 

2 W Size of a block in bytes 

2 W Object record handle 


PG_CONTIG 0x00000001 contiguous physical memory 

PG_NOINCR 0x00000001 don't increment physical addrs 

PG_W 0x00000002 Writable - value from pte 

PG_U 0x00000004 user mode accessible - from pte 


PG_X 


0x00000008 executable 


PG_ 

_R 

0x00000010 

Readable 




PG_ 

_1M 

0x00000020 

must 

reside 

: below 

1 meg 

physical 

PG_ 

.GUARD 

0x00000040 

guard 

page 

- from 

pte 


PG_ 

_16M 

0x00000040 

must 

reside 

: below 

1 6 meg 

physical 

PG_ 

.ZEROFILL 

0x00000080 

zero 

initialize pages 


PG_ 

.SWAPONWRITE 

0x00000100 

value 

from 

vp 



PG_ 

_UVIRT 

0x00000200 

value 

from 

pte 



PG_ 

.RESIDENT 

0x00000400 

value 

from 

pte 



PG_ 

.DISCARDABLE 

0x00000800 

value 

from 

vp 




Record Management Package (RMP) for OS/2 Warp V4.0 
and OS/2 Warp V3.0 


The RMP is used to manage tables of variable length entities. It appears in a number of situations, particularly those that required ASCII 
strings, such as file names, to be managed. 


Pointers 

Locations 


VM Owner 


rp_selector of the RMP handle maps the RMP segment. 


RMP handles are located at the following labels: 

CharDevRMPRec 

SpoolDevRMPRec 

NmpRmpHand 

hDiscSegRmpStruc 

ShareRmpStruc 

SysSemRmpHdl 


Character Device Drivers 
Spooler Device Drivers 
Named Pipes 
Discardable Segments 
Named Shared Memory 
System Semaphores 


CharDevRMPRec 

SpoolDevRMPRec 

NmpRmpHand 

hDiscSegRmpStruc 

ShareRmpStruc 

SysSemRmpHdl 

Format 

rbheadr RMP Header Structure. 


chardevrmp (0xff35) 
spldevrmp (0xff34) 
npipenpn (0xff30) 
discard (0xff6c) 
mshrmp (0xff83) 
syssemrmp (0xff36) 


Field Name 


Offset Length Type Description 


rb_size 

+ 0 

2 

w 

total size of segment 

rb_f ree_size 

+ 2 

2 

w 

amount of free space 

rb_lst_f ree 

+ 4 

2 

w 

link to first free block in seg 

rb_last_f ree 

+ 6 

2 

w 

start of last free block 

rb_hkh 

+ 8 

4 

D 

heap handle 

rb_f lags 

+c 

4 

D 

PG alloc/realloc flags 

rb_hobowner 

+ 10 

2 

w 

hobowner 

rb_hobmte 

+ 12 

2 

w 

hobmte 

rb_f irst 

+ 14 

n 

s 

start of first record 

rb_sz_f ield 

+n+0 

2 

w 

size of 'record size field' 

+n+2 n-2 

rbfree RMP Free Record Structure. 

s 

record data 

Field Name 

Offset 

Length 

Type 

Description 

rf_size 

+ 0 

2 

W 

free block size (high bit set) 

rf_prev_f ree 

+2 

2 

W 

link to prev free block in seg 

rf_next_f ree 

+ 4 

2 

W 

link to next free block in seg 


rparm RMP Handle Structure. 



Field Name 

Offset Length 

Type 

Description 

rp_f lags 

+ 0 1 

B 

flags 


+ 1 1 

B 

unused 

rp_selector 

+2 2 

W 

GDT selector to use 


rp_flags flag definitions. 


Name 

RPF_BUSY 

RPF_WAITING 

RPF_ALLOC 


Bit Mask 
0x01 
0x02 
0x04 


Description 
Segment busy flag 
Somebody waiting flag 
Segment allocated flag 


Semaphore Control Block Reference 


The following control blocks are described in this section: 


FastSafeRamSemStruc 


FastSafeRamSemStruc PM version 


MuxTableEntry 

RamSemStruc 

Kernel Semaphore Structures 
32-bit Semaphore Structures 
System Semaphore Structures 
PM/GRE Semaphore 


FastSafeRamSemStruc 


Pointers 
Locations 
VM Owner 
Format 


TCBSemlnfo points to fs_RAMSem 

Multiple, in user storage. 

Multiple user storage owners. 


Field Name 

Off 

Length 

Type 

Description 

FastSafeRamSemStruc 

-a 

e 

S 

Fast Safe Ram Semaphore 

f s_Length 

-a 

2 

W 

Length of this structure 

f s_ProcID 

-8 

2 

W 

Process ID of owner or zero 

f s_ThrdID 

-6 

2 

W 

Thread ID of owner or zero 

f s_Usage 

-4 

2 

W 

reference count 

f s_Client 

-2 

2 

W 

16 bit field for use by owner 

f s_RAMSem 

+ 0 

4 

S 

OS/2 RAM Semaphore 


FastSafeRamSemStruc PM Version 


Pointers 
Locations 
VM Owner 


TCB Semlnfo points to fs_RAMSem 

Multiple, in user storage. 

Multipl user storage owners. 


Format 


Field Name 

Off 

Length 

Type 

Description 

Fast SafeRamSemS true 

-e 

12 

S 

PM Fast Safe Ram Semaphore 

f s_Length 

-e 

2 

W 

Length of this structure 

f s_ProcID 

-c 

2 

W 

Process ID of owner or zero 

f s_ThrdID 

-a 

2 

W 

Thread ID of owner or zero 

f s_Usage 

-8 

2 

W 

reference count 

f s_Client 

-6 

2 

W 

16 bit field for use by owne: 

f s_Timeout 

-4 

4 

D 

Timeout value 

fs_RAMSem 

+ 0 

4 

S 

OS/2 RAM Semaphore 


MuxTableEntry 


Locations 


At label MuxTable in system storage 


VM Owner 


Format 


os2krnl (Oxffaa) 


Field Name 

Off 

Len 

Type 

Description 

MuxTableEntry 

+ 0 

9 

S 

Mux Table Entry 

MuxLink 

+ 0 

2 

W 

Selector Link to next entry. Used to 
chain entries for a MuxWait request 

MuxThreadID 

+ 2 

2 

W 

Thread Slot ID of waiter 

MuxType 

+ 4 

1 

B 

Semaphore type . 

MuxSemID 

+ 5 

4 

D 

Mux Semaphore handle . 


MuxType flag definitions 


name 

MUXTYPE_CLEAR 

MUXTYPE_SYSSEM 

MUXTYPE_RAMHANDLE 

MUXTRYE_RAMPHYS 

MUXTYPE_EVENTSEM 


value description 

0 the mux table entry is clear 

1 the ID is a system sem address 

2 the ID is a ram sem handle : of f set 

3 the ID is a ram sem physical address 

4 the ID for a 32-bit event sem 


RamSemStruc 


Pointers 
Locations 
VM Owner 
Format 


TCBSemlnfo 

Multiple, in user storage. 
Multipl user storage owners. 


Field Name 

Off 

Length 

Type 

Description 

RamSemStruc 

+ 0 

4 

S 

Ram Semaphore 

RamSemOwner 

+ 0 

1 

B 

Ownership flag 

RamSemFlag 

+1 

1 

B 

Ram Semaphore flag bit field 

RamSemID 

+ 2 

2 

W 

RamSem Block/Run ID low word 


RamSemFlag definitions 

name value description 

RAMS EM_WAI TING 0x01 a thread is waiting on the sem 

RAMS EM_MUXWAI TING 0x02 a thread is muxwaiting on the sem 


Notes: 

The high-order 4 bit of the RamSemFlag are used as an extended owner field (to cater for more than 512 threads). 

Only kernel code sets the RamSemOwner field to a thread slot number. Ring 3 RamSems have Oxff value for an owned RamSem 


KSEM Structures for OS/2 Warp V4.0 and .OS/2 Warp V3.0 
ALLSTRICT kernel 


For KSEM formats for other versions of OS/2 see: 

KSEM for OS/2 Warp V4.0 and OS/2 Warp V3.0 RETAIL kernel 


Locations 

Multiple, either imbeded in system structres, for example PTDA, MFT, or dynamically allocated from the kernel 
heaps. 

VM Owner 

Imbedded KSEMs assume the Owner Id of the imbedding structure. Stand-alone KSEMs allocated from the kernel 
heaps use id: ksem (0xff7e) 

Format 

KSEMSHR Shared Kernel Semaphore 


Field Name 

Off 

Length 

Type 

Description 

ks_Signature 

+ 0 

4 

D 


ks_bFlags 

+ 4 

1 

B 


ks_bType 

+ 5 

1 

B 


ks_Owner 

+ 6 

2 

W 


ks_cusPendingWriters +8 

2 

W 


ks_cusNest 

+a 

2 

W 


ks_cusReaders 

+c 

2 

W 


ks_cusPendingReaders +e 

2 

W 


KSEMMTX MUTEX Kernel Semaphore 




Field Name 

Off 

Length 

Type 

Description 

ksm_Signature 

+ 0 

4 

D 


ksm_bFlags 

+ 4 

1 

B 


ksm_bType 

+ 5 

1 

B 


ksm_Owner 

+ 6 

2 

W 


ksm_cusPendingWriters +8 

2 

W 


ksm_cusNest 

+a 

2 

W 


KSEMEVT Event Kernel Semaphore 




Field Name 

Off 

Length 

Type 

Description 

kse_Signature 

+ 0 

4 

D 


kse_bFlags 

+ 4 

1 

B 


kse_bType 

+ 5 

1 

B 


kse_Owner 

+ 6 

2 

W 


kse_cusPendingWriters +8 

2 

W 


Ksem flag definitions. 





Name 

Bit Mask Description 



KSEM_NO INTERRUPT 

0x1 




KSEM_WRITER 

0x2 




KSEM_DISPLAYID 

0x4 




KSEM_NOBLOCK 

0x8 




KSEM Structures for OS/2 Warp V4.0 and OS/2 Warp V3.0 



RETAIL kernel 


KSEMSHR Shared Kernel Semaphore 


Field Name 

Off 

ks_bFlags 

+ 0 

ks_bType 

+1 

ks_Owner 

+ 2 

ks_cusPendingWr iters 

+ 4 

ks_cusNest 

+ 6 

ks_cusReaders 

+ 8 

ks_cusPendingReaders 

+a 


KSEMMTX MUTEX Kernel Semaphore 


Field Name 

Off 

ksm_bFlags 

+ 0 

ksm_bType 

+1 

ksm_Owner 

+ 2 

ksm_cusPendingWr iters 

+ 4 

ksm_cusNest 

+ 6 


KSEMEVT Event Kernel Semaphore 


Field Name 

Off 

kse_bFlags 

+ 0 

kse_bType 

+1 

kse_Owner 

+ 2 

kse_cusPendingWr iters 

+ 4 


Length Tgpe 


1 

1 

2 

2 

2 

2 

2 


B 

B 

W 

W 

W 

W 

W 


Description 


Length Tgpe 


1 

1 

2 

2 

2 


B 

B 

W 

W 

W 


Description 


Length Tgpe 
1 B 

1 B 

2 W 

2 W 


Description 


32-bit Semaphore Structures for OS/2 Warp V4.0 and OS/2 
Warp V3.0 ALLSTRICT kernel 


For 32-bit Semaphore formats for other versions of OS/2 see: 

32-bit Semaphore for OS/2 Warp V4.0 and OS/2 Warp V3.0 RETAIL kernel 


Pointers 


TCB SIeepid points to SEVENT, PEVENT, SMUTEX, PMUTEX, SMUX or PMUX when waiting on the semaphore. 


PTDA field pPrSemTbl points to the private semaphore table, which is indexed by the semaphore handle. 

pShSemTbl points to the shared semaphore table, which is indexed by the low-order word of the semaphore handle. 
Each entry is a pointer to a semaphore main structre. 

PTDA field pPrSemTbl points to the per-process private semaphore table, which is indexed by the low-order word of 
the semaphore handle. Each entry is a pointer to a semaphore main structre. 

pShSemStrTbl points to the table of SEMTBLNODE entries. Each of these points to a hashed chain of 
SEMSTRNODE structures. 

Note: Names are hashed by treating each name as table of null padded ULONGs and successively adding. 


Locations 


VM Owners 


Structures are allocated from the kernel heaps. 


SEVENT 

PEVENT 

SMUTEX 

PMUTEX 

SMUX 

PMUX 

OPENQ 

MUXQ 

SEMRECORD 

SEMTBLNODE 

SEMSTRNODE 

Semaphore name 

Format 

SEVENT Shared Event Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

w 

pMuxQ 

+ 2 

4 

D 

usPostCt 

+ 6 

2 

W 

pOpenQ 

+ 8 

4 

D 

pszName 

+c 

4 

D 

pulCreatAddr 

+ 10 

4 

D 

ulSig 

+ 14 

4 

D 

ptcb 

+ 18 

4 

D 

PEVENT Private Event Semaohore 



Field Name 

Off 

Length 

Type 


semstruc (0xffc2) 
semstruc (0xffc2) 
semstruc (0xffc2) 
semstruc (0xffc2) 
semstruc (0xffc2) 
semstruc (0xffc2) 
semopenq (Oxffbf) 
semmuxq (Oxffbe) 
semrec (OxffcO) 
semtable (0xffc3) 
semtable (0xffc3) 
semstr (Oxffcl) 


Description 

attributes 

pointer to the mux queue 

number of posts 

pointer to the open queue 

name of semaphore, null if anonymous 

Address passed in by app during create 

0x54564553 "SEVT" 

ptcb of caller 


Description 


usFlags +02 W attributes 

pMuxQ +24 D pointer to the mux queue 

usPostCt +62 W number of posts 

pOpenCt +82 W number of opens 

pulCreatAddr +a 4 D Address passed in by app during create 

ulSig +e 4 D 0x54564550 "PEVT" 


SMUTEX Shared Mutex Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

pMuxQ 

+2 

4 

D 

usRequestCt 

+ 6 

2 

W 

usSlotNum 

+ 8 

2 

W 

usRequesterCt 

+a 

2 

W 

pOpenQ 

+c 

4 

D 

pszName 

+ 10 

4 

D 

pulCreatAddr 

+ 14 

4 

D 

ulSig 

+ 18 

4 

D 


PMUTEX Private Mutex Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

pMuxQ 

+ 2 

4 

D 

usRequestCt 

+ 6 

2 

W 

usSlotNum 

+ 8 

2 

W 

usRequesterCt 

+a 

2 

w 

usOpenCt 

+c 

2 

w 

pulCreatAddr 

+e 

4 

D 

ulSig 

+ 12 

4 

D 


SMUX Shared Mux Wait Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

cSemRec 

+ 2 

2 

W 

pSemRec 

+ 4 

4 

D 

usWaitCt 

+ 8 

2 

W 

pOpenQ 

+a 

4 

D 


Description 

attributes 

pointer to the mux queue 

number of requests 

slot number of the owning thread 

number of requesters 

pointer to the open queue 

name of semaphore, null if anonymous 

Address passed in by app during create 

0x5854 4D53 "SMTX" 


Description 

attributes 

pointer to the mux queue 

number of requests 

slot number of the owning thread 

number of requesters 

number of opens 

Address passed in by app during create 
0x5854 4D50 "PMTX" 


Description 

attributes 

count of semaphore records 
array of semaphore record entries 
number of threads waiting on the mux 
pointer to the open queue 



pszName 

+e 

2 

W 

name of semaphore, null if anonymous 

pulCreatAddr 

+ 10 

4 

D 

Address passed in by app during create 

ulSig 

+ 14 

4 

D 

0x58554D53 "SMUX" 

PMUX Private Mux Wait SemaDhore 




Field Name 

Off 

Length 

Tgpe 

Description 

usFlags 

+ 0 

2 

W 

attributes 

cSemRec 

+ 2 

2 

W 

count of semaphore records 

pSemRec 

+ 4 

4 

D 

array of semaphore record entries 

usWaitCt 

+ 8 

2 

W 

number of threads waiting on the mux 

usOpenCt 

+a 

2 

W 

number of opens 

pPTDA 

+c 

4 

D 

pointer to PTDA of creator 

pulCreatAddr 

+ 10 

4 

D 

Address passed in by app during create 

ulSig 

+ 14 

4 

D 

0x58554D50 "PMUX" 

OPENQ Open Queue Node Structure 




Field Name 

Off 

Length 

Tgpe 

Description 

pidOpener 

+ 0 

2 

W 

process id of opening process 

usOpenCt 

+ 2 

2 

w 

number of Opens for this process 

pNextOpen 

+ 4 

4 

D 

pointer to next node in list 

ulSig 

+ 8 

4 

D 

0x514E504F "OPNQ" 

MUXQ Mux Queue Node Structure 




Field Name 

Off 

Length 

Tgpe 

Description 

pMux 

+ 0 

4 

D 

pointer to a mux (shared or private) 

pNextMux 

+ 4 

4 

D 

pointer to next mux waiter in list 

ulSig 

+ 8 

4 

D 

0x5158554D "MUXQ" 


SEMRECORD Semaphore Record Structure for MUX Wait Semaphores. 


Field Name 

Off 

Length 

Tgpe 

Description 

hsemCur 

+ 0 

4 

D 

semaphore handle 

ulUser 

+ 4 

4 

D 

user value 


SEMSTRNODE Semaphore String Node 

Field Name Off Length Type Description 

+ 0 


hsem 


4 


D 


semaphore handle 



psz 

+ 4 

4 

D 

pointer to 

the string 

pNext 

+ 8 

4 

D 

pointer to 

next string node 

ulSig 

+c 

4 

D 

0x444F4E53 

" SNOD " 


SEMTBLNODE Semaphore String Node Table Entry 


Field Name 

Off 

Length 

Type 

Description 

ulKey 

+ 0 

4 

D 

hash key 

pStrNode 

+ 4 

4 

D 

pointer to string node 


usFlags field definitions: 


Name 

DE_POSTED 


Bit Mask Description 


0x0040 


The event sem APIs set this flag if the 
event is in the posted state 


DM_OWNER_DIED 0x0080 The process died while owning the mutex 

semaphore 


D M W_M T X_MU X 


0x0100 


The muxwait semaphore APIs set this flag 
if the mux contains mutex sems 


DHO_SEM_OPEN 0x0200 dh_OpenEventSem sets this flag to 

indicate that device drivers have opened 
the given semaphore 

DE_16BIT_MW 0x0400 Part of a 16-bit MuxWait if this flag is 

set 


32-bit Semaphore Structures for OS/2 Warp V3.0 RETAIL 
kernel 

SEVENT Shared Event Semaphore 


Field Name 

Off 

Length 

Type 

Description 

usFlags 

to 

2 

W 

attributes 

pMuxQ 

+2 

4 

D 

pointer to the mux queue 

usPostCt 

+ 6 

2 

W 

number of posts 

pOpenQ 

+ 8 

4 

D 

pointer to the open queue 

pszName 

tc 

4 

D 

name of semaphore, null if anonymous 

ptcb 

tlO 

4 

D 

ptcb of caller 


PEVENT Private Event Semaphore 



Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

pMuxQ 

+2 

4 

D 

usPostCt 

+ 6 

2 

W 

pOpenCt 

+ 8 

2 

W 


SMUTEX Shared Mutex Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

pMuxQ 

+2 

4 

D 

usRequestCt 

+ 6 

2 

W 

usSlotNum 

+ 8 

2 

W 

usRequesterCt 

+a 

2 

W 

pOpenQ 

+c 

4 

D 

pszName 

+ 10 

4 

D 


PMUTEX Private Mutex Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

pMuxQ 

+ 2 

4 

D 

usRequestCt 

+ 6 

2 

W 

usSlotNum 

+ 8 

2 

W 

usRequesterCt 

+a 

2 

w 

usOpenCt 

+c 

2 

w 


SMUX Shared Mux Wait Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 

cSemRec 

+ 2 

2 

W 

pSemRec 

+ 4 

4 

D 

usWaitCt 

+ 8 

2 

W 

pOpenQ 

+a 

4 

D 

pszName 

+e 

2 

W 


PMUX Private Mux Wait Semaphore 


Field Name 

Off 

Length 

Type 

usFlags 

+ 0 

2 

W 


Description 

attributes 

pointer to the mux queue 
number of posts 
number of opens 


Description 

attributes 

pointer to the mux queue 

number of requests 

slot number of the owninq thread 

number of requesters 

pointer to the open queue 

name of semaphore, null if anonymous 


Description 

attributes 

pointer to the mux queue 

number of requests 

slot number of the owning thread 

number of requesters 

number of opens 


Description 

attributes 

count of semaphore records 

array of semaphore record entries 

number of threads waiting on the mux 

pointer to the open queue 

name of semaphore, null if anonymous 


Description 

attributes 



cSemRec 

+2 

2 

W 

pSemRec 

+ 4 

4 

D 

usWaitCt 

+ 8 

2 

W 

usOpenCt 

+a 

2 

W 

pPTDA 

+c 

4 

D 

OPENQ Ooen Queue 

Node Structure 


Field Name 

Off 

Length 

Tgpe 

pidOpener 

+ 0 

2 

W 

usOpenCt 

+ 2 

2 

W 

pNextOpen 

+ 4 

4 

D 


MUXQ Mux Queue Node Structure 


Field Name 

Off 

Length 

Tgpe 

pMux 

+ 0 

4 

D 

pNextMux 

+ 4 

4 

D 


SEMSTRNODE Semaphore String Node 


Field Name 

Off 

Length 

Tgpe 

hsem 

+ 0 

4 

D 

psz 

+ 4 

4 

D 

pNext 

+ 8 

4 

D 


count of semaphore records 

array of semaphore record entries 

number of threads waiting on the mux 

number of opens 

pointer to PTDA of creator 


Description 

process id of opening process 
number of Opens for this process 
pointer to next node in list 


Description 

pointer to a mux (shared or private) 
pointer to next mux waiter in list 


Description 
semaphore handle 
pointer to the string 
pointer to next string node 


System Semaphore Structures 


Pointers 

SysSemRmpHdl contais the selector that points the system semaphore names RMP. 

Locations 

SysSemDataTable is the location of the global system semaphores table. Each entry is a SysSemTbIStruc 
structure. 

PTDA field SysSemPTDATbl is the location of the per-process semaphore table. 

PTDA per-process semaphore contains byte-length enties, which are per-semaphore use counts. 


The semaphore handle indexes both the per-process and global semaphore tables. 
SysSemHighTable locates the table of SysSemHighTableS structures. 



VM Owner 

syssemrmp (0xff36) for the RMP that contains the semaphore names. 
Other global tables are owned by os2krnl (Oxffaa). 

Format 

SvsSemHandleStruc System Semaphore Handle Structure 


Field Name 

Off 

Length 

Type 

Description 

SysSemHighWord 

+ 0 

2 

W 

0x8000 for sys sems 

SysSemPTDAIndex 

+ 2 

2 

W 

Index into the PTDA open sem table 


SvsSemTbIStruc System Semaphore Table Structure 


Field Name 

Off 

Length 

Type 

Description 

SysSemOwner 

+ 0 

2 

W 

thread 

owning this semaphore 

SysSemFlag 

+ 2 

1 

B 

system 

semaphore flag bit field 

SysSemRefCnt 

+3 

1 

B 

number 

of references to this sys sem 

SysSemProcCnt 

+ 4 

1 

B 

number 

of requests for this owner 

SysSemPad 

+5 

1 

B 

pad byte to round structure up to word 


SvsSemHiahTableS System Semaphore Table Extension Structure. 

This is an extension of the SysSemTbIStruc that is put into high memory so we don't impact the low data segment. It is only used 
protected mode during process/thread termination. 


Field Name 

Off 

Length 

Type 

Description 

SysSemPidOwner 

+ 0 

2 

W 

pid owner, the thread owner has died 


SvsSemNameStruc System Semaphore Name table structure, managed by an RMP. 


Field Name 

Off 

Length 

Type Description 

SysSemPtr 

+ 0 

2 

W 


SysSemFlag flag field definitions: 


Name Bit Mask 

SYS SEM_WAI TING 0x01 

SYS SEM_MUXWAI TING 0x02 

SYSSEM_OWNER_DIED 0x04 

SYSSEM_EXCLUSIVE 0x08 

SYSSEM_NAME_CLEANUP 0x10 

SYSSEM_THREAD_OWNER_DIED 0x20 
SYSSEM_EXITLIST_OWNER 0x40 


Description 

a thread is waiting on the sem 
a thread is muxwaiting on the sem 
the process/thread owning the sem died 
indicates a exclusive system semaphore 
name table entry needs to be removed 
the thread owning the sem died 
the exitlist thread owns the sem 


PM/GRE Semaphore Structure 


Locations 


pmsemaphores locates the table of PM/GRE semaphores. 


VM Owner 


PMMERGE.DLL hmte 


Format 

GRESEM PM/GRE Semaphore 


Field Name 

Off 

Length 

Type 

acldent 

+ 0 

1 

A 

f cSet 

+ 7 

1 

B 

ulProcessThread 

+ 8 

4 

D 

ulNestedUseCount 

+c 

4 

D 

ulWaitingCount 

+ 10 

4 

D 

ulUseCount 

+ 14 

4 

D 

ulEvent Handle 

+ 18 

4 

D 

ulCallerAddr 

+ 1 c 

4 

D 


Description 

GRESEM or PMSEM 

386 Actual Semaphore 

owner process and thread id (PTid) 

# of times same PTid has accessed sem 

# of PTids waiting on semaphore 

# of times semaphore has been used 
Event Handle Semaphore 
Semaphore Caller 


Memory Management Control Block Reference 


The following control blocks are described in this section: 
Page Frame Structure (PF) 

Physical Arena Information Structures (PAI) 
Per Arena Page Table Data (PGDATA) 
Memory Alias Record (VMAL) 

Memory Arena Header (VMAH) 

Memory Arena Record (VMAR) 

Memory Arena Type (VMAT) 

Memory Context Record (VMCO) 

Memory Object Record (VMOB) 

Virtual Page Structure (VP) 


Kernel Heap Header (VMKH) 


Kernel Resident Heap Structures (VMKRH, VMKRHY, VMKRHS, VMKRHF, VMKRHB, VMKRHBA) 
Kernel Swappable Heap Structures (VMKSH, VMKSHD, VMKSHB) 

An overview of the Memory Management Control Blocks follows: 


Memory Management Control Block Diagrams 

The following diagrams illustrate the relationships between various Memory Managemen control blocks: 
Virtual Address Space Regions (OS/2 Warp V4.0) 

Virtual Address Space Regions (OS/2 Warp V3.0) 

Virtual Address Space Regions (OS/2 V2.1 1 ) 

Virtual Address Space Management 

Private Arena Private Data 

Private Arena Shared Data 

Shared Global Data 

Shared Arena Instance Data 

Virtual/Physical Page Management - Backed Storage 

Virtual/Physical Page Management - Swapped Storage 

CS Alias of Shared Instance Data 

Memory Alias in Multiple Processes 


Virtual Address Space Regions for OS/2 Warp V4.0 and OS/2 
Warp V3.0 from fax pack 19 
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Virtual Address Space Regions for OS/2 Warp V3.0 



Virtual Address Space Regions 


4G 

4G-256K 


^100000000 

%0fffdO00O 


System Arena 


1.5G 


A 


^50000000 



Reserved Regions 


512M _ 
512M-S4K 


Shared Arena 


^20000000 
%lff fOOOO 


448M 
416M 
-3 84M 


Protected Region 


Based Region 
Packed Region 


%lc000000 

%la0000OO 

%130O0OOO 


320M 

304M 


Global Shared Region 

I 

RPW B as ing'Reg ion 


%140000OO 

^13000000 


V 


#lfff 10000 

#e007 ;0OO0 
#■3007 ; OOO 0 
#c0O7 ; 000 0 

#a007 ;OOO0 
#9307 ;OOO0 


Expansion Region 


64M 


%040000OO 


#2007:0000 


Private Arena 

process 1 


Private Arena 

process 2 


Private Arena 

process 3 

(VDM) 


64K 


^00010000 
Reserved Region 


# 000 f : 000 0 


V 


V 


0 


Virtual Address Space Regions for OS/2 V2.1 1 
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RJM 28th Aug 95 - vmprshr 
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Shared Arena Instance Data 
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1 2Sth Aug 95 - vmshrinst 


Virtual/Physical Page Management - Backed Storage 



Page Management 


Backed Virtual Storage 



RJM 28th Aug 95-physmarnt 


Virtual/Physical Page Management - Swapped Storage 



Page Management 


Unbacked Virtual Storage 



CS Alias of Shared Instance Data 



CS Alias of Shared Instance Data 
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t har 
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Physical 

Storage 


Memory Alias in Multiple Processes 



Memory Aliases in Multiple Processes 



Page Frame Structure 


Pointers 
Locations 
VM Owner 
Format 

Field Name 

ap f_s 
pf_pvp 
pf_llock 
pf_f lags 

pf_ref count 
pf_block 

pf_slock 

ipf_s 
pf_pvp 
pf_f linkl 
pf_f lags 
vp_blink 
pf_block 
pf_f link2 

fpf_s 

pf_f linkl 
pf_f lags 
vp_blink 

pf_f link2 


pft points to the table of Page Frame Structres. 


System Arena 


pgpf (0xffb4) 


Length Type Description 

c S active pf 

4 D vp cross link 

1 D count of long term locks 

flags 
pad 

count of ptes marked present 
swp disk frame or ldr block number 
pad 

count of short term locks 


Off 
+ 0 
+ 0 
+ 4 

0.4 

0.4 

2 

+8 2.4 D 

0.4 
1 

+ 0 c S 

+ 0 4 D 

+ 4 1 D 

0.4 

2.4 

+8 2.4 D 

1.4 

+ 0 c S 

+ 0 4 D 

+ 4 1 D 

0.4 

2.4 

+8 2.4 D 

1.4 


idle page frame 
vp cross link 
forward link part 
flags 

backward link 
swp disk frame or 
forward link part 

free page frame 
pad 

forward link part 
flags 

backward link 
pad 

forward link part 


1 (low byte) 

ldr block number 

2 (high 1.4 bytes) 


1 (low byte) 


2 (high 1.4 bytes) 


pf_flag flag definitions: 


name 

bi t mask 

PF_FAST 

Oxl 

PF_BUSY 

0x2 

PF_FREE 

0x4 

PF_RES 

0x8 


description 

frame is fast memory 
frame is busy 
frame is free 
reserved 


Physical Arena Information Structures 


Pointers 

SAS_vm_prt 

Locations 

System Arena. 

Two PAIs exist as part of the kernel load module. These are located at labels _pgPageablePAI and 
_pgResidentPAI. 

VM Owners 

os2krnl (Oxffaa) 

Format 

PAI Physical Arena Information Structure. 


Field Name 

Off 

Length 

Type 

Description 

pai_pprt 

+ 0 

4 

D 

pointer to page range table 

pai_nranges 

+ 4 

4 

D 

number of ranges in range table 

pai_lM 

+ 8 

c 

S 

1M boundary structure 

pb_f rame 

+ 8 

4 

D 

last frame before boundary 

pb_ppf 

+c 

4 

D 

last pf before boundary 

pb_ppr 

+ 10 

4 

D 

page range containing boundary 

pai_l 6M 

+ 14 

c 

S 

1 6M boundary structure 

pb_f rame 

+ 14 

4 

D 

last frame before boundary 

pb_ppf 

+ 18 

4 

D 

last pf before boundary 

pb_ppr 

+ 1 c 

4 

D 

page range containing boundary 

pai_end 

+20 

c 

S 

end of memory boundary structure 

pb_f rame 

+ 20 

4 

D 

last frame before boundary 

pb_ppf 

+ 24 

4 

D 

last pf before boundary 

pb_ppr 

+ 28 

4 

D 

page range containing boundary 


pagerange_s Page Range Table Entry. 


Field Name 

Off 

Length 

pri_last frame 

+ 0 

4 

pri_fir st frame 

+ 4 

4 


Type Description 
D last valid page in range 
D first valid page in range 


Per Arena Page Table Data for OS/2 Warp V4.0 and OS/2 
Warp V3.0 


For PGDATA formats for other versions of OS/2 see: 
PGDATA for OS/2 Warp 3.0 SMP 


Pointers 

Locations 


VM Owners. 
Format 


For private arenas, ptda_ppgdata. 


System Arena. 

For private data, a PGDATA structure is imbedded in each process' PTDA at (ptda_pgdata +0x80). 

For the Global Shared Region the PGDATA structure is located at public symbol _pgShrData. 

For the System Arena the PGDATA structure is located at public symbol _pgData. 

The tables of PTE counts pointed to by pd_pcalloc, pd_pcpresent and pd_pcresident are located as follows: 
System arena: 


pd_pcalloc 

pd_pcpresent 

pd_pcresident 

Global System Region: 


Located at public symbol _pgcPteAllocated 
Located at public symbol _pgcPtePresent 
Located at public symbol _pgcPteResident 


pd_pcalloc 

pd_pcpresent 

pd_pcresident 


Located at public symbol 

_pgcShrPteAllocated 

Located at public symbol _pgcShrPtePresent 
Located at public symbol _pgcShrPteFtesident 


Private Data: 

All three tables are imbedded contiguously within the PTDA at ptda_pgc. 

Note: The tables pointed to by pd_ppde, pd_ppte, pd_pcalloc, pd_pcpresent and pd_pcresident are indexed 
relative to the base virtual page number (pd_base) of the region. 


ptda (Oxffcb) os2krnl (Oxffaa) 


PGDATA Per Arena Page Table Data. 


Field Name 

Off 

Length 

Type 

Description 


pd_ppte 

+ 0 

4 

D 

pointer to ptes 


pd_ppde 

+4 

4 

D 

pointer to pdes 


pd_pcalloc 

+ 8 

4 

D 

pointer to (word) counts of 
ptes per pde 

allocated 

pd_pcpresent 

+c 

4 

D 

pointer to (word) counts of 
per pde 

present ptes 

pd_pcresident 

+ 10 

4 

D 

pointer to (word) counts of 
locked/resident ptes 


pd_base 

+ 14 

4 

D 

base virtual page number 


pd_pvdma lias 

+ 18 

4 

D 

base of vdm alias region 


pd_maxpde 

+ 1 c 

2 

W 

max potential pdes for this 

arena 

pd_cpdelow 

+ le 

2 

W 

count of low in-use pdes 


pd_cpdehigh 

+20 

2 

W 

count of high in-use pdes 


pd_ptcontext 

+22 

2 

W 

page table context 


pd_f lags 

+24 

2 

W 

per-process page manager flags 


pd_flags flag definitions: 

Name Bit Mask Description 

PD_AGINGNEEDED 1 process not aged in this sweep 

PD_FREE 2 


Per Arena Page Table Data for OS/2 Warp 3.0 SMP 


PGDATA Per Arena Page Table Data. 


Field Name 

Off 

Length 

pd_ppte 

+ 0 

4 

pd_ppde 

+4 

4 

pd_pcalloc 

+ 8 

4 

pd_pcpresent 

+c 

4 

pd_pcresident 

+ 10 

4 

pd_base 

+ 14 

4 

pd_pvdma lias 

+ 18 

4 

pd_cpdelo 

+ 1 c 

2 

pd_cpdehi 

+ le 

2 


Type Description 

D pointer to ptes 

D pointer to pdes 

D pointer to (word) counts of allocated 

ptes per pde 

D pointer to (word) counts of present ptes 
per pde 

D pointer to (word) counts of 
locked/resident ptes 

D base virtual page number 

D base of vdm alias region 

W count of low in-use pdes 

W 


count of high in-use pdes 



pd_maxpde 

+20 

2 

w 

max potential pdes for this arena 

pd_ptcontext 

+22 

2 

w 

page table context 

pd_f lags 

+24 

2 

w 

per-process page manager flags 


VM Arena Header 


Locations 

_ahvmSys locates the System Arena VMAH. 
_ahvmShr locates the Shared Arena VMAH. 

PTDA field ptda_ah locates each Private Arena VMAH. 

VM Owner 

For shared and system arenas: os2krnl (Oxffaa) 

For private arenas: ptda (Oxffcb) 

Format 


Field Name 

Offset 

Length 

Type 

Description 

ah_pahNext 

+ 0 

4 

D 

Link to next arena 

ah_pahPrev 

+ 4 

4 

D 

Link to previous arena 

ah_parSen 

+ 8 

4 

D 

Handle of arena sentinel 

ah_parFree 

+c 

4 

D 

Hint of 1st free block in arena 

ah_papbm 

+ 10 

4 

D 

Pointer to bitmap directory 

ah_paharHash 

+ 14 

4 

D 

Hash table pointer 

ah_pat 

+ 18 

4 

D 

Pointer to per-type info 

i — i 
4-1 

1 

b 

(T5 

+ 1 G 

4 

D 

Flags 

ah_laddrMin 

+ 20 

4 

D 

Minimum address currently mapped 

ah_laddrMax 

+ 24 

4 

D 

Max address currently mapped 

ah_car 

+ 28 

4 

D 

Count of arena entries 

ah_carBitmap 

+2c 

4 

D 

Max entry count to need bitmap 

ah_lbmNumbMax 

+30 

4 

D 

Max bitmap number 

ah_lbmeNumbMax 

+34 

4 

D 

Max bitmap entry number 

ah_lHashNumbMax 

+38 

4 

D 

Max hash table index 

ah_hob 

+3c 

2 

W 

Arena header pseudo-handle 

ah_f iller 

+3e 

2 

W 

Make structure 4-byte multiple 


ah_fl flag definitions: 

Name Bit Mask Description 

VMAH_B I TMAP_B YP AS S 0x00000001 Worth bypassing bitmap 


VMAH_NO_HASH_WRAP 0x00000002 No hash table wraparound yet 
VMAH_GRO W_D OWN 0x00000004 Arena grows down 


VM Alias Record 


Pointers 


VM Owner 


Format 


palVMAIiases points to the VMAL table. 


vmal (0xffe2) 


Field Name 

Offset 

Length 

Type 

Description 

vmal 

+ 0 

8 

S 

VM alias record 

al_har 

+ 0 

2 

W 

handle to alias' arena record 

al_hobptda 

+2 

2 

W 

context the alias is created from 

al_pgof f 

+ 4 

2.4 

D 

page offset of the alias from start of 
object 

al_f 


1.4 


flags indicating type of alias 

vmsal 

+ 0 

8 

S 

SEL alias record 

sal_har 

+ 0 

2 

w 

handle to alias' arena record 

sal_selcode 

+ 2 

2 

w 

code selector if cs alias 

al_hobptda 

+ 2 

2 

w 

context the alias is created from if 
MEMMAP alias 

sal_cref 

+ 4 

1.2 

D 

reference count 

sal_f 


0.6 


flags 

sal_seldata 

+ 6 

2 

W 

data selector if cs alias (unused for 


MEMMAP) 


al_f flag definitions: 


Name 

Bit Mask 

Description 

AL_ 

_ISBUSY 

0x1 

Set 

if 

record is busy 

AL_ 

_CSALIAS 

0x2 

Set 

if 

cs alias record 

AL_ 

_MEMMAP 

0x4 

Set 

if 

MemMapAlias record 

AL_ 

_DBGALIAS 

0x8 

Set 

if 

debug alias 

AL_ 

_CSDSVALID 

0x10 

Set 

if 

ds selector valid 

AL_ 

_DEVHLP 

0x20 

Set 

if 

Devhlp alias 

AL_ 

_PRIV 

0x40 

Set 

if 

privatized alias 


AL_VDM 


0x80 


Set if VDM alias 


AL_NO ALIAS 0x100 


Set if UVIRT mapping in VDMs 


sal_f flag definitions: 


Name 

SAL_CSALIAS 
SAL_MEMMAP ALIAS 
SAL_CSDS VALID 
SAL_ALIASREFSHIFT 
SAL_ALIASREFMASK 


Bit Mask 

AL_CSALIAS 

AL_MEMMAP 

0x10 

0x6 

OxOffcO 


Description 


mustn't coincide with other alias types 
Low six bits reserved for flags 
reference count bits mask 


VM Arena Record 


Pointers 







_parvmOne points to the VMAR table. 

VM Owner 







vmar (0xffe3) 


Format 





Field Name 

Offset Length 

Type 

Description 

vmar_reg 

+ 0 

16 

S 

Regular Arena Record 

ar_xf 

+ 0 

1.4 

D 

Extra flags 

ar_cpg 


2.4 


Size in pages 

ar_ipg 

+ 4 

2.4 

D 

Virtual page no. 

ar_f 


1.4 


Flags 

ar_harnext 

+ 8 

2 

W 

Handle of next Arena Record 

ar_harprev 

+a 

2 

W 

Handle of previous Arena Record 

ar_harlink 

+c 

2 

W 

Handle of associated Arena Record 

ar_harhash 

+e 

2 

W 

Hash table link 

ar_hob 

+ 10 

2 

w 

Handle of Object Record 

ar_hco 

+ 12 

2 

w 

Context record handle (shar+shr data) 

ar_hobptda 

+ 12 

2 

w 

PTDA handle or NULL (prvar or shar + 
instance data) 

ar_sel 

+ 12 

2 

w 

Selector (sysarena only) 

ar_hal 

+ 14 

2 

w 

Alias record handle, * =0 means not an 


alias 


vmar_sen 

+ 0 

16 

s 

Sentinel Arena Record 

ar_xf 

+ 0 

1.4 

D 

Extra flags 

ar_cpg 

+ 1 . 4 

2.4 


Size in pages 

ar_ipg 

+ 4 

2.4 

D 

Virtual page no. 

ar_f 

+ 6.4 

1.4 


Flags 

ar_harnext 

+ 8 

2 

W 

Handle of next Arena Record 

ar_harprev 

+a 

2 

W 

Handle of previous Arena Record 

ar_harlink 

+c 

2 

W 

Handle of associated Arena Record 

ar_harhash 

+e 

2 

W 

Hash table link 

ar_ipgmax 

+ 10 

4 

D 

Maximum lage no. in the arena 

ar_unused 

+ 14 

2 

W 

reserved 


art flag definitions: 


Name 

Bit Mask 

Description 

AR_INUSE 

0x001 

Record not on free list 

AR_TAG 

0x006 

Record type mask 

AR_TAGREG 

0x000 

Regular record 

AR_TAGSEN 

0x002 

Sentinel 

AR_TAGBSEN 

0x006 

Boundary sentinel 

AR_SELMAP 

0x008 

Memory mapped by selector 

AR_SELBASEALL 

0x00c 

Base selector map all 

AR_SELMASK 

0x00c 

Selector map mask 

AR_RELOAD 

0x010 

Pre-reserved for huge item or 

AR_WRITE 

0x020 

Write permission 

AR_USER 

0x040 

User pages 

AR_EXEC 

0x080 

Executable Pages 

AR_READ 

0x100 

Read permission 

AR_HCO 

0x200 

Record linked to Context List 

AR_GUARD 

0x400 

Guard pages 

AR_SGS 

0x800 

Registered under Screen Group Switch 


ar_xf flag definitions: 

Name Bit Mask Description 

AR_HCOH 0x001 context record handle > 64k 


VM Arena Type Information Record 



Pointers 
Locations 
VM Owner 
Format 


VMAH field ah_pat points to the associated VMAT. 


atvm locates the table of VMATs. 


os2krnl (Oxffaa) 


Field Name 

at_laddrInitMin 

at_laddrInitMax 

at_laddrAbsMin 

at_l addr Ab sMax 

at_cbInitBetween 

at_lHashNumbMask 

at_lHashNumbShift 

at_lHashNumbAbsMax 

at_lHashMinSize 

at_lbmNumbMask 

at_lbmNumbShi ft 

at_lbmNumbAbsMax 

at_lbdMinSize 

at_lbmeNumbMask 

at_lbmeNumbShi f t 

at_lbmeNumbAbsMax 

at_lbmeBitNumbMask 

at_lbmeBitNumbShift 

at_f Unit 

at_lGran 

at_laddrMinNoWrap 

at_laddrMaxNoWrap 

at_harParent 


Offset Length Type Description 
+04 D Initial minimum 

+44 D Initial maximum 

+84 D Abs minimum boundary 

+c 4 D Abs minimum boundary 

+10 4 D Spacer between arenas 

+14 4 D Hash number mask 

+18 4 D Hash number shift 

+ 1 c 4 D Max hash table index 

+20 4 D Min hash table size 

+24 4 D Bitmap number mask 

+28 4 D Bitmap number shift 

+2c 4 D Abs Max bitmap # 

+30 4 D Min bitmap dir size 

+34 4 D Bitmap entry # mask 

+38 4 D Bitmap entry # shift 

+3c 4 D Abs Max bitmap entry 

+40 4 D Bit number mask 

+44 4 D Bit number shift 

+48 4 D Initial flags 

+4c 4 D Granularity 

+50 4 D Min no-hash wrap laddr 

+54 4 D Max no-hash wrap laddr 

+58 2 W Parent arena 


at_fllnit flag definitions: 


Name Bit Mask Description 

VMAT_PRIV_TILED 0 
VMAT_P R I V_VDM 1 

VMAT_SHR_TILED 2 


VMAT_SYS 


3 


VMAT_MAX 


VMAT_SYS 


VM Context Record 


Pointers 
Locations 
VM Owner 
Format 


_pcovmOne points to the table of VMCOs. 
System Arena. 

vmco (0xffe5) 


Field Name 

Offset Length 

Type 

Description 

co_hconext 

+ 0 2 

W 

Index of next Context Record 

co_hobptda 

+2 2 

W 

PTDA handle 

co_fb 

+ 4 1 

B 

Context record flags 


co_fb flag definitions: 


Name 

Bit Mask 

Description 

CO_CREATOR 

0x01 

originating context 

CO_PRIV 

0x80 

Privatized context 

CO_HCOH 

0x20 

Next context record handle > 64k 

CO_WRITE 

0x02 

Write permission 

CO_USER 

0x04 

User storage 

CO_EXEC 

0x08 

Executable 

CO_READ 

0x10 

Read permission 

CO_GUARD 

0x40 

Guard page 


VM Object Record 


Pointers 


pobvmOne points to the table of VMOBs. 


Locations 


System Arena. 


VM Owner 


vmob (Oxfffl) 


Format 


Field Name 

Offset 

Length 

Type 

Description 

ob_har 

+ 0 

2 

W 

Arena Record handle 

ob_hobnext 

+2 

2 

W 

Associated Object Record handle 

ob_va 

+ 0 

4 

D 

Pseudo-object's virtual address 

ob_f s 

+ 4 

2 

W 

Flags 

ob_hobowner 

+ 6 

2 

W 

Owner i.d. 

ob_hobmte 

+ 8 

2 

w 

MTE handle 

ob_wsemowner 

+a 

2 

w 

I.d. of thread owning semaphore 

ob_bsemcnt 

+c 

1 

B 

Counter and waiting flag 

ob_cllock 

+d 

1 

B 

Count of all long-term locks 

ob_c slock 

+e 

1 

B 

Count of all short-term locks 

ob_x flags 

+ f 

1 

B 

Extra flags 


Note: 

A complete list of system owner ids may be found under VM System Object Owner Ids in the Reference Tables section of the 
System Reference. 


ob_fs flag definitions: 


Name 

OB_PSEUDO 

OB_AP I 

OB_LOCKWAIT 

OB_LALIAS 

OB_S HARED 

OB_UVIRT 

OB_Z ERO I N I T 

OB_RESIDENT 

OB_LOWMEM 

OB_GUARD 

OB_EXEC 

OB_READ 

OB_USER 

OB_WRITE 

OB_HUGE 

OB_SHRINKABLE 


Bit Mask 

0x8000 

0x4000 

0x2000 

0x1000 

0x0800 

0x0400 

0x0200 

0x0100 

0x0040 

0x0080 

0x0020 

0x0010 

0x0008 

0x0004 

0x0002 

0x0001 


Description 

Pseudo-object 

API allocated object 

Some thread to wake in VMUnlock 

Object has aliases 

Object's contents are shared 

UVirt object 

Object is zero-initialized 

Initial allocation was resident 

Object is in low memory 

Page attribute/permission flags 

Executable 

Read permission 

User Storage 

Write permission 

Object is huge 

Object is Shrinkable 


OB_DHSETMEM 0x0001 DevHlp_VMSetMems are allowed 


ob_xflags flag definitions: 


Name 

VMOB_SLOCK_WAI T 
VMOB_LLOCK_WAI T 
VMOB_DISC_SEG 
VMOB_H I GHMEM 


Bit Mask Description 

0x01 Waiting on short term locks to clear 

0x02 Waiting on long term locks to clear 

0x04 Object is part of a discardable seg 

0x08 Object was allocated via dh_vmalloc 


Virtual Page Structure 


Pointers 


pf_pvp points to the head of the VP array. 

Locations 


System Arena. 


VM Owner 


pgvp (0xffb3) 



Format 





Field Name 

Off Length 

Type 

Description 

avp s 

+ 0 

c 

S 

active vp 

vp_f rame 

+ 0 

2.4 

D 

frame, swp or ldr block # 

vp_f lags 


1 . 4 


flags 

vp_obpg 

+ 4 

2 

W 

object relative page number 

vp_hob 

+ 6 

2 

W 

handle to object record 

vp_re f count 

+ 8 

2 

W 

virtual page reference count 

vp_s emo wne r 

+a 

2 

w 

Slot number of semaphore owner 

fvp_s 

+ 0 

a 

s 

Free vp 

vp_f link 

+ 0 

4 

D 

forward link 

vp_blink 

+ 4 

4 

D 

backward link 


+ 8 

2 

W 

pad 

vp_flag flag definitions: 



name 


bit mask 

description 

VP_BUSY 


0x001 

page semaphore taken 


VP_WANTED 


0x002 


page semaphore requested 


VP_CACHE 

0x004 

search page cache for pf 

VP_PFIDLE 

0x008 

cross linked to idle pf 

< 

TJ 

1 

Tl 

0x010 

cross linked to pf 

VP_DF 

0x020 

has swap file disk frame 

VP_DIRTY 

0x040 

contents written to - from pte 

VP_SHDIRTY 

0x080 

shadow dirty bit (for VDMs) 

VP_SOW 

0x100 

change to swappable on write 

VP_PRIVATIZED 

0x200 

vp privatized 

VP_RESIDENT 

0x400 

cannot be moved - value from 
pte 

VP_D IS CARD ABLE 

0x800 

1 = discardable, 0 = swappable 


Kernel Heap Header Structure 


Pointers 

_apkh points to the head of the VMKH array. 
SAS_vm_heap_info also points to this array. 


Locations 
VM Owner 


System Arena. 


os2krnl (Oxffaa) 

Format 

VMKH Kernel Heap Header. 


Field Name 

Offset Length 

Type 

kh_f 1 

+ 0 4 

D 

kh_pkrh 

+ 4 4 

D 

kh_pksh 

+ 4 4 

D 


Description 

Allocation flags 

Pointer to resident heap header 

Pointer to swappable heap header 


kh_fl flag definitions. 


Name 

PG_CONTIG 

PG_NOINCR 

PG_W 

PG_U 


Bit Mask 

0x00000001 

0x00000001 

0x00000002 

0x00000004 


Description 

contiguous physical memory 
don't increment physical addrs 
Writable - value from pte 
user mode accessible - from pte 


PG_X 


0x00000008 executable 


PG_R 


0x00000010 Readable 


PG_ 

_1M 

0x00000020 

must 

reside below 

1 meg 

physical 

PG_ 

.GUARD 

0x00000040 

guard 

page - from 

pte 


PG_ 

_16M 

0x00000040 

must 

reside below 

1 6 meg 

physical 

PG_ 

.ZEROFILL 

0x00000080 

zero 

initialize pages 


PG_ 

.SWAP ON WRITE 

0x00000100 

value 

from vp 



PG_ 

.UVIRT 

0x00000200 

value 

from pte 



PG_ 

.RESIDENT 

0x00000400 

value 

from pte 



PG_ 

.DISCARDABLE 

0x00000800 

value 

from vp 




Heap Handles (hkh) 

Kernel heap handles used to index the array of VMKH structures. 


Name hkh value 

VM_HKH_PUB_RESRW 1 
VM_HKH_P UB_RE S RO 2 

VM_HKH_P UB_S WAP RW 3 
VM_HKH_P UB_S WAP RO 4 
VM_HKH_P UB_RE S 1 MRW 5 
VM_HKH_P UB_RE S 1 MRO 6 


Description 

Kernel resident RW heap handle 
Public resident RO heap handle 
Public swappable RW heap handle 
Public swappable RO heap handle 
Public resident RW 1M handle 
Public resident RO 1M handle 


Note: 

It is possible for more than one handle to be served by the same heap. In particular, under the RETAIL kernel all heap handle are 
mapped to either a read/write resident or swappable heap. 


Kernel Resident Heap Structures 

Pointers 

For resident heap entries, kh_pkrh of a VMKFI entry points to a VMKRFI. 

An array of VMKRFIY structures are embedded in VMKRFI at krh_akrhy. 

An array of VMKRFIS structures are embedded in VMKRFI at krh_akrhs. 

krhf_pbNext and krhb_pbPrev double link VMKRFIF structures from the dummy VMKRFIF embedded in VMKRK at 

krhkrhfDummy 

Locations 

System Arena. 

VMKRFI prefixes a resident heap. 

Allocated blocks (VMKRFIB and VMKRFIBA) are sparsely allocated from the heap, with interstitial free blocks 
(VMKRFIF). 



VMKRHB prefixes the data portion of an allocated block. 

VMKRHBA suffixes the data portion of an allocated block when the krhb_attr bit is set in the associated VMKRHB. 

VM Owners 

vmkrhro (Oxffeb) 
vmkrhrw (Oxffec) 
kdbsym (0xff7c) 
krhrwl m (0xff43) 
krhrolm (0xff44) 

Format 

VMKRH Kernel Resident Heap Header. 


Field Name 

Offset 

Length 

Type 

Description 

krh_cBlocks 

+ 0 

4 

D 

Count of heap blocks 

krh_cFreeBlocks 

+4 

4 

D 

Count of free heap blocks 

krh_pbFirst 

+ 8 

4 

D 

First Heap Block 

krh_pbLast 

+C 

4 

D 

Last Heap Block 

krh_pbEndRes 

+ 10 

4 

D 

Upper bound of reserved virt mem 

krh_pbEndCom 

+ 14 

4 

D 

Upper bound of committed virt mem 

krh_lpgBase 

+ 18 

4 

D 

Start lin page of heap object 

krh_cMods 

+ 1C 

4 

D 

Count of heap modifications 

krh_f 1 

+20 

4 

D 

Resident heap flags 

krh_krhf Dummy 

+ 24 

C 

D 

Dummy free block 

krh_pkrhsLast 

+ 30 

4 

D 

Last Freelist Section Pointer 

krh_akrhy 

+ 34 

30 

S 

Array of 8 yield structures 

krh_akrhs 

+ 64 

50 

S 

Array of 5 free list sections 

krh_hob 

+B4 

2 

w 

Heap object handle 

krh_ksem 

+B6 

C(10) 

s 

KSEM for resident heap 

VMKRHY Kernel Resident Heap Yield List 

Structure. 

Field Name 

Offset 

Length 

Type 

Description 

krhy_pb 

+ 0 

4 

D 

Block pointer 

krhy_cyield 

+ 4 

2 

W 

Yield count 

VMKRHS Kernel Resident Heap Free List Anchor Structure. 

Field Name 

Offset 

Length 

Type 

Description 

krhs_cbMax 

+ 0 

4 

D 

Maximum block size 

krhs_krhfHead 

+ 4 

C 

S 

Dummy free block used to locate head 


list 


VMKRHF Kernel Resident Heap Free Block. 


Field Name 

Offset 

Length 

Type 

krhf_struct0 

+ 0 

4 

S 

krhf_pbNext 

+ 4 

4 

D 

krhf_pbPrev 

+ 8 

4 

D 

VMKRHB Kernel Resident Heap Block Header. 

Field Name 

Offset 

Length 

Type 


+ 0 

4 

S 

krhb_hobowner 

+ 0 

2 

D 

krhb_pf ree 


0.1 


krhb_usSize 


1.5 


krhb_yield 


0.1 


krhb_attr 


0.1 



+ 0 

4 

S 


+ 0 

0.1 

D 



0.1 


krhb_ulSize 


3.4 


krhb_yield 


0.1 


krhb_attr 


0.1 



Description 

Resident Heap Block Header 
Forward freelist link 
Backward freelist link 


Description 

Regular Block Header 

Owner 

Preceding block is free 
Size of block in dwords 
Thread-yielded-here flag 
Attributed block flag (=0) 

Attributed Block Header 
Attributed block is free 

Block preceding attributed block is free 
Size of block in dwords 
Thread-yielded-here flag 
Attributed block flag (=1) 


VMKRHBA Kernel Resident Heap Block Header Attributes. 


Field Name 

Offset Length 

Type 

Description 

khba_sel 

+ 0 2 

W 

Selector mapping heap block data 

khba_hobOwner 

+ 2 2 

W 

Heap block owner 

khba_hobMTE 

+ 4 2 

w 

Heap block MTE 

khba_pad 

+ 6 2 

w 

Pad to DWORD mutiple. 


krh_fl flag definitions. 


Name 

PG_CONTIG 

PG_NOINCR 

PG_W 

PG_U 

PG_X 


Bit Mask 

0x00000001 

0x00000001 

0x00000002 

0x00000004 

0x00000008 


Description 

contiguous physical memory 
don't increment physical addrs 
Writable - value from pte 
user mode accessible - from pte 
executable 


PG_R 


0x00000010 Readable 



PG_1M 

0x00000020 must reside below 1 meg physical 

PG_GUARD 

0x00000040 guard page - from pte 

PG_16M 

0x00000040 must reside below 16 meg physical 

PG_ZEROFILL 

0x00000080 zero initialize pages 


PG_SWAPONWRITE 0x00000100 value from vp 


PG_UVIRT 

0x00000200 value from pte 

PG_RESIDENT 

0x00000400 value from pte 


P G_D ISCARDABLE 0x00000800 value from vp 

Kernel Swappable Heap Structures 


Pointers 

For swappable heap entries, kh_pksh of a VMKH entry points to a VMKSH. 

An array of VMKRHY structures are embedded in VMKRH at krh_akrhy. 

An array of VMKRHS structures are embedded in VMKRH at krh_akrhs. 
ksh_hdrEntry in VMKSH points to the first chained VMKSHD. 

kshd pbNext in VMKSHD points to subsequent VMKSHD structures. VMKRHF structures from the dummy 
VMKRHF embedded in VMKRK at krh_krhfDummy 

Locations 

System Arena. 

VMKSHD structure are allocated from the Kernel Resident Heap. 
VMKSH prefixes a swappable heap. 

Allocated blocks (VMKSHB) are sparsely allocated from the heap. 
VMKSHB prefixes the data portion of an allocated block. 


VM Owners 


Format 

VMKSH and VMKSHB: 

vmkshro (Oxffee) 
vmkshrw (Oxffef). 

VMKSHD: 

vmshd (Oxffed). 


VMKSH Kernel Swappable Heap Header (RETAIL kernel) 


Field Name 

Offset Length Type Description 

ksh_hdrEntry 

+0 12 S Dummy head descriptor of free chain 

+ 0 4 D 



+ 4 

4 

D 

pointer to next descriptor 


+ 8 

4 

D 


ksh_pHint 

+c 

4 

D 

Descriptor pointer to last block touched 

ksh_pHPrev 

+ 10 

4 

D 

Descriptor pointer to PrevBlk of last 
touched 

ksh_HintSize 

+ 14 

4 

D 

Size of last block touched 

ksh_pbEndRes 

+ 18 

4 

D 

Upper bound of reserved virt mem 

ksh_pbEndCom 

+ 1 c 

4 

D 

Upper bound of committed virt mem 

ksh_f 1 

+20 

4 

D 

Swappable heap allocation flags 

ksh_hob 

+ 24 

2 

W 

Heap object handle 

ksh_pbStart 

+ 26 

4 

D 

Lower bound of reserved virt mem 

ksh_ksem 

+2 a 

C 

S 

KSEM for swappable heap 


VMKSH Kernel Swappable Heap Header (ALLSTRICT kernel) 


Field Name 

Offset 

Length 

Tgpe 

Description 

ksh_hdrEntry 

+ 0 

4 

D 

Head of descriptor chain 

ksh_pHint 

+ 4 

4 

D 

Descriptor pointer to last block touched 

ksh_pHPrev 

+ 8 

4 

D 

Descriptor pointer to PrevBlk of last 
touched 

ksh_HintSize 

+C 

4 

D 

Size of last block touched 

ksh_pbEndRes 

+ 10 

4 

D 

Upper bound of reserved virt mem 

ksh_pbEndCom 

+ 14 

4 

D 

Upper bound of committed virt mem 

ksh_f 1 

+ 18 

4 

D 

Swappable heap allocation flags 

ksh_hob 

+ 1C 

2 

W 

Heap object handle 

ksh_pbStart 

+ 1E 

4 

D 

Lower bound of reserved virt mem 

ksh_ksem 

+ 22 

10 

S 

KSEM for swappable heap 

ksh_ckshds 

+ 32 

4 

D 

Count of heap modifications 

ksh_cFrees 

+ 36 

4 

D 

Count of heap modifications 

ksh_cAllocs 

+3a 

4 

D 

Count of heap modifications 

VMKSHD Kernel Swappable Heap Descriptor Record for Free Blocks. 

Field Name 

Offset 

Length 

Tgpe 

Description 

kshb_size 

+ 0 

4 

D 

Size of block in dwords 

kshd_pNext 

+ 4 

4 

D 

Next free block 

kshd_pb 

+ 8 

4 

D 

Address of block header 


VMKSHB Kernel Swappable Heap Block Header for Allocated blocks. 


Field Name 


Offset Length Tgpe Description 




+ 0 

1 

D 

Signature 0x5: 

kshb_size 


3 


size of block 

kshb_hobowner 

+ 4 

2 

W 

Owner 

kshb_sel 

+ 6 

2 

W 

Selector 


ksh_fl flag definitions. 


Name 

PG_CONTIG 

PG_NOINCR 

PG_W 

PG_U 

PG_X 

PG_R 

PG_1M 

PG_GUARD 

PG_16M 

PG_ZEROFILL 

P G_S WAP ON WR I T E 

PG_UVIRT 

PG_RESIDENT 

PG_DISCARDABLE 


Bit Mask 

0x00000001 

0x00000001 

0x00000002 

0x00000004 

0x00000008 

0x00000010 

0x00000020 

0x00000040 

0x00000040 

0x00000080 

0x00000100 

0x00000200 

0x00000400 

0x00000800 


Description 

contiguous physical memory 

don't increment physical addrs 

Writable - value from pte 

user mode accessible - from pte 

executable 

Readable 

must reside below 1 meg physical 

guard page - from pte 

must reside below 16 meg physical 

zero initialize pages 

value from vp 

value from pte 

value from pte 

value from vp 


Scheduler Thread and Process Control Block Reference 


The following control blocks are described in this section: 

Thread Control Block (TCB) 

Thread Swappable Data (TSD) 

Per Task Data Area (PTDA) 

The local exception handler Long-Jump Buffer (Ijmp) 
Local Information Segment (LISEG) 

Global Information Segment (GISEG) 

Process Information Block (PIB) 

Thread Information Block (TIB) 

System Stack Frames and Client Register Information 
Exit List Data Structure (EXENT) 


Exception Handler Structures 
An overview of the Scheduler Control Blocks follows: 


Scheduler and Task Management Control Block Diagrams 

The following diagrams illustrate the relationships between various Scheduler and Task Management control blocks: 

Process Management 
Thread Management 
Scheduler Finite State Machine 
Thread Tree for a Process 
Process Trees, Subtrees and Zombies 
Orphaned and Adopted Processes 
Exception Management - Overview 
Exception Handler Stack Frames 


Process Management 


Process Management 

PTDA pie 


TCB 




VMAH 


pgData 


If seltss 


JFN_Tabl e 


sig_vec 


ptdajrodule 


ptda_ldtaddr 


JTN_pTable 


Local 

InfoSeg 

T”D 



VMAR 

Regular 


+80 


PTEs 



RJM aath Aug 95- piccmgnnt 


Thread Management 



Thread management 


TSD 


CRI 


SAS Task Section 

jsapTCB Slots 


TaskNunfeer 



Thread count 


Thread Slot Table 




Current TCB 

PTDA 





TSDpTCB 


EernelESP 


Desc 28 


Desc SO 


Desc 38 


Desc IS Ob 


TCB 


0 ord, slot 


■rr 

+c 

+10 


+38 

+3c 


+lb8 


+lbc 

R2 Stack 


R2 ESP 


R2 SS 



RJM2flth Aug95 -thndmgmt 


Scheduler Finite State Machine 


OS/2 Scheduler Finite State Machine 


tflirnirde 


run 



Exit KModc 


Enter KMflde 


run 


tsd < 


UJ: lahAigM 


(a.b.c’i BDtodule tsd 
pager daemon 


bad: bad stack 
bill: blocked 

bst: ready + priority boost 
crt: blocked by critical section 
dly: delayed take-up 
fn: frozen 

gsk: get rO stack (tsd) 
rdy: ready 
run: running 

tsd: scbednle *tsd daemon 
---: (void) dead tbread 


Thread Tree for a Process 


Thread Tree for a Process 


PTDA 


+20 


TCB TSD 


ptdajTCBCritSec 


+14 



TCB TSD 


+153 



TCB TSD 



TCB TSD 


+15c 



Thread 3 is in critical section 


Thread 1 


Thread 2 


Thread 3 


Thread 4 


Thread 2 and Thread 1 are waiting for Thread 4 to die 


Process Trees, Subtrees and Zombies 



The Process Tree, Subtrees and Zombies 


PTDA 



Fid 1 is Detached (no parent) 

Other Detached Processes are Siblings of Pid 1 
Pids 1-7 are acUye 


Pids 8 - 11 are dead (zombies) 

Pid 4 may DosWaitChild on Pids 8-10 


Pid. 11 


Orphaned and Adopted Processes 



Orphaned and Adopted Processes 


PTDA 




OS/2 Exception Management - Overview 



Exception Handling - Overview 


Interrupt Descriptor Table 


Specific 1st Level Trap Handlers Are Entered 





Trace etc 


Enter Debugger 
for VSF/VTF 


Local Fault 


TSDpfnFault ? 

Enter Debugger 

I 



Exception Handler Stack Frames 



Exception Handler Stack Frames 


low address 


TCB 


TIB 

■> — 


Exception Reg Rec 
-> 

*; 


Exception Reg Rec 

->i 


high address 



Thread Control Block OS/2 Warp V4.0 


For TCB formats for other versions of OS/2 see: 

TCB for OS/2 Warp V3.0 

TCB for OS/2 Warp V3.0 with Fix pack 9 

TCB for OS/2 Warp V3.0 with Fix pack 1 1 or later 

TCB for OS/2 V2.1 1 with Fix pack 90 or later 

TCB for OS/2 V2. 11 


Pointers 


Locations 
VM Owner 
Format 


_papTCBSIots points to the thread slot table of TCB pointers. 
Multiple chain pointers between, TSD, TCB and PTDA. 
CurrTCB points to the current TCB. 

System Arena. 

tcb (Oxffcc) 


Field Name 

Offset 

Length 

Type 

Description 

TCBOrdinal 

+ 0 

2 

W 

Ordinal 

number of thread in PTDA 

TCBNumber 

+ 2 

2 

W 

Thread slot number 

TCBForcedActions 

+ 4 

4 

D 

Bit vector of forced actions 

TCBpPTDA 

+ 8 

4 

D 

Pointer 

to the PTDA 

TCBpTSD 

+c 

4 

D 

Pointer 

to thread swappable data 

TCBptib 

+ 10 

4 

D 

Pointer 

to thread info block 

TCBpTCBNext 

+ 14 

4 

D 

forward 

link to next (active) TCB 

TCBcbStackMax 

+ 18 

4 

D 

Virtual 

size of stack object 

TCBcbStackCur 

+ 1 c 

4 

D 

Committed size of stack object 

TCBpStack 

+20 

4 

D 

Virtual 

base of stack 

TCBpStackl 6Lo 

+ 24 

4 

D 

Virtual 

base of 16-bit stack 

TCBpStackl 6Hi 

+ 28 

4 

D 

Virtual 

limit of 16-bit stack 

TCBpLibiHead 

+2c 

4 

D 

Link to 

libi load data area 

TCBpLibiCurr 

+30 

4 

D 

Link to 

libi load data area 

TCBpLibiFree 

+34 

4 

D 

Link to 

libi free data area 

TCB_pcriFrameType 

+38 

4 

D 

stack frame type 

TCB_pFrameBase 

+3c 

4 

D 

stack frame base pointer 

TCB_hookheadLocal 

+40 

8 

D 

local context hook head 


TCB_phookOwnerHead 

+48 

4 

D 

TCBpteKStackTCBO 

+4c 

4 

D 

TCBpteKStackTCBl 

+50 

4 

D 

TCBpteKStackTSD 

+ 54 

4 

D 

TCBpteKStackPTDAO 

+ 58 

4 

D 

TCBpteKStackPTDAl 

+5c 

4 

D 

TCBpteKStackPTDA2 

+ 60 

4 

D 

TCBCurrTCB 

+ 64 

4 

D 

TCBCurrTSD 

+ 68 

4 

D 

TCBBiasTCB 

+ 6 c 

4 

D 

TCBBiasTSD 

+70 

4 

D 

TCBpDHRetAddr 

+74 

4 

D 

TCBTLMA 

+78 

80 

D 

TCBDMAAdd 

+f 8 

4 

D 

TCBSecPos 

+ f c 

4 

D 

TCBThisSFT 

+ 100 

4 

D 

TCBValSec 

+ 104 

4 

D 

TCBpRTCB 

+ 108 

4 

D 

TCBProc_ID 

+ 10c 

2 

W 

TCBUser_ID 

+ 10e 

2 

W 

TCBf Sharing 

+ 110 

1 

B 

TCBSrvAttrib 

+ 111 

1 

B 

TCB JfnFlag 

+ 112 

1 

B 

TCBAllowed 

+ 113 

1 

B 

TCBOpCookie 

+ 114 

4 

D 

TCBOpFlags 

+ 118 

2 

W 

TCBCurBuf 

+ lla 

4 

D 

TCBThishVPB 

+ lle 

2 

W 

TCBNextAdd 

+ 120 

2 

W 

TCBBytSecPos 

+ 122 

2 

W 

TCBClusNum 

+ 124 

2 

W 

TCBLastPos 

+ 126 

2 

W 

TCBBytCnt 1 

+ 128 

2 

W 

TCBBytCnt2 

+ 12a 

2 

W 

TCBSecCnt 

+ 12c 

2 

W 

TCBSecClusPos 

+ 12e 

1 

B 

TCBNoSetDir 

+ 12 f 

1 

B 

TCB Joins 

+ 130 

1 

B 


linked list of hook blocks 

KStack page 0 of TCB 

KStack page 1 of TCB 

KStack TSD page 

KStack page 0 of PTDA 

KStack page 1 of PTDA 

KStack page 2 of PTDA 

SS-relative offset of Current TCB 

SS-relative offset of Current TSD 

stack-to-f lat TCB conversion value 

stack-to-f lat TSD conversion value 

82818 Pointer to DHRouter return address 

Thread local memory area 

User's I/O transfer address 

Position of first sector accessed within 
file 

pointer to SFT we're working with 

Number of valid (previously written) 
sectors 

Redirector TCB (Used by LANMAN) 

process ID for file sharing checks 

user ID for file sharing checks 

non-zero ==> no redirection 

see SetAttrib/f ile . asm 

JFN flag bits for current fil handle 

Allowed I 24 answers (see allowed_) 

server's per file cookie 

whether server wants oplock, etc. 

currently assigned buffer 

handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

If TRUE, do not set directory 

number of joins 



Uses Namel, Name2, combined 


TCBPad 

+ 131 

1 

B 

TCBDevFCB 

+ 132 

1 

B 

TCB_direntry 

+ 133 

20 

S 

dir_name 

+ 133 

b 

B 

dir_attr 

+ 13e 

1 

B 

dir_pad 

+ 13f 

8 

B 

dir_EAhandle 

+ 147 

2 

W 

dir_time 

+ 149 

2 

W 

dir_date 

+ 14b 

2 

W 

dir_f irstf ile 

+ 14d 

2 

W 

dir_size_l 

+ 14 f 

2 

W 

dir_size_h 

+ 151 

2 

W 

TCBNamel 

+ 153 

c 

B 

TCBName2 

+ 15f 

d 

B 

TCBDESTSTART 

+ 16c 

2 

W 

TCBDirPad 

+ 16e 

5 

B 

TCBBuf HE 

+ 173 

1 

B 

TCBactBuf HE 

+ 174 

1 

B 

TCBf IOLock 

+ 175 

1 

B 

TCBLockHndl 

+ 176 

C 

S 

TCBThisCDS 

+ 182 

4 

D 

TCBThisFSC 

+ 186 

4 

D 

TCBpTmpCDS 

+ 18a 

4 

D 

TCBpOpenBuf 

+ 18e 

2 

W 

TCBpSearchBuf 

+ 190 

2 

W 

TCBFailErr 

+ 192 

2 

W 

TCBShareRetriesLeft 

+ 194 

2 

W 

TCBRetryCount 

+ 196 

2 

W 

TCBRetryLoop 

+ 198 

2 

W 

TCB_pSrchBuf 

+ 19a 

2 

W 

TCB_pOpenBuf 

+ 1 9c 

2 

W 

TCBAttrib 

+ 19e 

2 

W 

TCBExtFCB 

+ la0 

1 

B 

TCBPad2 

+ lal 

1 

B 

TCBWFP_Start 

+ la2 

2 

W 

TCBRen_WFP 

+ la4 

2 

W 

TCBWFP_Path_End 

+ la6 

2 

W 

TCBCurr_Dir_End 

+ la8 

2 

W 


Directory entry 

File name 
Attribute bits 
reserved 

First cluster of extended attribute 

Time of last write 

Date of last write 

First allocation unit of file 

Low 16 bits of file size 

High 16 bits of file size 

File name buffer *REDIR* 


How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 

NZ if user did FAIL on I 24 

number of share/lock viol retries 

num of share/lock retries to do 

num of share/lock retry delay loops 

internal search buffer 

Pointer to a scratch buffer on stack 

storage for file attributes *REDIR* 

Extended FCB 

TASKAREA offset for working string 
*REDIR* 

WFB pointer for rename destination 
*REDIR* 

End of Path component of string 



TCBDTAddr 

+ laa 

4 

D 

TCBVolID 

+ lae 

1 

B 

TCBSpaceFlag 

+ laf 

1 

B 

TCBCreating 

+ lb0 

1 

B 

TCBDelAll 

+ lbl 

1 

B 

TCBFoundDel 

+ lb2 

1 

B 

TCBFound_dev 

+ lb3 

1 

B 

TCBf Splice 

+ lb4 

1 

B 

TCBClusFac 

+ lb5 

1 

B 

TCBcMeta 

+ lb6 

1 

B 

TCBPathNameType 

+ lb7 

1 

B 

TCBDevPt 

+ lb8 

4 

D 

TCBDirSec 

+ lbc 

4 

D 

TCBDirStart 

+ lc0 

2 

W 

TCBNxtClusNum 

+ lc2 

2 

W 

TCBEntFree 

+ lc4 

2 

W 

TCBEntLast 

+ lc6 

2 

W 

TCBLastEnt 

+ lc8 

2 

W 

TCBSattrib 

+ lca 

2 

W 

TCB_SemInfo 

+ lcc 

4 

D 

TCB_SemDebugAddr 

+ ld0 

4 

D 

TCB_NPX_Buf fer 

+ ld4 

4 

D 

TCBpTCBWaitNext 

+ ld8 

4 

D 

TCBpTCBWaitList 

+ ldc 

4 

D 

TCBQState 

+ le0 

1 

B 

TCBState 

+ lel 

1 

B 

TCBWakeFlags 

+ le2 

1 

B 

TCBcWindowBoost 

+ le3 

1 

B 

TCBPriClass 

+ le4 

1 

B 

TCBPriLevel 

+ le5 

1 

B 

TCBPriClassMod 

+ le6 

1 

B 

TCBSchFlags 

+ le7 

1 

B 

TCBPriority 

+ le8 

2 

W 

TCBPriorityMin 

+ lea 

2 

W 

TCBcBoostLock 

+ lec 

4 

D 

TCBpTCBPriNextQ 

+ lf0 

4 

D 

TCBpTCBPriPrevQ 

+ lf4 

4 

D 

TCBpTCBPriHigher 

+ lf 8 

4 

D 

TCBpTCBPriLower 

+ lfc 

4 

D 


User's I/O transfer address *REDIR* 
!0 if vol ID found in dir search 
Embedded spaces allowed in FOB 


true => search found a device 3.10 
true => do a splice in transpath 3.10 
sectors/cluster used in dir search 
components found 3.10 

Address of device found by DevName 
*REDIR* 

Variables used in directory searching 
Variables used in directory searching 
Variables used in directory searching 
Variables used in directory searching 
Variables used in directory searching 
Variables used in directory searching 
Storage for search attrs *REDIR* 3.10 
16bit addr of the ramsem blocked upon 
debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 
Misc. Scheduler flags 
Calculated Priority 
Minimum Scheduling priority 
Kernel Boost Lock nesting count. 

Next priority queue in chain 
Previous priority queue in chain 
Higher priority thread 
Lower priority thread 



TCBpTCBPriNext 

+200 

4 

D 

TCBpTCBPriPrev 

+ 204 

4 

D 

TCBpTCBWakeup 

+ 208 

4 

D 

TCBSleepID 

+20c 

4 

D 

TCBtoe 

+210 

14 

S 

TCBCheckedSig 

+ 224 

1 

B 

TCB f Swapping 

+ 225 

1 

B 

TCBVolIONest 

+ 226 

1 

B 

TCBReqPktFlg 

+ 227 

1 

B 

TCBReqPkt 

+ 228 

4 

D 

TCBSysTime 

+ 22c 

4 

D 

TCBUserTime 

+ 230 

4 

D 

TCB_pPVDBThd 

+ 234 

4 

D 

TCB_f lDbg 

+ 238 

4 

D 

TCBCpl2_ESP 

+23c 

4 

D 

TCBCpl2_SS 

+240 

2 

W 

TCBNewFlags 

+ 242 

1 

B 

TCBEntryActions 

+ 243 

1 

B 

TCBSig_pend 

+ 244 

2 

W 

TCBSig_holding 

+ 246 

2 

W 

TCBSig_cur 

+ 248 

2 

W 

TCBXcptRepRec 

+24a 

4 

D 

TCBSig_termtid 

+24e 

2 

W 

TCBSecbits 

+250 

1 

B 

TCBspbytes 

+251 

1 

B 

TCB_ulSRIndex 

+ 252 

4 

D 

TCBMiscFlags 

+ 256 

1 

B 

TCBModeFlags 

+ 257 

2 

W 

TCBSpareFlags 

+ 259 

1 

B 

TCBLibiFlags 

+25a 

1 

B 

TCBFiller 

+25b 

1 

B 

TCB_ProcNameBuf 

+25c 

4 

D 

TCB_Ob jNameBuf 

+260 

4 

D 

TCB_TmpNameBuf 

+264 

4 

D 

TCB_S r cModN ameBu f 

+268 

4 

D 

TCB_FaultBuf 

+26c 

4 

D 

TCB_Ob jNameBuf L 

+270 

2 

W 

TCB_TmpNameBuf L 

+ 272 

2 

W 

TCB_SrcModNameBuf L 

+ 274 

2 

W 


Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 

Kernel entry force flags 

bit vector of pending signals 

bit vector of postponed signals 

bit vec of signals being processed 

report record of active exception 

tid of terminator -75797 

Security bits 54735 

To keep size 4*N 54735 

Last semaphore cleared in MUX 72485 

Used for hard error processing 

Mode flags for OPEN - for WhatVolume 

Spare flags 

84537 

To keep size 4*N 
Pointer to procedure name 
Pointer to object name buffer 
aka TCB_TgtModNameBuf 
Used by loader 

Length of object name buffer 



TCB_FaultBuf L 


+ 276 


2 


W 


TCBSecchild +278 4 D Child Security data 54735 

TCBForcedActions flag definitions: 

Name Bit Mask Description 

TK_FF_BUF 0x00000001 Buffer must be released 

TK_FF_EXIT 0x00000002 Call TKExit (old FF_DES) 

TK_FF_CRITSEC 0x00000004 Enter Per-task critical section 

TK_FF_ICE 0x00000008 Freeze thread 

TK_FF_NPX 0x00000010 NPX Error 

TK_FF_TIB 0x00000020 Update the TIB 

TK_FF_TRC 0x00000040 Enter Debug 

TK_FF_SIG 0x00000080 Signal pending 

TK_FF_CTXH 0x00000100 Pending local context hooks 

TK_FF_STIH 0x00000200 Execute STI hooks 

TK_FF_VDMBP 0x00000400 Execute VDM BP hooks 

TK_FF_RTRY 0x00000800 Retry V86 system call 

TK_FF_PIB 0x00001000 Update the PIB 

TK_FF_SCH 0x00002000 Do Scheuler Processing 

TK_FF_TFBIT 0x00004000 Validate user eflags TF bit 

TK_FF_TIBPRI 0x00008000 Update only the priority fields in TIB 

59463 

TCBEntryActions flag definitions: 

Name Bit Mask Description 

TK_EF_PFCLI 1 Page fault inside CLI 

TK_EF_TRC 2 DosDebug action pending 

TCBWakeFlags flag definitions: 

Name Bit Mask Description 

TK_WF_INTERRUPTED 0x01 Sleep was interrupted 

TK_WF_TIMEEXP 0x02 Timeout expired 

TK_WF_INTP ENDING 0x04 Interrupt pending 

TK_WF_S INGLEWAKEUP 0x08 Thread wants single wakeup 

TK_WF_INTERRUPTIBLE 0x10 Thread blocked interruptibly 

TK_WF_TIMEOUT 0x20 Thread blocked with timeout 


TK_WF_SLEEPING 


0x40 


In TKSleep ( ) 



TCBState and TCBQState definitions: 


Name Value 

STATE_VOID 0 

S T AT E_RE AD Y 1 

STATE_BLOCKED 2 

STATE_SUSPENDED 3 

STATE_CRITSEC 4 

S T AT E_RUNN I NG 5 

STATE_READYBOOST 6 

STATE_TSD 7 

STATE_DELAYED 8 

STATE_FROZEN 9 

STATE_GETSTACK 10 

STATE_BAD STACK 11 


Description 

Uninitialized 

Ready to run 

Blocked on an ID 

Suspended (DosSuspendThread) 

Blocked by another CritSec thread 

Thread currently running 

Ready, but apply an 10 boost 

Thread waiting for TSD 

Delayed TKWakeup (Almost Ready) 

Frozen Thread (FF_ICE) 

Incomming TSD 

TSD failed to swap in 


TCBPriClassMod definitions: 


Name 

Value 

Description 

CLAS SMOD_KE YBOARD 

0x04 

Keyboard boost 

CLASSMOD_STARVED 

0x08 

Starvation boost 

CLASSMOD_DEVICE 

0x10 

Device I/O Done Boost 

CLAS SMOD_FOREGROUND 

0x20 

Foreground boost 

CLASSMOD_WINDOW 

0x40 

Window Boost 

CLASSMOD_VDM_INTERRUPT 0x80 

VDM simulated interrupt boost 

TCBPriClass definitions: 

Name 

Value 

Description 

CLAS S_NOCHANGE 

0x00 

No priority class change 

CLASS_IDLE_TIME 

0x01 

Idle-Time class 

CLAS S_REGULAR 

0x02 

Regular class 

C L AS S_T I ME_C R I T I CAL 

0x03 

Time-Critical class 

CLASS_SERVER 

0x04 

Client-Server Server class 


TCBSchFIg flag definitions: 

Name Bit Mask Description 

SCH_PROTECTED_PRI 0x0001 Only Intra-process SetPri allowed 
SCH_WINDOWBOOST_LOCK 0x0002 Lock out windoboost changes 



SCH_MINSLICE 


0x0004 


Use minimum timeslice 


SCH_PAGE_FAULT 0x0008 Dynamic timeslicing ### 

SCH_PAGE_FAULT_BIT 0x03 Dynamic timeslicing P728371 

TCBfSwapping flag definitions: 

Name Bit Mask Description 

SM_TCB_S WAP PING 0x01 swap i/o underway 

SM_TCB_RESIZING 0x02 data structures are growing 

TCBMiscFlags flag definitions: 

Name Bit Mask Description 

TMF_CMapFailed (0x01) Set if alloc/realloc failed on a cluster 

map (mft_selCMap) . 

TMF_IGNORE_HE (0x02) If set, ignore (auto fail) hard error 

TMF_MULT_XCPT (0x04) Set if multiple ring 0 exceptions 

TMF_NoFwd (0x08) Set if inhibiting forwarders 

TMF_EXI T_TERM (0x10) TK_FF_EXIT means TKTermThread 

TMF_NO_EXCEPT (0x20) Indicates TIB exception field invalid 

TMF_XCPT_HE (0x40) Indicates an exception harderr is 

pending 

TCBMSpareFlags flag definitions: 

Name Bit Mask Description 

SPFLAGS_FGND_DISKIO 0x0080 Foreground Disk I/O 

TCBReqPktFIg flag definitions: 

Name Bit Mask Description 

TK_RP_ALLOCATED 0x01 
TK_RP_INUSE 0x02 


Thread Control Block for OS/2 Warp V3.0 


Field Name 


Offset Length Type Description 



TCBOrdinal 

+ 0 

2 

W 

TCBNumber 

+ 2 

2 

W 

TCBForcedActions 

+ 4 

4 

D 

TCBpPTDA 

+ 8 

4 

D 

TCBpTSD 

+c 

4 

D 

TCBptib 

+ 10 

4 

D 

TCBpTCBNext 

+ 14 

4 

D 

TCBcbStackMax 

+ 18 

4 

D 

TCBcbStackCur 

+ 1 c 

4 

D 

TCBpStack 

+20 

4 

D 

TCBpStackl 6Lo 

+ 24 

4 

D 

TCBpStackl 6Hi 

+ 28 

4 

D 

TCBpLibiHead 

+2c 

4 

D 

TCBpLibiCurr 

+30 

4 

D 

TCBpLibiFree 

+34 

4 

D 

TCB_pcriFrameType 

+38 

4 

D 

TCB_pFrameBase 

+3c 

4 

D 

TCB_hookheadLocal 

+40 

8 

D 

TCB_phookOwnerHead 

+48 

4 

D 

TCBpteKStackTCBO 

+4c 

4 

D 

TCBpteKStackTCBl 

+50 

4 

D 

TCBpteKStackTSD 

+54 

4 

D 

TCBpteKStackPTDAO 

+58 

4 

D 

TCBpteKStackPTDAl 

+5 c 

4 

D 

TCBpteKStackPTDA2 

+ 60 

4 

D 

TCBCurrTCB 

+ 64 

4 

D 

TCBCurrTSD 

+ 68 

4 

D 

TCBBiasTCB 

+ 6 c 

4 

D 

TCBBiasTSD 

+70 

4 

D 

TCBTLMA 

+74 

80 

D 

TCBDMAAdd 

+ f 4 

4 

D 

TCBSecPos 

+f 8 

4 

D 

TCBThisSFT 

+ f c 

4 

D 

TCBValSec 

+ 100 

4 

D 

TCBpRTCB 

+ 104 

4 

D 

TCBProc_ID 

+ 108 

2 

W 

TCBUser_ID 

+ 10a 

2 

W 

TCBf Sharing 

+ 10c 

1 

B 

TCBSrvAttrib 

+ 10d 

1 

B 


Ordinal number of thread in PTDA 

Thread slot number 

Bit vector of forced actions 

Pointer to the PTDA 

Pointer to thread swappable data 

Pointer to thread info block 

forward link to next (active) TCB 

Virtual size of stack object 

Committed size of stack object 

Virtual base of stack 

Virtual base of 16-bit stack 

Virtual limit of 16-bit stack 

Link to libi load data area 

Link to libi load data area 

Link to libi free data area 

stack frame type 

stack frame base pointer 

local context hook head 

linked list of hook blocks 

KStack page 0 of TCB 

KStack page 1 of TCB 

KStack TSD page 

KStack page 0 of PTDA 

KStack page 1 of PTDA 

KStack page 2 of PTDA 

SS-relative offset of Current TCB 

SS-relative offset of Current TSD 

stack-to-f lat TCB conversion value 

stack-to-f lat TSD conversion value 

Thread local memory area 

User's I/O transfer address 

Position of first sector accessed within 
file 

pointer to SFT we're working with 

Number of valid (previously written) 
sectors 

Redirector TCB (Used by LANMAN) 
process ID for file sharing checks 
user ID for file sharing checks 
non-zero ==> no redirection 
see SetAttrib/f ile . asm 



TCB JfnFlag 

+ 10e 

1 

B 

TCBAllowed 

+ 10f 

1 

B 

TCBOpCookie 

+ 110 

4 

D 

TCBOpFlags 

+ 114 

2 

W 

TCBCurBuf 

+ 116 

4 

D 

TCBThishVPB 

+ lla 

2 

W 

TCBNextAdd 

+ 1 1 c 

2 

W 

TCBBytSecPos 

+ lle 

2 

W 

TCBClusNum 

+ 120 

2 

W 

TCBLastPos 

+ 122 

2 

W 

TCBBytCnt 1 

+ 124 

2 

W 

TCBBytCnt2 

+ 126 

2 

W 

TCBSecCnt 

+ 128 

2 

W 

TCBSecClusPos 

+ 12a 

1 

B 

TCBBuf HE 

+ 12b 

1 

B 

TCBactBuf HE 

+ 12c 

1 

B 

TCBf IOLock 

+ 12d 

1 

B 

TCBLockHndl 

+ 12e 

C 

S 

TCBThisCDS 

+ 13a 

4 

D 

TCBThisFSC 

+ 13e 

4 

D 

TCBpTmpCDS 

+ 142 

4 

D 

TCBpOpenBuf 

+ 146 

2 

W 

TCBpSearchBuf 

+ 148 

2 

W 

TCBFailErr 

+ 14a 

2 

W 

TCB_SemInfo 

+ 14c 

4 

D 

TCB_SemDebugAddr 

+ 150 

4 

D 

TCB_NPX_Buf fer 

+ 154 

4 

D 

TCBpTCBWaitNext 

+ 158 

4 

D 

TCBpTCBWaitList 

+ 15c 

4 

D 

TCBQState 

+ 160 

1 

B 

TCBState 

+ 161 

1 

B 

TCBWakeFlags 

+ 162 

1 

B 

TCBcWindowBoost 

+ 163 

1 

B 

TCBPriClass 

+ 164 

1 

B 

TCBPriLevel 

+ 165 

1 

B 

TCBPriClassMod 

+ 166 

1 

B 

TCBSchFlags 

+ 167 

1 

B 

TCBPriority 

+ 168 

2 

W 

TCBPriorityMin 

+ 16a 

2 

W 


JFN flag bits for current fil handle 
Allowed I 24 answers (see allowed_) 
server's per file cookie 
whether server wants oplock, etc. 
currently assigned buffer 
handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 

NZ if user did FAIL on I 24 

16bit addr of the ramsem blocked upon 

debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 
Misc. Scheduler flags 
Calculated Priority 
Minimum Scheduling priority 



TCBcBoostLock 

+ 16c 

4 

D 

TCBpTCBPriNextQ 

+ 170 

4 

D 

TCBpTCBPriPrevQ 

+ 174 

4 

D 

TCBpTCBPriHigher 

+ 178 

4 

D 

TCBpTCBPriLower 

+ 17c 

4 

D 

TCBpTCBPriNext 

+ 180 

4 

D 

TCBpTCBPriPrev 

+ 184 

4 

D 

TCBpTCBWakeup 

+ 188 

4 

D 

TCBSleepID 

+ 18c 

4 

D 

TCBtoe 

+ 190 

10 

S 

TCBCheckedSig 

+ la0 

1 

B 

TCB f Swapping 

+ lal 

1 

B 

TCBVolIONest 

+ la2 

1 

B 

TCBReqPktFlg 

+ la3 

1 

B 

TCBReqPkt 

+ la4 

4 

D 

TCBSysTime 

+ la8 

4 

D 

TCBUserTime 

+ lac 

4 

D 

TCB_pPVDBThd 

+ lb0 

4 

D 

TCB_f lDbg 

+ lb4 

4 

D 

TCBCpl2_ESP 

+ lb8 

4 

D 

TCBCpl2_SS 

+ lbc 

2 

W 

TCBNewFlags 

+ lbe 

1 

B 

TCBEntryActions 

+ lbf 

1 

B 

TCBSig_pend 

+ lc0 

2 

W 

TCBSig_holding 

+ lc2 

2 

W 

TCBSig_cur 

+ lc4 

2 

W 

TCBXcptRepRec 

+ lc6 

4 

D 

TCBSig_termtid 

+ lca 

2 

W 

TCBSecbits 

+ lcc 

1 

B 

TCBspbytes 

+ lcd 

1 

B 

TCB_ulSRIndex 

+ lce 

4 

D 

TCBMiscFlags 

+ ld2 

1 

B 

TCBModeFlags 

+ ld3 

2 

W 

TCBSpareFlags 

+ ld5 

1 

B 

TCBLibiFlags 

+ ld6 

1 

B 

TCBFiller 

+ ld7 

1 

B 

TCB_ProcNameBuf 

+ ld8 

4 

D 

TCB_Ob jNameBuf 

+ ldc 

4 

D 

TCB_TmpNameBuf 

+ le0 

4 

D 


Kernel Boost Lock nesting count. 

Next priority queue in chain 

Previous priority queue in chain 

Higher priority thread 

Lower priority thread 

Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 

Kernel entry force flags 

bit vector of pending signals 

bit vector of postponed signals 

bit vec of signals being processed 

report record of active exception 

tid of terminator -75797 

Security bits 54735 

To keep size 4*N 54735 

Last semaphore cleared in MUX 72485 

Used for hard error processing 

Mode flags for OPEN - for WhatVolume 

Spare flags 

84537 

To keep size 4*N 
Pointer to procedure name 
Pointer to object name buffer 
aka TCB_TgtModNameBuf 



TCB_SrcModNameBuf 

+ le4 

4 

D 

Used by loader 

TCB_FaultBuf 

+ le8 

4 

D 


TCB_Ob jNameBuf L 

tlec 

2 

W 

Length of object name buffer 

TCB_TmpNameBuf L 

tlee 

2 

W 


TCB_SrcModNameBuf L 

+lf0 

2 

W 


TCB_FaultBuf L 

+ lf 2 

2 

w 


TCBSecchild 

+ lf 4 

4 

D 

Child Security data 54735 


Thread Control Block for OS/2 Warp V3.0 with Fix-Pack 


See: Fix pack 09 for details of the change introduced in this fix-pack. 


Field Name 

TCBOrdinal 

TCBNumber 

TCBForcedActions 

TCBpPTDA 

TCBpTSD 

TCBptib 

TCBpTCBNext 

TCBcbStackMax 

TCBcbStackCur 

TCBpStack 

TCBpStackl 6Lo 

TCBpStackl 6Hi 

TCBpLibiHead 

TCBpLibiCurr 

TCBpLibiFree 

TCB_pcriFrameType 

TCB_pFrameBase 

TCB_hookheadLocal 

TCB_phookOwnerHead 

TCBpteKStackTCBO 

TCBpteKStackTCBl 

TCBpteKStackTSD 

TCBpteKStackPTDAO 


Offset Length Type Description 

+02 W Ordinal number of thread in PTDA 

+22 W Thread slot number 

+44 D Bit vector of forced actions 

+84 D Pointer to the PTDA 

+c 4 D Pointer to thread swappable data 

+10 4 D Pointer to thread info block 

+14 4 D forward link to next (active) TCB 

+18 4 D Virtual size of stack object 

+ 1 c 4 D Committed size of stack object 

+20 4 D Virtual base of stack 

+24 4 D Virtual base of 16-bit stack 

+28 4 D Virtual limit of 16-bit stack 

+2c 4 D Link to libi load data area 

+30 4 D Link to libi load data area 

+34 4 D Link to libi free data area 

+38 4 D stack frame type 

+3c 4 D stack frame base pointer 

+40 8 D local context hook head 

+48 4 D linked list of hook blocks 

+4c 4 D KStack page 0 of TCB 

+50 4 D KStack page 1 of TCB 

+54 4 D KStack TSD page 

+58 4 D KStack page 0 of PTDA 

+5c 4 D KStack page 1 of PTDA 


TCBpteKStackPTDAl 


TCBpteKStackPTDA2 

+ 60 

4 

D 

TCBCurrTCB 

+ 64 

4 

D 

TCBCurrTSD 

+ 68 

4 

D 

TCBBiasTCB 

+ 6 c 

4 

D 

TCBBiasTSD 

+70 

4 

D 

TCBpDHRetAddr 

+74 

4 

D 

TCBTLMA 

+78 

80 

D 

TCBDMAAdd 

+f 8 

4 

D 

TCBSecPos 

+ f c 

4 

D 

TCBThisSFT 

+ 100 

4 

D 

TCBValSec 

+ 104 

4 

D 

TCBpRTCB 

+ 108 

4 

D 

TCBProc_ID 

+ 10c 

2 

W 

TCBUser_ID 

+ 10e 

2 

W 

TCBf Sharing 

+ 110 

1 

B 

TCBSrvAttrib 

+ 111 

1 

B 

TCB JfnFlag 

+ 112 

1 

B 

TCBAllowed 

+ 113 

1 

B 

TCBOpCookie 

+ 114 

4 

D 

TCBOpFlags 

+ 118 

2 

W 

TCBCurBuf 

+ lla 

4 

D 

TCBThishVPB 

+ lle 

2 

W 

TCBNextAdd 

+ 120 

2 

W 

TCBBytSecPos 

+ 122 

2 

W 

TCBClusNum 

+ 124 

2 

W 

TCBLastPos 

+ 126 

2 

W 

TCBBytCnt 1 

+ 128 

2 

W 

TCBBytCnt2 

+ 12a 

2 

W 

TCBSecCnt 

+ 12c 

2 

W 

TCBSecClusPos 

+ 12e 

1 

B 

TCBBuf HE 

+ 12 f 

1 

B 

TCBactBuf HE 

+ 130 

1 

B 

TCBf IOLock 

+ 131 

1 

B 

TCBLockHndl 

+ 132 

C 

S 

TCBThisCDS 

+ 13e 

4 

D 

TCBThisFSC 

+ 142 

4 

D 

TCBpTmpCDS 

+ 146 

4 

D 

TCBpOpenBuf 

+ 14a 

2 

W 

TCBpSearchBuf 

+ 14c 

2 

W 


KStack page 2 of PTDA 

SS-relative offset of Current TCB 

SS-relative offset of Current TSD 

stack-to-f lat TCB conversion value 

stack-to-f lat TSD conversion value 

82818 Pointer to DHRouter return address 

Thread local memory area 

User's I/O transfer address 

Position of first sector accessed within 
file 

pointer to SFT we're working with 

Number of valid (previously written) 
sectors 

Redirector TCB (Used by LANMAN) 

process ID for file sharing checks 

user ID for file sharing checks 

non-zero ==> no redirection 

see SetAttrib/f ile . asm 

JFN flag bits for current fil handle 

Allowed I 24 answers (see allowed_) 

server's per file cookie 

whether server wants oplock, etc. 

currently assigned buffer 

handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 



TCBFailErr 

+ 14e 

2 

W 

TCB_SemInfo 

+ 150 

4 

D 

TCB_SemDebugAddr 

+ 154 

4 

D 

TCB_NPX_Buf fer 

+ 158 

4 

D 

TCBpTCBWaitNext 

+ 15c 

4 

D 

TCBpTCBWaitList 

+ 160 

4 

D 

TCBQState 

+ 164 

1 

B 

TCBState 

+ 165 

1 

B 

TCBWakeFlags 

+ 166 

1 

B 

TCBcWindowBoost 

+ 167 

1 

B 

TCBPriClass 

+ 168 

1 

B 

TCBPriLevel 

+ 169 

1 

B 

TCBPriClassMod 

+ 16a 

1 

B 

TCBSchFlags 

+ 16b 

1 

B 

TCBPriority 

+ 16c 

2 

W 

TCBPriorityMin 

+ 16e 

2 

W 

TCBcBoostLock 

+ 170 

4 

D 

TCBpTCBPriNextQ 

+ 174 

4 

D 

TCBpTCBPriPrevQ 

+ 178 

4 

D 

TCBpTCBPriHigher 

+ 17c 

4 

D 

TCBpTCBPriLower 

+ 180 

4 

D 

TCBpTCBPriNext 

+ 184 

4 

D 

TCBpTCBPriPrev 

+ 188 

4 

D 

TCBpTCBWakeup 

+ 18c 

4 

D 

TCBSleepID 

+ 190 

4 

D 

TCBtoe 

+ 194 

10 

S 

TCBCheckedSig 

+ la4 

1 

B 

TCB f Swapping 

+ la5 

1 

B 

TCBVolIONest 

+ la6 

1 

B 

TCBReqPktFlg 

+ la7 

1 

B 

TCBReqPkt 

+ la8 

4 

D 

TCBSysTime 

+ lac 

4 

D 

TCBUserTime 

+ lb0 

4 

D 

TCB_pPVDBThd 

+ lb4 

4 

D 

TCB_f lDbg 

+ lb8 

4 

D 

TCBCpl2_ESP 

+ lbc 

4 

D 

TCBCpl2_SS 

+ lc0 

2 

W 

TCBNewFlags 

+ lc2 

1 

B 

TCBEntryActions 

+ lc3 

1 

B 


NZ if user did FAIL on I 24 

16bit addr of the ramsem blocked upon 

debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 

Misc. Scheduler flags 

Calculated Priority 

Minimum Scheduling priority 

Kernel Boost Lock nesting count. 

Next priority queue in chain 

Previous priority queue in chain 

Higher priority thread 

Lower priority thread 

Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 
Kernel entry force flags 



TCBSig_pend 

+ lc4 

2 

W 

bit vector of pending signals 

TCBSig_holding 

+ lc6 

2 

W 

bit vector of postponed signals 

TCBSig_cur 

+ lc8 

2 

W 

bit vec of signals being processed 

TCBXcptRepRec 

+ lca 

4 

D 

report record of active exception 

TCBSig_termtid 

+ lce 

2 

W 

tid of terminator -75797 

TCBSecbits 

+ ld0 

1 

B 

Security bits 54735 

TCBspbytes 

+ ldl 

1 

B 

To keep size 4*N 54735 

TCB_ulSRIndex 

+ ld2 

4 

D 

Last semaphore cleared in MUX 72485 

TCBMiscFlags 

+ ld6 

1 

B 

Used for hard error processing 

TCBModeFlags 

+ ld7 

2 

W 

Mode flags for OPEN - for WhatVolume 

TCBSpareFlags 

+ ld9 

1 

B 

Spare flags 

TCBLibiFlags 

+ lda 

1 

B 

84537 

TCBFiller 

+ ldb 

1 

B 

To keep size 4*N 

TCB_ProcNameBuf 

+ ldc 

4 

D 

Pointer to procedure name 

TCB_Ob jNameBuf 

+ le0 

4 

D 

Pointer to object name buffer 

TCB_TmpNameBuf 

+ le4 

4 

D 

aka TCB_TgtModNameBuf 

T C B_S r cMo dN ame B u f 

+ le8 

4 

D 

Used by loader 

TCB_FaultBuf 

+ lec 

4 

D 


TCB_Ob jNameBuf L 

+ lf0 

2 

W 

Length of object name buffer 

TCB_TmpNameBuf L 

+ lf 2 

2 

W 


TCB_SrcModNameBuf L 

+ lf 4 

2 

W 


TCB_FaultBuf L 

+ lf 6 

2 

W 


TCBSecchild 

+ lf 8 

4 

D 

Child Security data 54735 

TCBLibiFlags flag definitions: 





Name Bit Mask Description 

INIT_ROUTINE_FAILED (0x01) 84537 Set if dll init routine failed 


Thread Control Block for OS/2 Warp V3.0 with Fix-Pack 1 1 
Later 

Field Name Offset Length Type Description 

TCBOrdinal +02 W Ordinal number of thread in PTDA 

+2 


TCBNumber 


2 


W 


Thread slot number 



TCBForcedActions 


TCBpPTDA 

TCBpTSD 

TCBptib 

TCBpTCBNext 

TCBcbStackMax 

TCBcbStackCur 

TCBpStack 

TCBpStackl 6Lo 

TCBpStackl 6Hi 

TCBpLibiHead 

TCBpLibiCurr 

TCBpLibiFree 

TCB_pcriFrameType 

TCB_pFrameBase 

TCB_hookheadLocal 

TCB_phookOwnerHead 

TCBpteKStackTCBO 

TCBpteKStackTCBl 

TCBpteKStackTSD 

TCBpteKStackPTDAO 

TCBpteKStackPTDAl 

TCBpteKStackPTDA2 

TCBCurrTCB 

TCBCurrTSD 

TCBBiasTCB 

TCBBiasTSD 

TCBpDHRetAddr 

TCBTLMA 

TCBDMAAdd 

TCBSecPos 

TCBThisSFT 

TCBValSec 

TCBpRTCB 
TCBProc_ID 
TCBUser_ID 
TCBf Sharing 
TCBSrvAttrib 


+ 4 

4 

D 

Bit vector of forced actions 

+ 8 

4 

D 

Pointer to the PTDA 

+c 

4 

D 

Pointer to thread swappable data 

+ 10 

4 

D 

Pointer to thread info block 

+ 14 

4 

D 

forward link to next (active) TCB 

+ 18 

4 

D 

Virtual size of stack object 

+ 1 c 

4 

D 

Committed size of stack object 

+20 

4 

D 

Virtual base of stack 

+ 24 

4 

D 

Virtual base of 16-bit stack 

+ 28 

4 

D 

Virtual limit of 16-bit stack 

+2c 

4 

D 

Link to libi load data area 

+30 

4 

D 

Link to libi load data area 

+34 

4 

D 

Link to libi free data area 

+38 

4 

D 

stack frame type 

+3c 

4 

D 

stack frame base pointer 

+40 

8 

D 

local context hook head 

+48 

4 

D 

linked list of hook blocks 

+4c 

4 

D 

KStack page 0 of TCB 

+50 

4 

D 

KStack page 1 of TCB 

+ 54 

4 

D 

KStack TSD page 

+ 58 

4 

D 

KStack page 0 of PTDA 

+5c 

4 

D 

KStack page 1 of PTDA 

+ 60 

4 

D 

KStack page 2 of PTDA 

+ 64 

4 

D 

SS-relative offset of Current TCB 

+ 68 

4 

D 

SS-relative offset of Current TSD 

+ 6 c 

4 

D 

stack-to-f lat TCB conversion value 

+70 

4 

D 

stack-to-f lat TSD conversion value 

+74 

4 

D 

82818 Pointer to DHRouter return address 

+78 

80 

D 

Thread local memory area 

+f 8 

4 

D 

User's I/O transfer address 

+ f c 

4 

D 

Position of first sector accessed within 
file 

+ 100 

4 

D 

pointer to SFT we're working with 

+ 104 

4 

D 

Number of valid (previously written) 
sectors 

+ 108 

4 

D 

Redirector TCB (Used by LANMAN) 

+ 10c 

2 

W 

process ID for file sharing checks 

+ 10e 

2 

W 

user ID for file sharing checks 

+ 110 

1 

B 

non-zero ==> no redirection 

+ 111 

1 

B 

see SetAttrib/f ile . asm 

+ 112 

1 

B 

JFN flag bits for current fil handle 


TCB JfnFlag 



TCBAllowed 

+ 113 

1 

B 

TCBOpCookie 

+ 114 

4 

D 

TCBOpFlags 

+ 118 

2 

W 

TCBCurBuf 

+ lla 

4 

D 

TCBThishVPB 

+ lle 

2 

W 

TCBNextAdd 

+ 120 

2 

W 

TCBBytSecPos 

+ 122 

2 

W 

TCBClusNum 

+ 124 

2 

W 

TCBLastPos 

+ 126 

2 

W 

TCBBytCnt 1 

+ 128 

2 

W 

TCBBytCnt2 

+ 12a 

2 

W 

TCBSecCnt 

+ 12c 

2 

W 

TCBSecClusPos 

+ 12e 

1 

B 

TCBBuf HE 

+ 12 f 

1 

B 

TCBactBuf HE 

+ 130 

1 

B 

TCBf IOLock 

+ 131 

1 

B 

TCBLockHndl 

+ 132 

C 

S 

TCBThisCDS 

+ 13e 

4 

D 

TCBThisFSC 

+ 142 

4 

D 

TCBpTmpCDS 

+ 146 

4 

D 

TCBpOpenBuf 

+ 14a 

2 

W 

TCBpSearchBuf 

+ 14c 

2 

W 

TCBFailErr 

+ 14e 

2 

W 

TCB_SemInfo 

+ 150 

4 

D 

TCB_SemDebugAddr 

+ 154 

4 

D 

TCB_NPX_Buf fer 

+ 158 

4 

D 

TCBpTCBWaitNext 

+ 15c 

4 

D 

TCBpTCBWaitList 

+ 160 

4 

D 

TCBQState 

+ 164 

1 

B 

TCBState 

+ 165 

1 

B 

TCBWakeFlags 

+ 166 

1 

B 

TCBcWindowBoost 

+ 167 

1 

B 

TCBPriClass 

+ 168 

1 

B 

TCBPriLevel 

+ 169 

1 

B 

TCBPriClassMod 

+ 16a 

1 

B 

TCBSchFlags 

+ 16b 

1 

B 

TCBPriority 

+ 16c 

2 

W 

TCBPriorityMin 

+ 16e 

2 

W 

TCBcBoostLock 

+ 170 

4 

D 


Allowed I 24 answers (see allowed_) 
server's per file cookie 
whether server wants oplock, etc. 
currently assigned buffer 
handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 

NZ if user did FAIL on I 24 

16bit addr of the ramsem blocked upon 

debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 
Misc. Scheduler flags 
Calculated Priority 
Minimum Scheduling priority 
Kernel Boost Lock nesting count. 



TCBpTCBPriNextQ 

+ 174 

4 

D 

TCBpTCBPriPrevQ 

+ 178 

4 

D 

TCBpTCBPriHigher 

+ 17c 

4 

D 

TCBpTCBPriLower 

+ 180 

4 

D 

TCBpTCBPriNext 

+ 184 

4 

D 

TCBpTCBPriPrev 

+ 188 

4 

D 

TCBpTCBWakeup 

+ 1 8c 

4 

D 

TCBSleepID 

+ 190 

4 

D 

TCBtoe 

+ 194 

14 

S 

TCBCheckedSig 

+ la8 

1 

B 

TCB f Swapping 

+ la9 

1 

B 

TCBVolIONest 

+ laa 

1 

B 

TCBReqPktFlg 

+ lab 

1 

B 

TCBReqPkt 

+ lac 

4 

D 

TCBSysTime 

+ lb0 

4 

D 

TCBUserTime 

+ lb4 

4 

D 

TCB_pPVDBThd 

+ lb8 

4 

D 

TCB_f lDbg 

+ lbc 

4 

D 

TCBCpl2_ESP 

+ lc0 

4 

D 

TCBCpl2_SS 

+ lc4 

2 

W 

TCBNewFlags 

+ lc6 

1 

B 

TCBEntryActions 

+ lc7 

1 

B 

TCBSig_pend 

+ lc8 

2 

W 

TCBSig_holding 

+ lca 

2 

W 

TCBSig_cur 

+ lcc 

2 

W 

TCBXcptRepRec 

+ lce 

4 

D 

TCBSig_termtid 

+ ld2 

2 

W 

TCBSecbits 

+ ld4 

1 

B 

TCBspbytes 

+ ld5 

1 

B 

TCB_ulSRIndex 

+ ld6 

4 

D 

TCBMiscFlags 

+ lda 

1 

B 

TCBModeFlags 

+ ldb 

2 

W 

TCBSpareFlags 

+ ldd 

1 

B 

TCBLibiFlags 

+ lde 

1 

B 

TCBFiller 

+ ldf 

1 

B 

TCB_ProcNameBuf 

+ le0 

4 

D 

TCB_Ob jNameBuf 

+ le4 

4 

D 

TCB_TmpNameBuf 

+ le8 

4 

D 

T C B_S r cMo dN ame B u f 

+ lec 

4 

D 


Next priority queue in chain 

Previous priority queue in chain 

Higher priority thread 

Lower priority thread 

Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 

Kernel entry force flags 

bit vector of pending signals 

bit vector of postponed signals 

bit vec of signals being processed 

report record of active exception 

tid of terminator -75797 

Security bits 54735 

To keep size 4*N 54735 

Last semaphore cleared in MUX 72485 

Used for hard error processing 

Mode flags for OPEN - for WhatVolume 

Spare flags 

84537 

To keep size 4*N 
Pointer to procedure name 
Pointer to object name buffer 
aka TCB_TgtModNameBuf 
Used by loader 



TCB_FaultBuf 

+ lf0 

4 

D 


TCB_Ob jNameBuf L 

+ lf 4 

2 

W 

Length of object name buffer 

TCB_TmpNameBuf L 

+ lf 6 

2 

W 


TCB_SrcModNameBuf L 

+lf 8 

2 

w 


TCB_FaultBuf L 

+ lf a 

2 

w 


TCBSecchild 

+ 1 f c 

4 

D 

Child Security data 54735 


Thread Control Block for OS/2 V2.1 1 with Fix-Pack 90 
Later 


See: Fix pack 90 for details of the. change introduced in this fix-pack. 


Field Name 
TCBOrdinal 
TCBNumber 
TCBForcedActions 
TCBpPTDA 
TCBpTSD 
TCBptib 
TCBpTCBNext 
TCBcbStackMax 
TCBcbStackCur 
TCBpStack 
TCBpStackl 6Lo 
TCBpStackl 6Hi 
TCBpLibiHead 
TCBpLibiCurr 
TCBpLibiFree 
TCB_pcriFrameType +38 
TCB_pFrameBase +3c 

TCB_hookheadLocal +40 
TCB_phookOwnerHead +48 
TCBpteKStackTCBO 
TCBpteKStackTCBl 
TCBpteKStackTSD 
TCBpteKStackPTDAO +58 

+ 5c 4 D 


Thread slot number 

Bit vector of forced actions 

Pointer to the PTDA 

Pointer to thread swappable data 

Pointer to thread info block 

forward link to next (active) TCB 

Virtual size of stack object 

Committed size of stack object 

Virtual base of stack 

Virtual base of 16-bit stack 

Virtual limit of 16-bit stack 

Link to libi load data area 

Link to libi load data area 

Link to libi free data area 

stack frame type 

stack frame base pointer 

local context hook head 

linked list of hook blocks 

KStack page 0 of TCB 

KStack page 1 of TCB 

KStack TSD page 

KStack page 0 of PTDA 

KStack page 1 of PTDA 


Offset Length Type Description 

+02 W Ordinal number of thread in PTDA 


+2 2 W 

+ 4 4 D 

+ 8 4 D 

+c 4 D 

+ 10 4 D 

+ 14 4 D 

+ 18 4 D 

+ 1 c 4 D 

+20 4 D 

+24 4 D 

+28 4 D 

+2c 4 D 

+ 30 4 D 

+ 34 4 D 

4 D 

4 D 

8 D 

4 D 

+ 4c 4 D 

+ 50 4 D 

+ 54 4 D 

4 D 


TCBpteKStackPTDAl 


TCBpteKStackPTDA2 

+ 60 

4 

D 

TCBCurrTCB 

+ 64 

4 

D 

TCBCurrTSD 

+ 68 

4 

D 

TCBBiasTCB 

+ 6 c 

4 

D 

TCBBiasTSD 

+70 

4 

D 

TCBpDHRetAddr 

+74 

4 

D 

TCBDMAAdd 

+78 

4 

D 

TCBSecPos 

+7 c 

4 

D 

TCBThisSFT 

+ 80 

4 

D 

TCBValSec 

+ 84 

4 

D 

TCBpRTCB 

+ 88 

4 

D 

TCBProc_ID 

+ 8c 

2 

W 

TCBUser_ID 

+ 8e 

2 

W 

TCBf Sharing 

+ 90 

1 

B 

TCBSrvAttrib 

+ 91 

1 

B 

TCB JfnFlag 

+ 92 

1 

B 

TCBAllowed 

+ 93 

1 

B 

TCBOpCookie 

+ 94 

4 

D 

TCBOpFlags 

+ 98 

2 

W 

TCBCurBuf 

+ 9a 

4 

D 

TCBThishVPB 

+ 9e 

2 

W 

TCBNextAdd 

+a0 

2 

W 

TCBBytSecPos 

+a2 

2 

W 

TCBClusNum 

+a4 

2 

W 

TCBLastPos 

+a6 

2 

W 

TCBBytCnt 1 

+a8 

2 

W 

TCBBytCnt2 

+aa 

2 

W 

TCBSecCnt 

+ac 

2 

W 

TCBSecClusPos 

+ae 

1 

B 

TCBBuf HE 

+af 

1 

B 

TCBactBuf HE 

+b0 

1 

B 

TCBf IOLock 

+bl 

1 

B 

TCBLockHndl 

+b2 

C 

S 

TCBThisCDS 

+be 

4 

D 

TCBThisFSC 

+c2 

4 

D 

TCBpTmpCDS 

+c6 

4 

D 

TCBpOpenBuf 

+ca 

2 

W 

TCBpSearchBuf 

+ CC 

2 

W 

TCBFailErr 

+ce 

2 

W 


KStack page 2 of PTDA 

SS-relative offset of Current TCB 

SS-relative offset of Current TSD 

stack-to-f lat TCB conversion value 

stack-to-f lat TSD conversion value 

82818 Pointer to DHRouter return address 

User's I/O transfer address 

Position of first sector accessed within 
file 

pointer to SFT we're working with 

Number of valid (previously written) 
sectors 

Redirector TCB (Used by LANMAN) 

process ID for file sharing checks 

user ID for file sharing checks 

non-zero ==> no redirection 

see SetAttrib/f ile . asm 

JFN flag bits for current fil handle 

Allowed I 24 answers (see allowed_) 

server's per file cookie 

whether server wants oplock, etc. 

currently assigned buffer 

handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 

NZ if user did FAIL on I 24 



TCB_SemInfo 

+d0 

4 

D 

TCB_SemDebugAddr 

+d4 

4 

D 

TCB_NPX_Buf fer 

+d8 

4 

D 

TCBpTCBWaitNext 

+dc 

4 

D 

TCBpTCBWaitList 

+e0 

4 

D 

TCBQState 

+e4 

1 

B 

TCBState 

+e5 

1 

B 

TCBWakeFlags 

+e6 

1 

B 

TCBcWindowBoost 

+e7 

1 

B 

TCBPriClass 

+e8 

1 

B 

TCBPriLevel 

+e9 

1 

B 

TCBPriClassMod 

+ea 

1 

B 

TCBSchFlags 

+eb 

1 

B 

TCBPriority 

+ec 

2 

W 

TCBPriorityMin 

+ee 

2 

W 

TCBcBoostLock 

+f0 

4 

D 

TCBpTCBPriNextQ 

+ f 4 

4 

D 

TCBpTCBPriPrevQ 

+ f 8 

4 

D 

TCBpTCBPriHigher 

+fc 

4 

D 

TCBpTCBPriLower 

+ 100 

4 

D 

TCBpTCBPriNext 

+ 104 

4 

D 

TCBpTCBPriPrev 

+ 108 

4 

D 

TCBpTCBWakeup 

+ 10c 

4 

D 

TCBSleepID 

+ 110 

4 

D 

TCBtoe 

+ 114 

14 

S 

TCBCheckedSig 

+ 128 

1 

B 

TCB f Swapping 

+ 129 

1 

B 

TCBVolIONest 

+ 12a 

1 

B 

TCBReqPktFlg 

+ 12b 

1 

B 

TCBReqPkt 

+ 12c 

4 

D 

TCBpMemStatCur 

+ 130 

4 

D 

TCBMemStat 

+ 134 

3C 

S 

TCBSysTime 

+ 170 

4 

D 

TCBUserTime 

+ 174 

4 

D 

TCB_pPVDBThd 

+ 178 

4 

D 

TCB_f lDbg 

+ 17c 

4 

D 

TCBCpl2_ESP 

+ 180 

4 

D 

TCBCpl2_SS 

+ 184 

2 

W 

TCBNewFlags 

+ 186 

1 

W 


16bit addr of the ramsem blocked upon 
debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 

Misc. Scheduler flags 

Calculated Priority 

Minimum Scheduling priority 

Kernel Boost Lock nesting count. 

Next priority queue in chain 

Previous priority queue in chain 

Higher priority thread 

Lower priority thread 

Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

Current structure being filled in 

statistics structure 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 



TCBEntryActions 

+ 187 

1 

B 

Kernel entry force flags 

TCBSig_pend 

+ 188 

2 

W 

bit vector of pending signals 

TCBSig_holding 

+ 18a 

2 

W 

bit vector of postponed signals 

TCBSig_cur 

+ 18c 

2 

w 

bit vec of signals being processed 

TCBXcptRepRec 

+ 18e 

4 

D 

report record of active exception 

TCBSig_termtid 

+ 192 

2 

W 


TCBSecbits 

+ 194 

1 

B 

Security bits 54735 

TCBspbytes 

+ 195 

1 

B 

To keep size 4*N 54735 

TCB_ulSRIndex 

+ 196 

4 

D 


TCBMiscFlags 

+ 19a 

1 

D 

Used for hard error processing 

TCBModeFlags 

+ 19b 

2 

D 

Mode flags for OPEN - for WhatVolume 

TCBSpareFlags 

+ 19d 

1 

B 

Spare flags 

TCBLibiFlags 

+ 19e 

1 

B 


TCBFiller 

+ 19f 

1 

B 


TCB_ProcNameBuf 

+ la0 

4 

D 

Pointer to procedure name 

TCB_Ob jNameBuf 

+ la4 

4 

D 

Pointer to object name buffer 

TCB_TmpNameBuf 

+ la8 

4 

D 

aka TCB_TgtModNameBuf 

T C B_S r cMo dN ame B u f 

+ lac 

4 

D 

Used by loader 

TCB_FaultBuf 

+ lb0 

4 

D 


TCB_Ob jNameBuf L 

+ lb4 

2 

W 

Length of object name buffer 

TCB_TmpNameBuf L 

+ lb6 

2 

W 


TCB_SrcModNameBuf L 

+ lb8 

2 

W 


TCB_FaultBuf L 

+ lba 

2 

W 


TCBSecchild 

+ lbc 

4 

D 

Child Security data 54735 


TCBLibiFlags flag definitions: 

Name Bit Mask Description 

INIT_ROUTINE_FAILED (0x01) 84537 Set if dll init routine failed 


Thread Control Block for OS/2 V2.1 1 


Field Name 

Offset Length 

Type 

Description 

TCBOrdinal 

+ 0 2 

W 

Ordinal number of thread in PTDA 

TCBNumber 

+2 2 

W 

Thread slot number 



TCBForcedActions 

TCBpPTDA 

TCBpTSD 

TCBptib 

TCBpTCBNext 

TCBcbStackMax 

TCBcbStackCur 

TCBpStack 

TCBpStackl 6Lo 

TCBpStackl 6Hi 

TCBpLibiHead 

TCBpLibiCurr 

TCBpLibiFree 

TCB_pcriFrameType 

TCB_pFrameBase 

TCB_hookheadLocal 

TCB_phookOwnerHead 

TCBpteKStackTCBO 

TCBpteKStackTCBl 

TCBpteKStackTSD 

TCBpteKStackPTDAO 

TCBpteKStackPTDAl 

TCBpteKStackPTDA2 

TCBCurrTCB 

TCBCurrTSD 

TCBBiasTCB 

TCBBiasTSD 

TCBDMAAdd 

TCBSecPos 

TCBThisSFT 

TCBValSec 

TCBpRTCB 
TCBProc_ID 
TCBUser_ID 
TCBf Sharing 
TCBSrvAttrib 
TCB JfnFlag 
TCBAllowed 
TCBOpCookie 


+ 4 4 

+ 8 4 

+c 4 

+ 10 4 

+ 14 4 

+ 18 4 

+ 1 c 4 

+20 4 

+24 4 

+28 4 

+2c 4 

+ 30 4 

+ 34 4 

+ 38 4 

+3c 4 

+ 40 8 

+ 48 4 

+ 4c 4 

+ 50 4 

+ 54 4 

+ 58 4 

+ 5c 4 

+ 60 4 

+ 64 4 

+ 68 4 

+ 6c 4 

+ 70 4 

+ 74 4 

+ 78 4 

+ 7c 4 

+ 80 4 

+ 84 4 

+ 88 2 

+ 8a 2 

+ 8c 1 

+ 8d 1 

+ 8e 1 

+ 8f 1 

+ 90 4 


D Bit vector of forced actions 

D Pointer to the PTDA 

D Pointer to thread swappable data 

D Pointer to thread info block 

D forward link to next (active) TCB 

D Virtual size of stack object 

D Committed size of stack object 

D Virtual base of stack 

D Virtual base of 16-bit stack 

D Virtual limit of 16-bit stack 

D Link to libi load data area 

D Link to libi load data area 

D Link to libi free data area 

D stack frame type 

D stack frame base pointer 

D local context hook head 

D linked list of hook blocks 

D KStack page 0 of TCB 

D KStack page 1 of TCB 

D KStack TSD page 

D KStack page 0 of PTDA 

D KStack page 1 of PTDA 

D KStack page 2 of PTDA 

D SS-relative offset of Current TCB 

D SS-relative offset of Current TSD 

D stack-to-f lat TCB conversion value 

D stack-to-f lat TSD conversion value 

D User's I/O transfer address 

D Position of first sector accessed within 

file 

D pointer to SFT we're working with 

D Number of valid (previously written) 
sectors 

D Redirector TCB (Used by LANMAN) 

W process ID for file sharing checks 
W user ID for file sharing checks 
B non-zero ==> no redirection 

B see SetAttrib/f ile . asm 

B JFN flag bits for current fil handle 
B Allowed I 24 answers (see allowed_) 

D server's per file cookie 



TCBOpFlags 

+ 94 

2 

W 

TCBCurBuf 

+ 96 

4 

D 

TCBThishVPB 

+ 9a 

2 

W 

TCBNextAdd 

+ 9c 

2 

W 

TCBBytSecPos 

+ 9e 

2 

W 

TCBClusNum 

+a0 

2 

W 

TCBLastPos 

+a2 

2 

W 

TCBBytCnt 1 

+a4 

2 

W 

TCBBytCnt2 

+a6 

2 

W 

TCBSecCnt 

+a8 

2 

W 

TCBSecClusPos 

+aa 

1 

B 

TCBBuf HE 

+ab 

1 

B 

TCBactBuf HE 

+ac 

1 

B 

TCBf IOLock 

+ad 

1 

B 

TCBLockHndl 

+ae 

C 

S 

TCBThisCDS 

+ba 

4 

D 

TCBThisFSC 

+be 

4 

D 

TCBpTmpCDS 

+c2 

4 

D 

TCBpOpenBuf 

+c6 

2 

W 

TCBpSearchBuf 

+c8 

2 

W 

TCBFailErr 

+ca 

2 

W 

TCB_SemInfo 

+ CC 

4 

D 

TCB_SemDebugAddr 

+d0 

4 

D 

TCB_NPX_Buf fer 

+d4 

4 

D 

TCBpTCBWaitNext 

+d8 

4 

D 

TCBpTCBWaitList 

+dc 

4 

D 

TCBQState 

+e0 

1 

B 

TCBState 

+el 

1 

B 

TCBWakeFlags 

+e2 

1 

B 

TCBcWindowBoost 

+e3 

1 

B 

TCBPriClass 

+e4 

1 

B 

TCBPriLevel 

+e5 

1 

B 

TCBPriClassMod 

+e6 

1 

B 

TCBSchFlags 

+e7 

1 

B 

TCBPriority 

+e8 

2 

W 

TCBPriorityMin 

+ea 

2 

W 

TCBcBoostLock 

+ec 

4 

D 

TCBpTCBPriNextQ 

+ f0 

4 

D 

TCBpTCBPriPrevQ 

+ f 4 

4 

D 


whether server wants oplock, etc. 
currently assigned buffer 
handle of current VPB 

position of first byte within sector 

Number of bytes in 1st sector 

# of bytes in last sector 

number of whole sectors 

posit of first sector within cluster 

How to handle a HardError 

action response from user on HardErr 

NZ if TCBLockHndl is valid 

Lock handle of user mem 

Address of current CDS 

address of current FSC 

Address of dummy cds 

Address of current OpenBuf 

Address of SearchBuf 

NZ if user did FAIL on I 24 

16bit addr of the ramsem blocked upon 

debugger display address for ksems 

Next waiting TCB 

Threads waiting for me to die 

Scheduler queue location (actual) 

Current scheduler state (desired) 

TKSleep/TKWakeup Flags 

Window Boost count 

Priority Class (user) 

Priority Level (user) 

Priority Class modifier bits 
Misc. Scheduler flags 
Calculated Priority 
Minimum Scheduling priority 
Kernel Boost Lock nesting count. 

Next priority queue in chain 
Previous priority queue in chain 



TCBpTCBPriHigher 

+ f 8 

4 

D 

TCBpTCBPriLower 

+ fc 

4 

D 

TCBpTCBPriNext 

+ 100 

4 

D 

TCBpTCBPriPrev 

+ 104 

4 

D 

TCBpTCBWakeup 

+ 108 

4 

D 

TCBSleepID 

+ 10c 

4 

D 

TCBtoe 

+ 110 

14 

S 

TCBCheckedSig 

+ 124 

1 

B 

TCB f Swapping 

+ 125 

1 

B 

TCBVolIONest 

+ 126 

1 

B 

TCBReqPktFlg 

+ 127 

1 

B 

TCBReqPkt 

+ 128 

4 

D 

TCBpMemStatCur 

+ 12c 

4 

D 

TCBMemStat 

+ 130 

3C 

S 

TCBSysTime 

+ 16c 

4 

D 

TCBUserTime 

+ 170 

4 

D 

TCB_pPVDBThd 

+ 174 

4 

D 

TCB_f lDbg 

+ 178 

4 

D 

TCBCpl2_ESP 

+ 17c 

4 

D 

TCBCpl2_SS 

+ 180 

2 

W 

TCBNewFlags 

+ 182 

1 

W 

TCBEntryActions 

+ 183 

1 

B 

TCBSig_pend 

+ 184 

2 

W 

TCBSig_holding 

+ 186 

2 

W 

TCBSig_cur 

+ 188 

2 

W 

TCBXcptRepRec 

+ 18a 

4 

D 

TCBSig_termtid 

+ 18e 

2 

W 

TCBSecbits 

+ 190 

1 

B 

TCBspbytes 

+ 191 

1 

B 

TCB_ulSRIndex 

+ 192 

4 

D 

TCBMiscFlags 

+ 196 

1 

D 

TCBModeFlags 

+ 197 

2 

D 

TCBSpareFlags 

+ 199 

1 

B 

TCBLibiFlags 

+ 1 9a 

1 

B 

TCBFiller 

+ 1 9b 

1 

B 

TCB_ProcNameBuf 

+ 1 9c 

4 

D 

TCB_Ob jNameBuf 

+ la0 

4 

D 

TCB_TmpNameBuf 

+ la4 

4 

D 

T C B_S r cMo dN ame B u f 

+ la8 

4 

D 


Higher priority thread 

Lower priority thread 

Next same-priority thread 

Prev same-priority thread 

TKQueryWakeup TCB list 

Sleep ID this TCB is sleeping on 

Timeout/Starvation Timeout element 

Used by the loader 

status of swapping 

nesting level of FSH_DoVolIO 

Flag to indicate if request pkt in use 

I/O request packet for thread 

Current structure being filled in 

statistics structure 

time spent in system code 

time spent in user code 

Ptr to Perfview Data Block for this 
thread (pvdb_thd_s) . 

Saved TSS CPL2 stack pointer. 

Saved TSS CPL2 stack segment. 

Value copied from ptda_NewFiles 
Kernel entry force flags 
bit vector of pending signals 
bit vector of postponed signals 
bit vec of signals being processed 
report record of active exception 

Security bits 54735 
To keep size 4*N 54735 

Used for hard error processing 
Mode flags for OPEN - for WhatVolume 
Spare flags 

Pointer to procedure name 
Pointer to object name buffer 
aka TCB_TgtModNameBuf 
Used by loader 



TCB_FaultBuf 

+ lac 

4 

D 


TCB_Ob jNameBuf L 

+ lbO 

2 

W 

Length of object name buffer 

TCB_TmpNameBuf L 

+ lb2 

2 

W 


TCB_SrcModNameBuf L 

+ lb4 

2 

w 


TCB_FaultBuf L 

+ lb6 

2 

w 


TCBSecchild 

+ lb8 

4 

D 

Child Security data 54735 


Thread Swappable Data for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 ALLSTRICT kernel 


For TSD formats for other versions of OS/2 see: 

TSD for OS/2 Warp V4.0 and OS/2 Warp V3.0 RETAIL kernel 
TSD for OS/2 V2.1 1 ALLSTRICT kernel 
TSD for OS/2 V2.1 1 RETAIL kernel 


Pointers 

TCBpTSD points to the TSD associated with a TCB 
CurrTSD points to the current TSD. 

Locations 

System Arena. 

VM Owner 

tsd (Oxffcd) 

Format 


Field Name Offset Length Type Description 


TSDpad 

+ 0 

1000 

B 

TSDUserStack 

+ 1000 

F98 

W 

TSDUserESP 

+ lf 98 

4 

D 

TSDUserSS 

+lf 9c 

2 

W 

TSDUserSSPad 

+ lf 9e 

2 

W 

TSDKernelESP 

+lfa0 

4 

D 

TSDpTCB 

+ lfa4 

4 

D 

TSDpf nFault 

+lfa8 

4 

D 

TSDTrapNum 

flfac 

4 

D 

TSDerrcFault 

+lfb0 

4 

D 

TSDpl jmp 

+lfb4 

4 

D 

TSDselFault 

+ lfb8 

2 

W 

TSDCpl2_SSSize 

flfba 

2 

W 


Dummy page to catch faults 
Thread's kernel stack 
Saved user stack pointer 
Saved user stack segment 
Pad word pushed by gate 
Saved kernel stack pointer. 

Link to TCB 

ptr to local fault handler in effect 
TrapNum from the last fault 
error code from the last fault 
Buffer saved by TKCatchFault 
faulting selector 

Size of ring 2 stack - atleast thats 
what the user beleives 


TSDdescLDT 

+ lfbc 

8 

D 

TSDdescKStackSS 

+ 1 f c4 

8 

D 

TSDdescFPEM 

+ lfcc 

8 

D 

TSDdescTIB 

+ 1 f d4 

8 

D 

TSDulExitCode 

+ lfdc 

4 

D 

TSDerridFault 

+ lfeO 

4 

D 

TSDPFErr 

+ 1 f e4 

4 

D 

TSDIDbgRangeStart 

+ lfe8 

4 

D 

TSDIDbgRangeEnd 

+ lfec 

4 

D 

TSDIDbgLastAddr 

+ lffO 

4 

D 

TSDpPCB 

+ lf f 4 

4 

D 

TSDpDLLTerm 

+ lf f 8 

4 

D 

TSDcObjSem 

+ lffc 

4 

D 


LDT table descriptor 
SS descriptor 
reserved descriptor slot 
FS mapping to TIB 

Proposed Thread Exit code (for dbg) 
error id from page fault 
actual error from PGPagefault 


Pointer to Profile Control Block 

Pointer to data buffer 

Count of object semaphores held 


Thread Swappable Data for OS/2 Warp V3.0 RETAIL kernel 


Field Name 

Offset 

Length 

Type 

Description 

TSDUserStack 

+ 0 

F9C 

W 

Thread's kernel stack 

TSDUserESP 

+ f 9c 

4 

D 

Saved user stack pointer 

TSDUserSS 

+ fa0 

2 

W 

Saved user stack segment 

TSDUserSSPad 

+ fa2 

2 

W 

Pad word pushed by gate 

TSDKernelESP 

+ fa4 

4 

D 

Saved kernel stack pointer. 

TSDpTCB 

+ fa8 

4 

D 

Link to TCB 

TSDpf nFault 

+ fac 

4 

D 

ptr to local fault handler in effect 

TSDTrapNum 

+ fb0 

4 

D 

TrapNum from the last fault 

TSDerrcFault 

+ fb4 

4 

D 

error code from the last fault 

TSDpl jmp 

+ fb8 

4 

D 

Buffer saved by TKCatchFault 

TSDselFault 

+ fbc 

2 

W 

faulting selector 

TSDCpl2_SSSize 

+ fbe 

2 

W 

Size of ring 2 stack - atleast thats 
what the user beleives 

TSDdescLDT 

+ fc0 

8 

D 

LDT table descriptor 

TSDdescKStackSS 

+ fc8 

8 

D 

SS descriptor 

TSDdescFPEM 

+ fd0 

8 

D 

reserved descriptor slot 

TSDdescTIB 

+ fd8 

8 

D 

FS mapping to TIB 

TSDulExitCode 

+ fe0 

4 

D 

Proposed Thread Exit code (for dbg) 



TSDerridFault 

+ fe4 

4 

D 

error id from page fault 

TSDPFErr 

+ fe8 

4 

D 

actual error from PGPagefault 

TSDIDbgRangeStart 

+ fec 

4 

D 


TSDIDbgRangeEnd 

+ffO 

4 

D 


TSDIDbgLastAddr 

+ f f 4 

4 

D 


TSDpPCB 

+ f f 8 

4 

D 

Pointer to Profile Control Block 

TSDpDLLTerm 

+ffc 

4 

D 

Pointer to data buffer 


Thread Swappable Data for OS/2 V2.1 1 ALLSTRICT kernel 


Field Name 

Offset 

Length 

Type 

Description 

TSDpad 

+ 0 

1000 

B 

Dummy page to catch faults 

TSDUserStack 

+ 1000 

F98 

W 

Thread's kernel stack 

TSDUserESP 

+ lf 98 

4 

D 

Saved user stack pointer 

TSDUserSS 

+ lf 9c 

2 

W 

Saved user stack segment 

TSDUserSSPad 

+ lf 9e 

2 

W 

Pad word pushed by gate 

TSDKernelESP 

+ lfa0 

4 

D 

Saved kernel stack pointer. 

TSDpTCB 

+ lfa4 

4 

D 

Link to TCB 

TSDpf nFault 

+ lfa8 

4 

D 

ptr to local fault handler in effect 

TSDTrapNum 

+ lfac 

4 

D 

TrapNum from the last fault 

TSDerrcFault 

+ lfb0 

4 

D 

error code from the last fault 

TSDpl jmp 

+ lfb4 

4 

D 

Buffer saved by TKCatchFault 

TSDselFault 

+ lfb8 

2 

W 

faulting selector 

TSDCpl2_SSSize 

+ lfba 

2 

W 

Size of ring 2 stack - atleast thats 
what the user beleives 

TSDdescLDT 

+ lfbc 

8 

D 

LDT table descriptor 

TSDdescKStackSS 

+ lfc4 

8 

D 

SS descriptor 

TSDdescFPEM 

+ lf cc 

8 

D 

reserved descriptor slot 

TSDdescTIB 

+ lfd4 

8 

D 

FS mapping to TIB 

TSDulExitCode 

+ lfdc 

4 

D 

Proposed Thread Exit code (for dbg) 

TSDerridFault 

+ lfe0 

4 

D 

error id from page fault 

TSDPFErr 

+ lfe4 

4 

D 

actual error from PGPagefault 

TSDIDbgRangeStart 

+ lfe8 

4 

D 


TSDIDbgRangeEnd 

+ lfec 

4 

D 


TSDIDbgLastAddr 

+ lff0 

4 

D 


TSDpPCB 

+ lf f 4 

4 

D 

Pointer to Profile Control Block 



TSDpDLLTerm 
TSDcOb jSem 


+lf f 8 4 

+lffc 4 


D Pointer to data buffer 

D Count of object semaphores held 


Thread Swappable Data for OS/2 V2.1 1 RETAIL kernel 


Field Name 

Offset 

Length 

Type 

Description 

TSDUserStack 

+ 0 

F9C 

W 

Thread's kernel stack 

TSDUserESP 

+ f 9c 

4 

D 

Saved user stack pointer 

TSDUserSS 

+ fa0 

2 

W 

Saved user stack segment 

TSDUserSSPad 

+ fa2 

2 

W 

Pad word pushed by gate 

TSDKernelESP 

+ fa4 

4 

D 

Saved kernel stack pointer. 

TSDpTCB 

+ fa8 

4 

D 

Link to TCB 

TSDpf nFault 

+ fac 

4 

D 

ptr to local fault handler in effect 

TSDTrapNum 

+ fb0 

4 

D 

TrapNum from the last fault 

TSDerrcFault 

+ fb4 

4 

D 

error code from the last fault 

TSDpl jmp 

+ fb8 

4 

D 

Buffer saved by TKCatchFault 

TSDselFault 

+ fbc 

2 

W 

faulting selector 

TSDCpl2_SSSize 

+ fbe 

2 

W 

Size of ring 2 stack - atleast thats 
what the user beleives 

TSDdescLDT 

+ fc0 

8 

D 

LDT table descriptor 

TSDdescKStackSS 

+ fc8 

8 

D 

SS descriptor 

TSDdescFPEM 

+ fd0 

8 

D 

reserved descriptor slot 

TSDdescTIB 

+ fd8 

8 

D 

FS mapping to TIB 

TSDulExitCode 

+ fe0 

4 

D 

Proposed Thread Exit code (for dbg) 

TSDerridFault 

+ fe4 

4 

D 

error id from page fault 

TSDPFErr 

+ fe8 

4 

D 

actual error from PGPagefault 

TSDIDbgRangeStart 

+ fec 

4 

D 


TSDIDbgRangeEnd 

+ff0 

4 

D 


TSDIDbgLastAddr 

+ f f 4 

4 

D 


TSDpPCB 

+ f f 8 

4 

D 

Pointer to Profile Control Block 

TSDpDLLTerm 

+ffc 

4 

D 

Pointer to data buffer 


Local Exception Handler Long-Jump Buffer 



Pointers 

Locations 
VM Owner 
Format 


TSDpijmp points to current reistered Ijmp buffer. 

Ijmp_pljmp points to the next nested Ijmp buffer. 

System Arena. Usually allocated as local data on the Ring 0 stack. 

tsd (Oxffcd) 


Field Name 

Offset 

Length 

Type 

Description 


1 jmp_lEBX 

+ 0 

4 

D 

EBX restored when local 
handler returns control 

exception 

1 jmp_lESI 

+ 4 

4 

D 

ESI restored when local 
handler returns control 

exception 

1 jmp_lEDI 

+ 8 

4 

D 

EDI restored when local 
handler returns control 

exception 

1 jmp_lEBP 

+c 

4 

D 

EBP restored when local 
handler returns control 

exception 

1 jmp_lESP 

+ 10 

4 

D 

ESP restored when local 
handler returns control 

exception 

1 jmp_lEIP 

+ 14 

4 

D 

EIP restored when local 
handler returns control 

exception 

1 jmp_pf nFault 

+ 18 

4 

D 

Address of previous fault handler 

1 jmp_pl jmp 

+ 1 c 

4 

D 

Address of previous long jump buffer 


Per-Task Data Area for OS/2 Warp V4.0 ALLSTRICT kernel 


For PTDA formats for other versions of OS/2 see: 

PTDA for OS/2 Warp V4.0 RETAIL kernel 
PTDA for OS/2 Warp V3.0 ALLSTRICT kernel 
PTDA for OS/2 Warp V3.0 RETAIL kernel 
PTDA for OS/2 V2.1 1 ALLSTRICT kernel 
PTDA for OS/2 V2.1 1 RETAIL kernel 


Pointers 

TCBpPTDA points to the PTDA associated with a TCB 
CurrTSD points to the current TSD. 
pPTDASelf points to the current PTDA. 


Locations 


System Arena. 


VM Owner 


ptda (Oxffcb) 


Format 


Field Name 

Offset 

Length 

Type 

Description 

pPTDAParent 

+ 0 

4 

D 

Parent PTDA 

pPTDASelf 

+ 4 

4 

D 

This PTDA 

pPTDAFirstChild 

+ 8 

4 

D 

Head of child chain PTDA 

pPTDAExecChild 

+c 

4 

D 

New Child PTDA (Child being exec'ed) 

pPTDANext Sibling 

+ 10 

4 

D 

Next sibling's PTDA 

pPTDAPrevSibling 

+ 14 

4 

D 

Previous sibling's PTDA 

ptda_pszproc 

+ 18 

4 

D 

Pointer to the EXE file this process is 
executing. Used by PerfView 

ptda_pTCBHole 

+ 1 c 

4 

D 

some TCB before first Tid 'hole' 

ptda_pTCBHead 

+20 

4 

D 

Head of list of active TCBs owned by 
this process 

ptda_cTCB 

+ 24 

2 

W 

Number of TCBs in use 

ptda_ctib 

+ 26 

2 

W 

Count of TIBs allocated 

ptda_avatib 

+ 28 

10 

D 

Pointers to TIB arrays 

ptda_pdcb 

+38 

4 

D 


ptda_f lDbg 

+3c 

4 

D 


ptda_ah 

+40 

40 

S 

Private arena header 

ptda_pgdata 

+ 80 

26 

S 


ptda_environ 

+a6 

2 

W 

handle to process's envt seg 

ptda_pBeginLIBPATH 

+a8 

4 

D 


ptda_pEndLIBPATH 

+ac 

4 

D 

D75220- support dynamic libpath 

ptda_pgpc 

+b0 

240 

S 


ptda_pPVDBPrc 

+2f 0 

4 

D 


ptda_pSGSList 

+2f 4 

4 

D 


ptda_pexllist 

+2f 8 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+2 f c 

4 

D 


CDS_Handle 

+300 

34 

W 

array of current directory handles 

OEMPtr 

+334 

2 

W 

Offset to OEM-Added fields 

VerFlg 

+336 

1 

B 

Initialize with verify off 

LCurDrv 

+337 

1 

B 

Logical current drive - Default A: 

PCurDrv 

+338 

1 

B 

physical drive after assign mapping 

LIS_Fgnd 

+339 

1 

B 


FgndOnly 

+33a 

1 

B 

foreground only flag 

ptda_padl 

+33b 

1 

B 


ptda_pTCBCritSec 

+33c 

4 

D 

TCB that did enter CritSec 

ptda_pTCBPriQCritSec 

+340 

4 

D 

TCBs awaiting CritSec wakeup 


ptda_cCritSec 

+ 344 

2 

w 

CurrentPDB 

+346 

2 

w 

seltss 

+348 

2 

w 

ProcFlag 

+34a 

2 

w 


ptda_ForcedActions 

+34c 

4 

D 

ptda_ulExitCode 

+350 

4 

D 

ptda_ulExitType 

+354 

4 

D 

ptda_ulExitTID 

+358 

4 

D 

ThisCDS 

+35c 

4 

D 

ptda_pCDS 

+360 

2 

W 

CDSsize 

+362 

2 

W 

Sattrib 

+364 

2 

W 

sPCB 

+366 

2 

W 

ptda_pPCB 

+368 

4 

D 

JFN_Max 

+36c 

2 

W 

NextSrchH 

+36e 

2 

W 

SrchRmp 

+370 

4 

D 

FNotifyLocal_First 

+374 

2 

W 

FNotifyLocal_Count 

+376 

2 

W 

Sig_ignf 

+378 

2 

W 

Sig_hndf 

+37a 

2 

W 

Sig_errf 

+37c 

2 

W 

Sig_at tempted 

+37e 

2 

W 

Sig_arg 

+380 

10 

W 

Sig_termtid 

+390 

2 

W 

HoldSigCnt 

+392 

2 

W 

SigFocusCnt 

+394 

2 

W 

JFN_Table 

+396 

28 

W 

JFN_Flags 

+3be 

14 

B 

ptda_rasf lag 

+3d2 

2 

W 

SysSemPTDATbl 

+3d4 

100 

S 

SavedHardErr 

+4d4 

4 

D 

ptda_ptdasem 

+4d8 

C 

S 

ptda_DLMsem 

+4e4 

C 

S 

ptda_lidt 

+4f 0 

6 

W 


Critical Section Count 
Currently active PDB (V86 segment) 

if == 1 then this is a special process 
(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 

pending action bits 
Exit code of last task 
Type of exit 

Exit Thread ID (32-bit exceptions) 

Address of current CDS *REDIR* 3.10 

SS relative pointer to a curdir struct 

Size of CDS pointed to by ThisCDS ONLY 
used for CDS entries in RMP seg 

Storage for search attrs *REDIR* 3.10 

Selector of Profile Control Block 

Pointer to Profile Control Block 

highest JFN used so far 

Next value to use for search handle 
First value used will be 2 . 

Handle & Selector for RMP segment we 
keep search handles in. 

bit vector of ignored signals 

bit vector of handled signals 

bit vector of error generating signals 

bit vector of signals we've tried to 

handle with 32-bit exceptions 

byte vector of signal arguments 

'Terminator' TID for APTERM. 

DOSHOLDSIGNAL counter 

PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 
count 

default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 



Csid 

+4f 6 

2 

W 

Behav_bit 

+4f 8 

2 

W 

MSW 

+4 fa 

2 

w 

ptda_rsrclist 

+4 f c 

4 

D 

ptda_pldrdldHead 

+500 

4 

D 

pPrSemTbl 

+504 

4 

D 

ulPrTblSize 

+508 

4 

D 

ulPrTotUsed 

+50c 

4 

D 

ulPrNextFree 

+510 

4 

D 

hksPrTbl 

+ 514 

4 

D 

pShSemBmp 

+ 518 

4 

D 

ulShBmpSize 

+51c 

4 

D 

hksShBmp 

+ 520 

4 

D 

ulMtxOwned 

+ 524 

4 

D 

ptda_TLMA 

+ 528 

4 

D 

ptda_TLMABM 

+ 52c 

4 

B 

ptda_TLMASizeMap 

+ 530 

20 

B 

Cons_Loc 

+550 

A 

S 

SysCallSf cn 

+55a 

1 

B 

SysCall 

+55b 

1 

B 

KBD_Mode 

+55c 

1 

B 

ptda_NewFiles 

+55d 

1 

B 

AutoFail 

+55e 

1 

B 

CP_Flgs 

+55f 

1 

B 

Sig_vec 

+560 

20 

D 

Exc_vec 

+580 

1C 

D 

ptda_timerhead 

+5 9c 

4 

D 

ptda_extsig 

+5a0 

1 

B 

ptda_pad6 

+5al 

3 

B 

pPvwDataBlk 

+5a4 

4 

D 

ptda_lanman_sec 

+5a8 

4 

D 

SigFTerm 

+5ac 

2 

W 

ptda_ppgdata 

+5ae 

2 

W 

ptda_child 

+5b0 

2 

W 

ptda_childalias 

+5b2 

2 

W 

ptda_handle 

+5b4 

2 

W 


Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * => PSEM) pointer to private 
semaphore table 

size of pPrSemTbl in dwords 

number of entries in pPrSemTbl 

next free slot in pPrSemTbl 

kernel semaphore handle for private 
semaphore table 

pointer to private bitmap for the shared 
semaphore table 

size of pShSemBmp in bits 

kernel semaphore handle for private 
semaphore table 

number of mutex owned by this process in 
the two sem tables 

in use flag and dword copy count 

thread local memory 

thread local memory 

Value of AL on system entry 
Last system call processed 
Keyboard input mode 

If bit one is set, process supports // 
54400 new files (long names) 

Non-zero if I 24 FAILed magically 

Default is no codepage in system. 

signal handlers 

OSOLETE exception vectors 

alignment 

Used by perfview 

Used by LANMAN & HPFS for security, 
offset ptda_pgdata 

New child PTDA handle (Child being 
Exec ' ed) 

handle to this segment 



ptda_module 

+5b6 

2 

W 


program module handle for process 

ptda_ldt handle 

+5b8 

2 

W 



ptda_ldtpgmap 

+5ba 

2 

W 


Bitmap of valid LDT pages 

ptda_ldtaddr 

+5bc 

4 

D 



CP_CaseMapTbl 

+5c0 

4 

D 



codepage_tag 

+5c4 

2 

W 


the current code page 

JFN_Length 

+5c6 

2 

W 


Size of JFN table in bytes 

JFN_p Table 

+5c8 

4 

D 


PM pointer to JFN table 

JFN_Flg_Ptr 

+5cc 

4 

D 


pointer to JFN flags 

ptda_pad 

+5d0 

1 

B 



ExtErr_Locus 

+5dl 

1 

B 


Extended Error Locus *REDIR* 3.10 

ExtErr 

+5d2 

2 

W 


Extended Error code *REDIR* 3.10 

ExtErr_Action 

+5d4 

1 

B 


Extended Error Action *REDIR* 3.10 

ExtErr_Class 

+5d5 

1 

B 


Extended Error Class *REDIR* 3.10 

ptda_infoseg 

+5d6 

24 

S 



ptda_vme 

+5fa 

1 

B 


VME Flag 

ptda_pad3 

+5fb 

1 

B 


alignment 

CurrTCB 

+5f c 

2 

W 


pointer to current TCB 

CurrTSD 

+5fe 

2 

W 


pointer to current TSD 

ThisPTDA 

+ 600 

2 

W 


Selector for this ptda 

ptda_NPX_em_cs 

+ 602 

2 

W 


b726833 NPX emulator CS b726833 

ptda_NPX_em_eip +604 

4 

D 


b726833 NPX emulator EIP b726833 

ptda_pad4 

+ 608 

2 

W 


alignment b726833 

ptda_signature 

+ 60a 

2 

B 


must contain "TD" 

ptda ForcedActions flag definitions: 




Name 

Bit Mask 

Description 



TK_FF_BUF 

0x00000001 

Buffer 

must 

be 

released 

TK_FF_EXIT 

0x00000002 

Call TKExit 

(old FF_DES ) 

TK_FF_CRITSEC 

0x00000004 

Enter Per-task 

critical section 

TK_FF_ICE 

0x00000008 

Freeze 

thread 


TK_FF_NPX 

0x00000010 

NPX Error 



TK_FF_TIB 

0x00000020 

Update 

the TIB 


TK_FF_TRC 

0x00000040 

Enter Debug 



TK_FF_SIG 

0x00000080 

Signal 

pending 


TK_FF_CTXH 

o 

o 

I — 1 

o 

o 

o 

o 

o 

X 

o 

Pending 

local < 

context hooks 

TK_FF_STIH 

0x00000200 

Execute 

STI 

hooks 

TK_FF_VDMBP 

0x00000400 

Execute 

VDM 

BP 

hooks 



TK_FF_RTRY 

TK_FF_PIB 

TK_FF_SCH 

TK_FF_TFBIT 

TK_FF_TIBPRI 


0x00000800 Retry V86 system call 

0x00001000 Update the PIB 

0x00002000 Do Scheuler Processing 

0x00004000 Validate user eflags TF bit 

0x00008000 Update only the priority fields in TIB 
59463 


Per-Task Data Area for OS/2 Warp V4.0 RETAIL kernel 


Field Name 

Offset 

Length 

Type 

Description 

pPTDAParent 

+ 0 

4 

D 

Parent PTDA 

pPTDASelf 

+4 

4 

D 

This PTDA 

pPTDAFirstChild 

+ 8 

4 

D 

Head of child chain PTDA 

pPTDAExecChild 

+c 

4 

D 

New Child PTDA (Child being exec'ed) 

pPTDANext Sibling 

+ 10 

4 

D 

Next sibling's PTDA 

pPTDAPrevSibling 

+ 14 

4 

D 

Previous sibling's PTDA 

ptda_pszproc 

+ 18 

4 

D 

Pointer to the EXE file this process is 
executing. Used by PerfView 

ptda_pTCBHole 

+ 1 c 

4 

D 

some TCB before first Tid 'hole' 

ptda_pTCBHead 

+20 

4 

D 

Head of list of active TCBs owned by 
this process 

ptda_cTCB 

+ 24 

2 

W 

Number of TCBs in use 

ptda_ctib 

+ 26 

2 

W 

Count of TIBs allocated 

ptda_avatib 

+ 28 

10 

D 

Pointers to TIB arrays 

ptda_pdcb 

+38 

4 

D 


ptda_f lDbg 

+3c 

4 

D 


ptda_ah 

+40 

40 

S 

Private arena header 

ptda_pgdata 

+ 80 

26 

S 


ptda_environ 

+a6 

2 

W 

handle to process's envt seg 

ptda_pBeginLIBPATH 

+a8 

4 

D 


ptda_pEndLIBPATH 

+ac 

4 

D 

D75220- support dynamic libpath 

ptda_pgpc 

+b0 

240 

S 


ptda_pPVDBPrc 

+2f 0 

4 

D 


ptda_pSGSList 

+2 f 4 

4 

D 


ptda_pexllist 

+2f 8 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+2 f c 

4 

D 


CDS_Handle 

+300 

34 

W 

array of current directory handles 



OEMPtr 


+ 334 

VerFlg +336 
LCurDrv +337 
PCurDrv +338 
LIS_Fgnd +339 
FgndOnly +33a 
ptda_padl +33b 
ptda_pTCBCritSec +33c 
ptda_pTCBPriQCritSec +340 
ptda_cCritSec +344 
CurrentPDB +346 
seltss +348 
ProcFlag +34a 


2 

1 

1 

1 

1 

1 

1 

4 

4 

2 

2 

2 

2 


ptda_ForcedActions 

+ 34c 

4 

ptda_ulExitCode 

+350 

4 

ptda_ulExitType 

+354 

4 

ptda_ulExitTID 

+358 

4 

ThisCDS 

+35c 

4 

ptda_pCDS 

+360 

2 

CDSsize 

+362 

2 

Sattrib 

+364 

2 

sPCB 

+366 

2 

ptda_pPCB 

+368 

4 

JFN_Max 

+36c 

2 

NextSrchH 

+36e 

2 

SrchRmp 

+370 

4 

FNotifyLocal_First 

+374 

2 

FNotifyLocal_Count 

+376 

2 

Sig_ignf 

+378 

2 

Sig_hndf 

+37a 

2 

Sig_errf 

+37c 

2 

Sig_at tempted 

+37e 

2 

Sig_arg 

+380 

10 

Sig_termtid 

+390 

2 

HoldSigCnt 

+392 

2 

SigFocusCnt 

+394 

2 


W Offset to OEM-Added fields 

B Initialize with verify off 

B Logical current drive - Default A: 

B physical drive after assign mapping 
B 

B foreground only flag 

B 

D TCB that did enter CritSec 

D TCBs awaiting CritSec wakeup 

W Critical Section Count 

W Currently active PDB (V86 segment) 

W 

W if == 1 then this is a special process 

(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 

D pending action bits 

D Exit code of last task 

D Type of exit 

D Exit Thread ID (32-bit exceptions) 

D Address of current CDS *REDIR* 3.10 

W SS relative pointer to a curdir struct 

W Size of CDS pointed to by ThisCDS ONLY 

used for CDS entries in RMP seg 

W Storage for search attrs *REDIR* 3.10 

W Selector of Profile Control Block 

D Pointer to Profile Control Block 

W highest JFN used so far 

W Next value to use for search handle 
First value used will be 2 . 

D Handle & Selector for RMP segment we 

keep search handles in. 

W 

W 

W bit vector of ignored signals 

W bit vector of handled signals 

W bit vector of error generating signals 

W bit vector of signals we've tried to 

handle with 32-bit exceptions 

W byte vector of signal arguments 

W 'Terminator' TID for APTERM. 

W DOSHOLDSIGNAL counter 

W PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 



count 


JFN_Table 

+396 

28 

W 

JFN_Flags 

+3be 

14 

B 

ptda_rasf lag 

+3d2 

2 

W 

SysSemPTDATbl 

+3d4 

100 

S 

SavedHardErr 

+4d4 

4 

D 

ptda_ptdasem 

+4d8 

8 

S 

ptda_DLMsem 

+4e0 

8 

S 

ptda_lidt 

+4e8 

6 

W 

Csid 

+4ee 

2 

W 

Behav_bit 

+4f 0 

2 

w 

MSW 

+4 f 2 

2 

w 

ptda_rsrclist 

+4 f 4 

4 

D 

ptda_pldrdldHead 

+4f 8 

4 

D 

pPrSemTbl 

+4 f c 

4 

D 

ulPrTblSize 

+500 

4 

D 

ulPrTotUsed 

+504 

4 

D 

ulPrNextFree 

+508 

4 

D 

hksPrTbl 

+50c 

4 

D 

pShSemBmp 

+510 

4 

D 

ulShBmpSize 

+ 514 

4 

D 

hksShBmp 

+ 518 

4 

D 

ulMtxOwned 

+51c 

4 

D 

ptda_TLMA 

+ 520 

4 

D 

ptda_TLMABM 

+ 524 

4 

B 

ptda_TLMASizeMap 

+ 528 

20 

B 

Cons_Loc 

+ 548 

A 

S 

SysCallSf cn 

+ 552 

1 

B 

SysCall 

+553 

1 

B 

KBD_Mode 

+ 554 

1 

B 

ptda_NewFiles 

+ 555 

1 

B 

AutoFail 

+ 556 

1 

B 

CP_Flgs 

+ 557 

1 

B 

Sig_vec 

+ 558 

20 

D 

Exc_vec 

+ 578 

1C 

D 

ptda_timerhead 

+ 594 

4 

D 


default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 

Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * => PSEM) pointer to private 
semaphore table 

size of pPrSemTbl in dwords 

number of entries in pPrSemTbl 

next free slot in pPrSemTbl 

kernel semaphore handle for private 
semaphore table 

pointer to private bitmap for the shared 
semaphore table 

size of pShSemBmp in bits 

kernel semaphore handle for private 
semaphore table 

number of mutex owned by this process in 
the two sem tables 

in use flag and dword copy count 

thread local memory 

thread local memory 

Value of AL on system entry 
Last system call processed 
Keyboard input mode 

If bit one is set, process supports // 
54400 new files (long names) 

Non-zero if I 24 FAILed magically 

Default is no codepage in system. 

signal handlers 


OSOLETE exception vectors 



alignment 


ptda_extsig 

+598 

1 

B 

ptda_pad6 

+5 9b 

3 

B 

pPvwDataBlk 

+5 9c 

4 

D 

pt da_l anman_s e c 

+5a0 

4 

D 

SigFTerm 

+5a4 

2 

W 

ptda_ppgdata 

+5a6 

2 

W 

ptda_child 

+5a8 

2 

W 

ptda_childalias 

+5aa 

2 

W 

ptda_handle 

+5ac 

2 

W 

ptda_module 

+5ae 

2 

W 

ptda_ldthandle 

+5b0 

2 

W 

ptda_ldtpgmap 

+5b2 

2 

W 

ptda_ldtaddr 

+5b4 

4 

D 

CP_CaseMapTbl 

+5b8 

4 

D 

codepage_tag 

+5bc 

2 

W 

JFN_Length 

+5be 

2 

W 

JFN_pTable 

+5c0 

4 

D 

JFN_Flg_Ptr 

+5c4 

4 

D 

ptda_pad 

+5c8 

1 

B 

ExtErr_Locus 

+5c9 

1 

B 

ExtErr 

+5ca 

2 

W 

ExtErr_Action 

+5cc 

1 

B 

ExtErr_Class 

+5cd 

1 

B 

ptda_infoseg 

+5ce 

24 

S 

ptda_vme 

+5f 2 

1 

B 

ptda_pad3 

+5f 3 

1 

B 

CurrTCB 

+5f 4 

2 

W 

CurrTSD 

+5f 6 

2 

W 

ThisPTDA 

+5f 8 

2 

W 

pt da_NP X_em_c s 

+5fa 

2 

W 

ptda_NPX_em_eip 

+5f c 

4 

D 

ptda_pad4 

+ 600 

2 

W 

ptda_signature 

+ 602 

2 

B 


Used by perfview 

Used by LANMAN & HPFS for security 
offset ptda_pgdata 

New child PTDA handle (Child being 
Exec ' ed) 

handle to this segment 

program module handle for process 

Bitmap of valid LDT pages 

the current code page 
Size of JFN table in bytes 
PM pointer to JFN table 
pointer to JFN flags 

Extended Error Locus *REDIR* 3.10 
Extended Error code *REDIR* 3.10 
Extended Error Action *REDIR* 3.10 
Extended Error Class *REDIR* 3.10 

VME Flag 
alignment 

pointer to current TCB 
pointer to current TSD 
Selector for this ptda 
b726833 NPX emulator CS b726833 
b726833 NPX emulator EIP b726833 
alignment b726833 
must contain "TD" 


Per-Task Data Area for OS/2 Warp V3.0 ALLSTRICT kernel 



Field Name 

Offset 

Length 

Type 

Description 

pPTDAParent 

+ 0 

4 

D 

Parent PTDA 

pPTDASelf 

+ 4 

4 

D 

This PTDA 

pPTDAFirstChild 

+ 8 

4 

D 

Head of child chain PTDA 

pPTDAExecChild 

+c 

4 

D 

New Child PTDA (Child being exec'ed) 

pPTDANext Sibling 

+ 10 

4 

D 

Next sibling's PTDA 

pPTDAPrevS idling 

+ 14 

4 

D 

Previous sibling's PTDA 

ptda_pszproc 

+ 18 

4 

D 

Pointer to the EXE file this process is 
executing. Used by PerfView 

ptda_pTCBHole 

+ 1 c 

4 

D 

some TCB before first Tid 'hole' 

ptda_pTCBHead 

+20 

4 

D 

Head of list of active TCBs owned by 
this process 

ptda_cTCB 

+ 24 

2 

W 

Number of TCBs in use 

ptda_ctib 

+ 26 

2 

W 

Count of TIBs allocated 

ptda_avatib 

+ 28 

10 

D 

Pointers to TIB arrays 

ptda_pdcb 

+38 

4 

D 


ptda_f lDbg 

+3c 

4 

D 


ptda_ah 

+40 

40 

S 

Private arena header 

ptda_pgdata 

+ 80 

26 

S 


ptda_environ 

+a6 

2 

W 

handle to process's envt seg 

ptda_pBeginLIBPATH 

+a8 

4 

D 


ptda_pEndLIBPATH 

+ac 

4 

D 

D75220- support dynamic libpath 

ptda_pgpc 

+b0 

1E0 

S 


ptda_pPVDBPrc 

+290 

4 

D 


ptda_pSGSList 

+294 

4 

D 


ptda_pexllist 

+298 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+2 9c 

4 

D 


WFP_Start 

+2a0 

2 

W 

TASKAREA offset for working string 
*REDIR* 

Ren_WFP 

+2a2 

2 

W 

WFB pointer for rename destination 
*REDIR* 

WFP_Path_End 

+2a4 

2 

W 

End of Path component of string. 

Curr_Dir_End 

+2a6 

2 

W 


CDS_Handle 

+2a8 

34 

W 

*REDIR* 

OEMPtr 

+2dc 

2 

W 


LIS_Fgnd 

+2de 

1 

B 


FgndOnly 

+2df 

1 

B 

foreground only flag 

ptda_pTCBCritSec 

+2e0 

4 

D 

TCB that did enter CritSec 

ptda_pTCBPriQCritSec 

+2e4 

4 

D 

TCBs awaiting CritSec wakeup 

ptda_cCritSec 

+2e8 

2 

W 

Critical Section Count 

CurrentPDB 

+2ea 

2 

W 

Currently active PDB (V86 segment) 



DTAddr 

+2ec 

4 

D 

User's I/O transfer address *REDIR* 

seltss 

+2f0 

2 

W 


VolID 

+ 2 f 2 

1 

B 

!0 if vol ID found in dir search 

NoSetDir 

+ 2 f 3 

1 

B 

If TRUE, do not set directory 

SpaceFlag 

+ 2 f 4 

1 

B 

Embedded spaces allowed in FCB 

VerFlg 

+ 2 f 5 

1 

B 

Initialize with verify off 

LCurDrv 

+ 2f 6 

1 

B 

Logical current drive - Default A: 

PCurDrv 

+ 2 f 7 

1 

B 

physical drive after assign mapping 

Creating 

+ 2f 8 

1 

B 


DelAll 

+ 2f 9 

1 

B 


FoundDel 

+2 fa 

1 

B 


Found_dev 

+2 fb 

1 

B 

true => search found a device 3.10 

f Splice 

+2 f c 

1 

B 

true => do a splice in transpath 3.10 

ClusFac 

+2 f d 

1 

B 

sectors/cluster used in dir search 

cMeta 

+2 f e 

1 

B 

components found 3.10 

PathNameType 

+ 2ff 

1 

B 


DevPt 

+300 

4 

D 

Address of device found by DevName 
*REDIR* 

DirSec 

+304 

4 

D 


DirStart 

+308 

2 

W 


NxtClusNum 

+30a 

2 

W 


EntFree 

+30c 

2 

W 


EntLast 

+30e 

2 

W 


LastEnt 

+310 

2 

W 


ProcFlag 

+312 

2 

W 

if == 1 then this is a special process 
(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 

ptda_ForcedActions 

+314 

4 

D 

pending action bits 

ptda_ulExitCode 

+318 

4 

D 

Exit code of last task 

ptda_ulExitType 

+31c 

4 

D 

Type of exit 

ptda_ulExitTID 

+320 

4 

D 

Exit Thread ID (32-bit exceptions) 

ThisCDS 

+324 

4 

D 

Address of current CDS *REDIR* 3.10 

ptda_pCDS 

+328 

2 

W 

SS relative pointer to a curdir struct 

CDSsize 

+32a 

2 

W 

Size of CDS pointed to by ThisCDS ONLY 
used for CDS entries in RMP seg 

Sattrib 

+32c 

2 

W 

Storage for search attrs *REDIR* 3.10 

sPCB 

+32e 

2 

W 

Selector of Profile Control Block 

ptda_pPCB 

+330 

4 

D 

Pointer to Profile Control Block 

JFN_Max 

+334 

2 

W 

highest JFN used so far 

NextSrchH 

+336 

2 

W 

Next value to use for search handle 
First value used will be 2 . 



SrchRmp 

+338 

4 

D 

FNotifyLocal_First 

+33c 

2 

W 

FNotifyLocal_Count 

+33e 

2 

W 

Sig_ignf 

+340 

2 

W 

Sig_hndf 

+342 

2 

W 

Sig_errf 

+344 

2 

W 

Sig_at tempted 

+346 

2 

W 

Sig_arg 

+348 

10 

W 

Sig_termtid 

+358 

2 

W 

HoldSigCnt 

+35a 

2 

W 

SigFocusCnt 

+35c 

2 

w 

JFN_Table 

+35e 

28 

w 

JFN_Flags 

+386 

14 

B 

ptda_rasf lag 

+39a 

2 

W 

SysSemPTDATbl 

+39c 

100 

S 

SavedHardErr 

+4 9c 

4 

D 

ptda_ptdasem 

+4a0 

C 

S 

ptda_DLMsem 

+4ac 

C 

S 

ptda_lidt 

+4b8 

6 

W 

Csid 

+4be 

2 

w 

Behav_bit 

+4c0 

2 

w 

MSW 

+4c2 

2 

w 

ptda_rsrclist 

+4c4 

4 

D 

ptda_pldrdldHead 

+4c8 

4 

D 

pPrSemTbl 

+4cc 

4 

D 

ulPrTblSize 

+4d0 

4 

D 

ulPrTotUsed 

+4d4 

4 

D 

ulPrNextFree 

+4d8 

4 

D 

hksPrTbl 

+4dc 

4 

D 

pShSemBmp 

+4e0 

4 

D 

ulShBmpSize 

+4e4 

4 

D 

hksShBmp 

+4e8 

4 

D 

ulMtxOwned 

+4ec 

4 

D 

ShareRetriesLeft 

+4f 0 

2 

W 

RetryCount 

+4 f 2 

2 

W 


Handle & Selector for RMP segment we 
keep search handles in. 

bit vector of ignored signals 

bit vector of handled signals 

bit vector of error generating signals 

bit vector of signals we've tried to 
handle with 32-bit exceptions 

byte vector of signal arguments 

'Terminator' TID for APTERM. 

DOSHOLDSIGNAL counter 

PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 
count 

default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 

Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * => PSEM) pointer to private 
semaphore table 

size of pPrSemTbl in dwords 

number of entries in pPrSemTbl 

next free slot in pPrSemTbl 

kernel semaphore handle for private 
semaphore table 

pointer to private bitmap for the 
shared semaphore table 

size of pShSemBmp in bits 

kernel semaphore handle for private 
semaphore table 

number of mutex owned by this process 
in the two sem tables 

number of share/lock viol retries 

num of share/lock retries to do 



RetryLoop 

+ 4 f 4 

2 

W 

ptda_pSrchBuf 

+ 4f 6 

2 

W 

ptda_padl 

+ 4f 8 

2 

w 

ptda_pOpenBuf 

+4 fa 

2 

w 

ptda_TLMA 

+4 f c 

4 

D 

ptda_TLMABM 

+500 

4 

B 

pt da_TLMAS i z eMap 

+504 

20 

B 

Cons_Loc 

+524 

A 

S 

SysCallSf cn 

+52e 

1 

B 

SysCall 

+52 f 

1 

B 

KBD_Mode 

+530 

1 

B 

ptda_NewFiles 

+531 

1 

B 

AutoFail 

+532 

1 

B 

ptda_dir entry 

+533 

20 

S 

CP_Flgs 

+553 

1 

B 

Sig_vec 

+ 554 

20 

D 

Exc_vec 

+ 574 

1C 

D 

ptda_timerhead 

+ 590 

4 

D 

Attrib 

+ 594 

2 

W 

ExtFCB 

+ 596 

1 

B 

ptda_extsig 

+ 597 

1 

B 

pt da_l anman_s e c 

+ 598 

4 

D 

ptda_pad2 

+5 9c 

2 

W 

ptda_ppgdata 

+5 9e 

2 

W 

ptda_child 

+5a0 

2 

W 

ptda_childalias 

+5a2 

2 

w 

ptda_handle 

+5a4 

2 

w 

ptda_module 

+5a6 

2 

w 

ptda_ldthandle 

+5a8 

2 

w 

ptda_ldtpgmap 

+5aa 

2 

w 

ptda_ldtaddr 

+5ac 

4 

D 

CP_CaseMapTbl 

+5b0 

4 

D 

codepage_tag 

+5b4 

2 

W 

JFN_Length 

+5b6 

2 

W 

JFN_pTable 

+5b8 

4 

D 

JFN_Flg_Ptr 

+5bc 

4 

D 

Joins 

+5c0 

1 

B 

ExtErr_Locus 

+5cl 

1 

B 


num of share/lock retry delay loops ceb 
75871 

internal search buffer 

in use flag and dword copy count 
thread local memory 
thread local memory 

Value of AL on system entry 

Last system call processed 

Keyboard input mode 

If bit one is set, process supports // 
54400 new files (long names) 

Non-zero if I 24 FAILed magically 

Default is no codepage in system, 
signal handlers 
OSOLETE exception vectors 

storage for file attributes *REDIR* 
Extended FCB 

Used by LANMAN & HPFS for security, 
alignment 

New child PTDA handle (Child being 
Exec ' ed) 

handle to this segment 

program module handle for process 

Bitmap of valid LDT pages 

the current code page 
Size of JFN table in bytes 
PM pointer to JFN table 
pointer to JFN flags 
number of joins 

Extended Error Locus *REDIR* 3.10 



ExtErr 

+5c2 

2 

w 

ExtErr_Action 

+5c4 

1 

B 

ExtErr_Class 

+5c5 

1 

B 

ptda_infoseg 

+5c6 

24 

S 

ptda_pad3 

+5ea 

2 

W 

CurrTCB 

+5ec 

2 

W 

CurrTSD 

+5ee 

2 

W 

ThisPTDA 

+5f 0 

2 

W 

ptda_NPX_em_cs 

+5f 2 

2 

w 

ptda_NPX_em_eip 

+5f 4 

4 

D 

ptda_pad4 

+5f 8 

2 

W 

ptda_signature 

+5f a 

2 

B 


Extended Error code *REDIR* 3.10 
Extended Error Action *REDIR* 3.10 
Extended Error Class *REDIR* 3.10 

alignment 

pointer to current TCB 
pointer to current TSD 
Selector for this ptda 
b726833 NPX emulator CS b726833 
b726833 NPX emulator EIP b726833 
alignment b726833 
must contain "TD" 


Per-Task Data Area for OS/2 Warp V3.0 RETAIL kernel 


Field Name Offset Length Tupe Description 


pPTDAParent 

+ 0 

4 

D 

pPTDASelf 

+ 4 

4 

D 

pPTDAFirstChild 

+ 8 

4 

D 

pPTDAExecChild 

+c 

4 

D 

pPTDANext Sibling 

+ 10 

4 

D 

pPTDAPrevSibling 

+ 14 

4 

D 

ptda_pszproc 

+ 18 

4 

D 

ptda_pTCBHole 

+ 1 c 

4 

D 

ptda_pTCBHead 

+20 

4 

D 

ptda_cTCB 

+ 24 

2 

W 

ptda_ctib 

+ 26 

2 

W 

ptda_avatib 

+ 28 

10 

D 

ptda_pdcb 

+38 

4 

D 

ptda_f lDbg 

+3c 

4 

D 

ptda_ah 

+40 

40 

S 

ptda_pgdata 

+ 80 

26 

S 

ptda_environ 

+a6 

2 

W 

ptda_pBeginLIBPATH 

+a8 

4 

D 


Parent PTDA 
This PTDA 

Head of child chain PTDA 

New Child PTDA (Child being exec'ed) 

Next sibling's PTDA 

Previous sibling's PTDA 

Pointer to the EXE file this process is 
executing. Used by PerfView 

some TCB before first Tid 'hole' 

Head of list of active TCBs owned by 
this process 

Number of TCBs in use 

Count of TIBs allocated 

Pointers to TIB arrays 

Private arena header 


handle to process's envt seg 



ptda_pEndLIBPATH 

+ac 

4 

D 

D75220- support dynamic libpath 

ptda_pgpc 

+b0 

1E0 

S 


ptda_pPVDBPrc 

+290 

4 

D 


ptda_pSGSList 

+294 

4 

D 


ptda_pexllist 

+298 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+29c 

4 

D 


WFP_Start 

+2a0 

2 

W 

TASKAREA offset for working string 
*REDIR* 

Ren_WFP 

+2a2 

2 

W 

WFB pointer for rename destination 
*REDIR* 

WFP_Path_End 

+2a4 

2 

W 

End of Path component of string. 

Curr_Dir_End 

+2a6 

2 

W 


CDS_Handle 

+2a8 

34 

W 

*REDIR* 

OEMPtr 

+2dc 

2 

W 


LIS_Fgnd 

+2de 

1 

B 


FgndOnly 

+2df 

1 

B 

foreground only flag 

ptda_pTCBCritSec 

+2e0 

4 

D 

TCB that did enter CritSec 

ptda_pTCBPriQCritSec 

+2e4 

4 

D 

TCBs awaiting CritSec wakeup 

ptda_cCritSec 

+2e8 

2 

W 

Critical Section Count 

CurrentPDB 

+2ea 

2 

W 

Currently active PDB (V86 segment) 

DTAddr 

+2ec 

4 

D 

User's I/O transfer address *REDIR* 

seltss 

+2f 0 

2 

W 


VolID 

+2 f 2 

1 

B 

!0 if vol ID found in dir search 

NoSetDir 

+2 f 3 

1 

B 

If TRUE, do not set directory 

SpaceFlag 

+2 f 4 

1 

B 

Embedded spaces allowed in FCB 

VerFlg 

+2 f 5 

1 

B 

Initialize with verify off 

LCurDrv 

+2 f 6 

1 

B 

Logical current drive - Default A: 

PCurDrv 

+ 2 f 7 

1 

B 

physical drive after assign mapping 

Creating 

+ 2f 8 

1 

B 


DelAll 

+ 2f 9 

1 

B 


FoundDel 

+2 fa 

1 

B 


Found_dev 

+2 fb 

1 

B 

true => search found a device 3.10 

f Splice 

+2 f c 

1 

B 

true => do a splice in transpath 3.: 

ClusFac 

+2 f d 

1 

B 

sectors/cluster used in dir search 

cMeta 

+2 f e 

1 

B 

components found 3.10 

PathNameType 

+2f f 

1 

B 


DevPt 

+300 

4 

D 

Address of device found by DevName 
*REDIR* 

DirSec 

+304 

4 

D 


DirStart 

+308 

2 

W 


NxtClusNum 

+30a 

2 

W 




EntFree 

+30c 

2 

w 

EntLast 

+30e 

2 

w 

LastEnt 

+310 

2 

w 

ProcFlag 

+312 

2 

w 


ptda_ForcedActions 

+314 

4 

D 

ptda_ulExitCode 

+318 

4 

D 

ptda_ulExitType 

+31c 

4 

D 

ptda_ulExitTID 

+320 

4 

D 

ThisCDS 

+324 

4 

D 

ptda_pCDS 

+328 

2 

W 

CDSsize 

+32a 

2 

W 

Sattrib 

+32c 

2 

W 

sPCB 

+32e 

2 

W 

ptda_pPCB 

+330 

4 

D 

JFN_Max 

+334 

2 

W 

NextSrchH 

+336 

2 

W 

SrchRmp 

+338 

4 

D 

FNotifyLocal_First 

+33c 

2 

W 

FNotifyLocal_Count 

+33e 

2 

W 

Sig_ignf 

+340 

2 

W 

Sig_hndf 

+342 

2 

W 

Sig_errf 

+344 

2 

W 

Sig_at tempted 

+346 

2 

W 

Sig_arg 

+348 

10 

W 

Sig_termtid 

+358 

2 

W 

HoldSigCnt 

+35a 

2 

W 

SigFocusCnt 

+35c 

2 

W 

JFN_Table 

+35e 

28 

W 

JFN_Flags 

+386 

14 

B 

ptda_rasf lag 

+39a 

2 

W 

SysSemPTDATbl 

+3 9c 

100 

S 

SavedHardErr 

+4 9c 

4 

D 

ptda_ptdasem 

+4a0 

8 

S 

ptda_DLMsem 

+4a8 

8 

S 

ptda_lidt 

+4b0 

6 

W 


if == 1 then this is a special process 
(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 

pending action bits 
Exit code of last task 
Type of exit 

Exit Thread ID (32-bit exceptions) 

Address of current CDS *REDIR* 3.10 

SS relative pointer to a curdir struct 

Size of CDS pointed to by ThisCDS ONLY 
used for CDS entries in RMP seg 

Storage for search attrs *REDIR* 3.10 

Selector of Profile Control Block 

Pointer to Profile Control Block 

highest JFN used so far 

Next value to use for search handle 
First value used will be 2 . 

Handle & Selector for RMP segment we 
keep search handles in. 

bit vector of ignored signals 

bit vector of handled signals 

bit vector of error generating signals 

bit vector of signals we've tried to 
handle with 32-bit exceptions 

byte vector of signal arguments 

'Terminator' TID for APTERM. 

DOSHOLDSIGNAL counter 

PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 
count 

default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 



Csid 

+4b6 

2 

W 

Behav_bit 

+4b8 

2 

W 

MSW 

+4ba 

2 

w 

ptda_rsrclist 

+4bc 

4 

D 

ptda_pldrdldHead 

+4c0 

4 

D 

pPrSemTbl 

+4c4 

4 

D 

ulPrTblSize 

+4c8 

4 

D 

ulPrTotUsed 

+4 cc 

4 

D 

ulPrNextFree 

+4d0 

4 

D 

hksPrTbl 

+4d4 

4 

D 

pShSemBmp 

+4d8 

4 

D 

ulShBmpSize 

+4dc 

4 

D 

hksShBmp 

+4e0 

4 

D 

ulMtxOwned 

+4e4 

4 

D 

ShareRetriesLeft 

+4e8 

2 

W 

RetryCount 

+4ea 

2 

W 

RetryLoop 

+4ec 

2 

W 

ptda_pSrchBuf 

+4ee 

2 

W 

ptda_padl 

+4f0 

2 

W 

ptda_pOpenBuf 

+ 4 f 2 

2 

W 

ptda_TLMA 

+ 4 f 4 

4 

D 

ptda_TLMABM 

+ 4f 8 

4 

B 

ptda_TLMASizeMap 

+ 4 f c 

20 

B 

Cons_Loc 

+ 51c 

A 

S 

SysCallSf cn 

+ 526 

1 

B 

SysCall 

+ 527 

1 

B 

KBD_Mode 

+ 528 

1 

B 

ptda_NewFiles 

+ 529 

1 

B 

AutoFail 

+52a 

1 

B 

ptda_direntry 

+52b 

20 

S 

CP_Flgs 

+54b 

1 

B 

Sig_vec 

+54c 

20 

D 

Exc_vec 

+5 6c 

1C 

D 

ptda_timerhead 

+588 

4 

D 

Attrib 

+58c 

2 

W 

ExtFCB 

+58e 

1 

B 


Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * => PSEM) pointer to private 
semaphore table 

size of pPrSemTbl in dwords 

number of entries in pPrSemTbl 

next free slot in pPrSemTbl 

kernel semaphore handle for private 
semaphore table 

pointer to private bitmap for the 
shared semaphore table 

size of pShSemBmp in bits 

kernel semaphore handle for private 
semaphore table 

number of mutex owned by this process 
in the two sem tables 

number of share/lock viol retries 

num of share/lock retries to do 

num of share/lock retry delay loops ceb 
75871 

internal search buffer 

in use flag and dword copy count 
thread local memory 
thread local memory 

Value of AL on system entry 

Last system call processed 

Keyboard input mode 

If bit one is set, process supports // 
54400 new files (long names) 

Non-zero if I 24 FAILed magically 

Default is no codepage in system, 
signal handlers 
OSOLETE exception vectors 

storage for file attributes *REDIR* 
Extended FCB 



Used by LANMAN & HPFS for security. 


ptda_extsig 

+58f 

1 

B 

pt da_l anman_s e c 

+590 

4 

D 

ptda_pad2 

+594 

2 

W 

ptda_ppgdata 

+596 

2 

W 

ptda_child 

+598 

2 

W 

ptda_childalias 

+59a 

2 

W 

ptda_handle 

+59c 

2 

W 

ptda_module 

+5 9e 

2 

W 

ptda_ldthandle 

+5a0 

2 

W 

ptda_ldtpgmap 

+5a2 

2 

W 

ptda_ldtaddr 

+5a4 

4 

D 

CP_CaseMapTbl 

+5a8 

4 

D 

codepage_tag 

+5ac 

2 

W 

JFN_Length 

+5ae 

2 

W 

JFN_pTable 

+5b0 

4 

D 

JFN_Flg_Ptr 

+5b4 

4 

D 

Joins 

+5b8 

1 

B 

ExtErr_Locus 

+5b9 

1 

B 

ExtErr 

+5ba 

2 

W 

ExtErr_Action 

+5bc 

1 

B 

ExtErr_Class 

+5bd 

1 

B 

ptda_infoseg 

+5be 

24 

S 

ptda_pad3 

+5e2 

2 

W 

CurrTCB 

+5e4 

2 

W 

CurrTSD 

+5e6 

2 

w 

ThisPTDA 

+5e8 

2 

w 

pt da_NP X_em_c s 

+5ea 

2 

w 

ptda_NPX_em_eip 

+5ec 

4 

D 

ptda_pad4 

+5f 0 

2 

W 

ptda_signature 

+5f 2 

2 

B 


alignment 

New child PTDA handle (Child being 
Exec ' ed) 

handle to this segment 

program module handle for process 

Bitmap of valid LDT pages 

the current code page 
Size of JFN table in bytes 
PM pointer to JFN table 
pointer to JFN flags 
number of joins 

Extended Error Locus *REDIR* 3.10 
Extended Error code *REDIR* 3.10 
Extended Error Action *REDIR* 3.10 
Extended Error Class *REDIR* 3.10 

alignment 

pointer to current TCB 
pointer to current TSD 
Selector for this ptda 
b726833 NPX emulator CS b726833 
b726833 NPX emulator EIP b726833 
alignment b726833 
must contain "TD" 


Per-Task Data Area for OS/2 V2.1 1 ALLSTRICT kernel 


Field Name 


Offset Length Tgpe Description 
+ 0 


pPTDAParent 


4 


D 


Parent PTDA 



pPTDASelf 

+4 

4 

D 

This PTDA 

pPTDAFirstChild 

+ 8 

4 

D 

Head of child chain PTDA 

pPTDAExecChild 

+c 

4 

D 

New Child PTDA (Child being exec'ed) 

pPTDANext Sibling 

+ 10 

4 

D 

Next sibling's PTDA 

pPTDAPrevS idling 

+ 14 

4 

D 

Previous sibling's PTDA 

ptda_pszproc 

+ 18 

4 

D 

Pointer to the EXE file this process is 
executing. Used by PerfView 

ptda_pTCBHole 

+ 1 c 

4 

D 

some TCB before first Tid 'hole' 

ptda_pTCBHead 

+20 

4 

D 

Head of list of active TCBs owned by 
this process 

ptda_cTCB 

+ 24 

2 

W 

Number of TCBs in use 

ptda_ctib 

+ 26 

2 

W 

Count of TIBs allocated 

ptda_avatib 

+ 28 

10 

D 

Pointers to TIB arrays 

ptda_pdcb 

+38 

4 

D 


ptda_f lDbg 

+3c 

4 

D 


ptda_ah 

+40 

40 

S 

Private arena header 

ptda_pgdata 

+ 80 

26 

S 


ptda_environ 

+a6 

2 

W 

handle to process's envt seg 

ptda_pgpc 

+a8 

400 

S 


ptda_pmemstatcur 

+4a8 

4 

D 


ptda_memstat 

+4ac 

3C 

S 


ptda_pPVDBPrc 

+4e8 

4 

D 


ptda_pSGSList 

+4ec 

4 

D 


ptda_pexllist 

+4f 0 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+4 f 4 

4 

D 


WFP_Start 

+4f 8 

2 

W 

TASKAREA offset for working string 
*REDIR* 

Ren_WFP 

+4 fa 

2 

W 

WFB pointer for rename destination 
*REDIR* 

WFP_Path_End 

+4 f c 

2 

W 

End of Path component of string. 

Curr_Dir_End 

+4 f e 

2 

W 


CDS_Handle 

+500 

34 

W 

*REDIR* 

OEMPtr 

+534 

2 

W 


LIS_Fgnd 

+536 

1 

B 


FgndOnly 

+537 

1 

B 

foreground only flag 

ptda_pTCBCritSec 

+538 

4 

D 

TCB that did enter CritSec 

ptda_pTCBPriQCritSec 

+53c 

4 

D 

TCBs awaiting CritSec wakeup 

ptda_cCritSec 

+540 

2 

W 

Critical Section Count 

CurrentPDB 

+542 

2 

W 

Currently active PDB (V86 segment) 

DTAddr 

+544 

4 

D 

User's I/O transfer address *REDIR* 

seltss 

+548 

2 

W 




VolID 

+54a 

1 

B 

NoSetDir 

+54b 

1 

B 

SpaceFlag 

+54c 

1 

B 

VerFlg 

+54d 

1 

B 

LCurDrv 

+54e 

1 

B 

PCurDrv 

+ 54 f 

1 

B 

Creating 

+ 550 

1 

B 

DelAll 

+ 551 

1 

B 

FoundDel 

+ 552 

1 

B 

Found_dev 

+ 553 

1 

B 

f Splice 

+ 554 

1 

B 

ClusFac 

+ 555 

1 

B 

cMeta 

+ 556 

1 

B 

PathNameType 

+ 557 

1 

B 

DevPt 

+ 558 

4 

D 

DirSec 

+ 55c 

4 

D 

DirStart 

+ 560 

2 

W 

NxtClusNum 

+ 562 

2 

W 

EntFree 

+ 564 

2 

W 

EntLast 

+5 6 6 

2 

W 

LastEnt 

+5 68 

2 

W 

ProcFlag 

+56a 

2 

W 


ptda_ForcedActions 

+56c 

4 

D 

ptda_ulExitCode 

+570 

4 

D 

ptda_ulExitType 

+ 574 

4 

D 

ptda_ulExitTID 

+ 578 

4 

D 

ThisCDS 

+ 57c 

4 

D 

ptda_pCDS 

+ 580 

2 

W 

CDSsize 

+ 582 

2 

W 

Sattrib 

+ 584 

2 

W 

sPCB 

+586 

2 

W 

ptda_pPCB 

+588 

4 

D 

JFN_Max 

+58c 

2 

W 

NextSrchH 

+58e 

2 

W 

SrchRmp 

+590 

4 

D 

FNotifyLocal_First 

+594 

2 

W 


!0 if vol ID found in dir search 
If TRUE, do not set directory 
Embedded spaces allowed in FCB 
Initialize with verify off 
Logical current drive - Default A: 
physical drive after assign mapping 


true => search found a device 3.10 
true => do a splice in transpath 3.10 
sectors/cluster used in dir search 
components found 3.10 

Address of device found by DevName 
*REDIR* 


if == 1 then this is a special process 
(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 

pending action bits 
Exit code of last task 
Type of exit 

Exit Thread ID (32-bit exceptions) 

Address of current CDS *REDIR* 3.10 

SS relative pointer to a curdir struct 

Size of CDS pointed to by ThisCDS ONLY 
used for CDS entries in RMP seg 

Storage for search attrs *REDIR* 3.10 

Selector of Profile Control Block 

Pointer to Profile Control Block 

highest JFN used so far 

Next value to use for search handle 
First value used will be 2 . 

Handle & Selector for RMP segment we 
keep search handles in. 



bit vector of ignored signals 


FNotifyLocal_Count 

+596 

2 

w 

Sig_ignf 

+598 

2 

w 

Sig_hndf 

+5 9a 

2 

w 

Sig_errf 

+59c 

2 

w 

Sig_at tempted 

+5 9e 

2 

w 

Sig_arg 

+5a0 

10 

w 

Sig_termtid 

+5b0 

2 

w 

HoldSigCnt 

+5b2 

2 

w 

SigFocusCnt 

+5b4 

2 

w 

JFN_Table 

+5b6 

28 

w 

JFN_Flags 

+5de 

14 

B 

ptda_rasf lag 

+5f 2 

2 

w 

SysSemPTDATbl 

+5f 4 

100 

s 

SavedHardErr 

+ 6f 4 

4 

D 

ptda_ptdasem 

+ 6f 8 

C 

S 

ptda_DLMsem 

+704 

C 

S 

ptda_lidt 

+710 

6 

W 

Csid 

+716 

2 

w 

Behav_bit 

+718 

2 

w 

MSW 

+7 la 

2 

w 

ptda_rsrclist 

+7 lc 

4 

D 

ptda_pldrdldHead 

+720 

4 

D 

pPrSemTbl 

+724 

4 

D 

ulPrTblSize 

+728 

4 

D 

ulPrTotUsed 

+ 72c 

4 

D 

ulPrNextFree 

+730 

4 

D 

hksPrTbl 

+ 734 

4 

D 

pShSemBmp 

+738 

4 

D 

ulShBmpSize 

+73c 

4 

D 

hksShBmp 

+740 

4 

D 

ulMtxOwned 

+ 744 

4 

D 

ShareRetriesLeft 

+ 748 

2 

W 

RetryCount 

+74a 

2 

W 

ptda_padl 

+74c 

2 

W 

ptda_pSrchBuf 

+74e 

2 

W 

ptda_LibiError 

+750 

2 

W 


bit vector of handled signals 

bit vector of error generating signals 

bit vector of signals we've tried to 
handle with 32-bit exceptions 

byte vector of signal arguments 

'Terminator' TID for APTERM. 

DOSHOLDSIGNAL counter 

PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 
count 

default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 

Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * => PSEM) pointer to private 
semaphore table 

size of pPrSemTbl in dwords 

number of entries in pPrSemTbl 

next free slot in pPrSemTbl 

kernel semaphore handle for private 
semaphore table 

pointer to private bitmap for the 
shared semaphore table 

size of pShSemBmp in bits 

kernel semaphore handle for private 
semaphore table 

number of mutex owned by this process 
in the two sem tables 

number of share/lock viol retries 

num of share/lock retries to do 

alignment 

internal search buffer 

reuse same field to hold library init 



errors 


ptda_pOpenBuf 

+752 

2 

W 

Cons_Loc 

+ 754 

A 

s 

SysCallSf cn 

+75e 

1 

B 

SysCall 

+75f 

1 

B 

KBD_Mode 

+760 

1 

B 

ptda_NewFiles 

+761 

1 

B 

AutoFail 

+762 

1 

B 

ptda_dir entry 

+763 

20 

S 

CP_Flgs 

+783 

1 

B 

Sig_vec 

+784 

20 

D 

Exc_vec 

+7a4 

1C 

D 

ptda_timerhead 

+7c0 

4 

D 

Attrib 

+7c4 

2 

W 

ExtFCB 

+7c6 

1 

B 

ptda_extsig 

+7c7 

1 

B 

ptda_lanman_sec 

+7c8 

4 

D 

ptda_pad2 

+7cc 

2 

W 

ptda_ppgdata 

+7ce 

2 

W 

ptda_child 

+7d0 

2 

W 

ptda_childalias 

+7d2 

2 

W 

ptda_handle 

+7d4 

2 

W 

ptda_module 

+7d6 

2 

W 

ptda_ldthandle 

+7d8 

2 

W 

ptda_ldtpgmap 

+7da 

2 

W 

ptda_ldtaddr 

+7dc 

4 

D 

CP_CaseMapTbl 

+7e0 

4 

D 

codepage_tag 

+7e4 

2 

W 

JFN_Length 

+7e6 

2 

W 

JFN_pTable 

+7e8 

4 

D 

JFN_Flg_Ptr 

+7ec 

4 

D 

Joins 

+7f 0 

1 

B 

ExtErr_Locus 

+7 f 1 

1 

B 

ExtErr 

+7 f 2 

2 

W 

ExtErr_Action 

+7 f 4 

1 

B 

ExtErr_Class 

+7 f 5 

1 

B 

ptda_infoseg 

+7 f 6 

24 

S 

ptda_pad3 

+ 81a 

2 

W 

CurrTCB 

+ 81c 

2 

W 


Value of AL on system entry 

Last system call processed 

Keyboard input mode 

If bit one is set, process supports // 
54400 new files (long names) 

Non-zero if I 24 FAILed magically 

Default is no codepage in system, 
signal handlers 
OSOLETE exception vectors 

storage for file attributes *REDIR* 
Extended FCB 

Used by LANMAN & HPFS for security, 
alignment 

New child PTDA handle (Child being 
Exec ' ed) 

handle to this segment 

program module handle for process 

Bitmap of valid LDT pages 

the current code page 
Size of JFN table in bytes 
PM pointer to JFN table 
pointer to JFN flags 
number of joins 

Extended Error Locus *REDIR* 3.10 
Extended Error code *REDIR* 3.10 
Extended Error Action *REDIR* 3.10 
Extended Error Class *REDIR* 3.10 

alignment 

pointer to current TCB 



CurrTSD 

+ 81e 

2 

w 

pointer to current TSD 

ThisPTDA 

+ 820 

2 

w 

Selector for this ptda 

ptda_NPX_em_cs 

+ 822 

2 

w 

b726833 NPX emulator CS b726833 

ptda_NPX_em_eip 

+ 824 

4 

D 

b726833 NPX emulator EIP b726833 

ptda_pad4 

+ 828 

2 

W 

alignment b726833 

ptda_signature 

+ 82a 

2 

B 

must contain "TD" 


Per-Task Data Area for OS/2 V2.1 1 RETAIL kernel 


Field Name 

Offset 

Length 

Type 

Description 

pPTDAParent 

+ 0 

4 

D 

Parent PTDA 

pPTDASelf 

+4 

4 

D 

This PTDA 

pPTDAFirstChild 

+ 8 

4 

D 

Head of child chain PTDA 

pPTDAExecChild 

+c 

4 

D 

New Child PTDA (Child being exec'ed) 

pPTDANext Sibling 

+ 10 

4 

D 

Next sibling's PTDA 

pPTDAPrevS idling 

+ 14 

4 

D 

Previous sibling's PTDA 

ptda_pszproc 

+ 18 

4 

D 

Pointer to the EXE file this process is 
executing. Used by PerfView 

ptda_pTCBHole 

+ 1 c 

4 

D 

some TCB before first Tid 'hole' 

ptda_pTCBHead 

+20 

4 

D 

Head of list of active TCBs owned by 
this process 

ptda_cTCB 

+ 24 

2 

W 

Number of TCBs in use 

ptda_ctib 

+ 26 

2 

W 

Count of TIBs allocated 

ptda_avatib 

+ 28 

10 

D 

Pointers to TIB arrays 

ptda_pdcb 

+38 

4 

D 


ptda_f lDbg 

+3c 

4 

D 


ptda_ah 

+40 

40 

S 

Private arena header 

ptda_pgdata 

+ 80 

26 

S 


ptda_environ 

+a6 

2 

W 

handle to process's envt seg 

ptda_pgpc 

+a8 

400 

S 


ptda_pmemstatcur 

+4a8 

4 

D 


ptda_memstat 

+4ac 

3C 

S 


ptda_pPVDBPrc 

+4e8 

4 

D 


ptda_pSGSList 

+4ec 

4 

D 


ptda_pexllist 

+4f 0 

4 

D 

Flat pointer to exit list data 

ptda_cdllterm 

+4 f 4 

4 

D 




WFP_Start 

+4f 8 

2 

W 

TASKAREA offset for working string 
*REDIR* 

Ren_WFP 

+4 fa 

2 

W 

WFB pointer for rename destination 
*REDIR* 

WFP_Path_End 

+4 f c 

2 

w 

End of Path component of string. 

Curr_Dir_End 

+4 f e 

2 

w 


CDS_Handle 

+500 

34 

w 

*REDIR* 

OEMPtr 

+534 

2 

w 


LIS_Fgnd 

+536 

1 

B 


FgndOnly 

+537 

1 

B 

foreground only flag 

ptda_pTCBCritSec 

+538 

4 

D 

TCB that did enter CritSec 

ptda_pTCBPriQCritSec 

+53c 

4 

D 

TCBs awaiting CritSec wakeup 

ptda_cCritSec 

+540 

2 

W 

Critical Section Count 

CurrentPDB 

+542 

2 

W 

Currently active PDB (V86 segment) 

DTAddr 

+ 544 

4 

D 

User's I/O transfer address *REDIR* 

seltss 

+ 548 

2 

W 


VolID 

+54a 

1 

B 

!0 if vol ID found in dir search 

NoSetDir 

+54b 

1 

B 

If TRUE, do not set directory 

SpaceFlag 

+54c 

1 

B 

Embedded spaces allowed in FCB 

VerFlg 

+54d 

1 

B 

Initialize with verify off 

LCurDrv 

+54e 

1 

B 

Logical current drive - Default A: 

PCurDrv 

+54 f 

1 

B 

physical drive after assign mapping 

Creating 

+550 

1 

B 


DelAll 

+551 

1 

B 


FoundDel 

+552 

1 

B 


Found_dev 

+553 

1 

B 

true => search found a device 3.10 

f Splice 

+554 

1 

B 

true => do a splice in transpath 3.10 

ClusFac 

+555 

1 

B 

sectors/cluster used in dir search 

cMeta 

+556 

1 

B 

components found 3.10 

PathNameType 

+557 

1 

B 


DevPt 

+558 

4 

D 

Address of device found by DevName 
*REDIR* 

DirSec 

+55c 

4 

D 


DirStart 

+560 

2 

W 


NxtClusNum 

+562 

2 

W 


EntFree 

+564 

2 

W 


EntLast 

+566 

2 

W 


LastEnt 

+568 

2 

W 


ProcFlag 

+56a 

2 

W 

if == 1 then this is a special process 
(swapper or screen switch) ; NO removable 
media buffer will be allocated to this 
process . 



ptda_ForcedActions 

+56c 

4 

D 

ptda_ulExitCode 

+570 

4 

D 

ptda_ulExitType 

+ 574 

4 

D 

ptda_ulExitTID 

+ 578 

4 

D 

ThisCDS 

+ 57c 

4 

D 

ptda_pCDS 

+ 580 

2 

W 

CDSsize 

+ 582 

2 

W 

Sattrib 

+ 584 

2 

W 

sPCB 

+586 

2 

W 

ptda_pPCB 

+588 

4 

D 

JFN_Max 

+58c 

2 

W 

NextSrchH 

+58e 

2 

W 

SrchRmp 

+590 

4 

D 

FNotifyLocal_First 

+594 

2 

W 

FNotifyLocal_Count 

+596 

2 

W 

Sig_ignf 

+598 

2 

W 

Sig_hndf 

+5 9a 

2 

W 

Sig_errf 

+59c 

2 

W 

Sig_at tempted 

+59e 

2 

W 

Sig_arg 

+5a0 

10 

W 

Sig_termtid 

+5b0 

2 

W 

HoldSigCnt 

+5b2 

2 

W 

SigFocusCnt 

+5b4 

2 

W 

JFN_Table 

+5b6 

28 

W 

JFN_Flags 

+5de 

14 

B 

ptda_rasf lag 

+5f 2 

2 

W 

SysSemPTDATbl 

+5f 4 

100 

S 

SavedHardErr 

+ 6f 4 

4 

D 

ptda_ptdasem 

+ 6f 8 

8 

S 

ptda_DLMsem 

+700 

8 

S 

ptda_lidt 

+708 

6 

W 

Csid 

+7 Oe 

2 

W 

Behav_bit 

+710 

2 

W 

MSW 

+712 

2 

w 

ptda_rsrclist 

+714 

4 

D 

ptda_pldrdldHead 

+718 

4 

D 

pPrSemTbl 

+7 lc 

4 

D 


pending action bits 
Exit code of last task 
Type of exit 

Exit Thread ID (32-bit exceptions) 

Address of current CDS *REDIR* 3.10 

SS relative pointer to a curdir struct 

Size of CDS pointed to by ThisCDS ONLY 
used for CDS entries in RMP seg 

Storage for search attrs *REDIR* 3.10 

Selector of Profile Control Block 

Pointer to Profile Control Block 

highest JFN used so far 

Next value to use for search handle 
First value used will be 2 . 

Handle & Selector for RMP segment we 
keep search handles in. 

bit vector of ignored signals 

bit vector of handled signals 

bit vector of error generating signals 

bit vector of signals we've tried to 
handle with 32-bit exceptions 

byte vector of signal arguments 

'Terminator' TID for APTERM. 

DOSHOLDSIGNAL counter 

PUBLIB DOS32SETSIGNALEXCEPTIONFOCUS 
count 

default handle table 
default JFN flags table 
RAS trace indicator 

PTDA semaphore that is, inter-thread 

b732954 Edd PTDA semaphore that is, 
inter-thread 

current IDT limit/base 

Command Subtree ID 

program behavior bits 

CPU matching status word 

far pointer to local resource list 

loader demand load data list 

(void * 


=> PSEM) pointer to private 



semaphore table 


ulPrTblSize 

+720 

4 

D 

size of pPrSemTbl in dwords 

ulPrTotUsed 

+724 

4 

D 

number of entries in pPrSemTbl 

ulPrNextFree 

+728 

4 

D 

next free slot in pPrSemTbl 

hksPrTbl 

+ 7 2c 

4 

D 

kernel semaphore handle for private 
semaphore table 

pShSemBmp 

+730 

4 

D 

pointer to private bitmap for the 
shared semaphore table 

ulShBmpSize 

+ 734 

4 

D 

size of pShSemBmp in bits 

hksShBmp 

+738 

4 

D 

kernel semaphore handle for private 
semaphore table 

ulMtxOwned 

+73c 

4 

D 

number of mutex owned by this process 
in the two sem tables 

ShareRetriesLef t 

+740 

2 

W 

number of share/lock viol retries 

RetryCount 

+ 742 

2 

W 

num of share/lock retries to do 

RetryLoop 

+ 744 

2 

W 


ptda_pSrchBuf 

+ 746 

2 

W 

internal search buffer 

ptda_LibiError 

+ 748 

2 

W 

reuse same field to hold library init 
errors 

ptda_pOpenBuf 

+7 4a 

2 

W 


Cons_Loc 

+74c 

A 

S 


SysCallSf cn 

+756 

1 

B 

Value of AL on system entry 

SysCall 

+ 757 

1 

B 

Last system call processed 

KBD_Mode 

+ 758 

1 

B 

Keyboard input mode 

ptda_NewFiles 

+ 759 

1 

B 

If bit one is set, process supports // 
54400 new files (long names) 

AutoFail 

+7 5a 

1 

B 

Non-zero if I 24 FAILed magically 

ptda_dir entry 

+7 5b 

20 

S 


CP_Flgs 

+77b 

1 

B 

Default is no codepage in system. 

Sig_vec 

+77c 

20 

D 

signal handlers 

Exc_vec 

+7 9c 

1C 

D 

OSOLETE exception vectors 

ptda_timerhead 

+7b8 

4 

D 


Attrib 

+7bc 

2 

W 

storage for file attributes *REDIR* 

ExtFCB 

+7be 

1 

B 

Extended FCB 

ptda_extsig 

+7bf 

1 

B 


pt da_l anman_s e c 

+7c0 

4 

D 

Used by LANMAN & HPFS for security. 

ptda_pad2 

+7 c4 

2 

W 

alignment 

ptda_ppgdata 

+7c6 

2 

W 


ptda_child 

+7c8 

2 

W 

New child PTDA handle (Child being 
Exec ' ed) 

ptda_childalias 

+7ca 

2 

W 


ptda_handle 

+7cc 

2 

W 

handle to this segment 

ptda_module 

+7ce 

2 

W 

program module handle for process 



ptda_ldt handle 

+7d0 

2 

w 

ptda_ldtpgmap 

+7d2 

2 

w 

ptda_ldtaddr 

+7d4 

4 

D 

CP_CaseMapTbl 

+7d8 

4 

D 

codepage_tag 

+7dc 

2 

W 

JFN_Length 

+7de 

2 

W 

JFN_p Table 

+7e0 

4 

D 

JFN_F 1 g_P t r 

+7e4 

4 

D 

Joins 

+7e8 

1 

B 

ExtErr_Locus 

+7e9 

1 

B 

ExtErr 

+7ea 

2 

W 

ExtErr_Action 

+7ec 

1 

B 

ExtErr_Class 

+7ed 

1 

B 

ptda_infoseg 

+7ee 

24 

S 

ptda_pad3 

+ 812 

2 

W 

CurrTCB 

+ 814 

2 

W 

CurrTSD 

+ 816 

2 

W 

ThisPTDA 

+ 818 

2 

W 

p t da_NP X_em_c s 

+ 81a 

2 

W 

ptda_NPX_em_eip 

+ 81c 

4 

D 

ptda_pad4 

+ 820 

2 

W 

ptda_signature 

+ 822 

2 

B 


Bitmap of valid LDT pages 

the current code page 
Size of JFN table in bytes 
PM pointer to JFN table 
pointer to JFN flags 
number of joins 

Extended Error Locus *REDIR* 3.10 
Extended Error code *REDIR* 3.10 
Extended Error Action *REDIR* 3.10 
Extended Error Class *REDIR* 3.10 

alignment 

pointer to current TCB 
pointer to current TSD 
Selector for this ptda 
b726833 NPX emulator CS b726833 
b726833 NPX emulator EIP b726833 
alignment b726833 
must contain "TD" 


Local Information Segement 


Pointers 

Locations 


VM Owner 

Format 

InfoSegLDT 


SAS field SASJnfoJocal points to the current LISEG. 

dfff:0 is the address of the copy of the LISEG for the current thread & process. 
The LISEG for each process is imbedded in the PTDA at ptdajnfoseg. 

infoseg (0xff75) 


Field Name 


Offset Length Type Description 

+ 0 


LIS_CurProcID 


2 


W 


Current process ID 


LIS_ParProcID 

+ 2 

2 

w 

Process ID of parent 

LIS_CurThrdPri 

+ 4 

2 

w 

Current thread priority 

LIS_CurThrdID 

+ 6 

2 

w 

Current thread ID 

LIS_CurScrnGrp 

+ 8 

2 

w 

Screengroup 

LIS_ProcStatus 

+a 

1 

B 

Process status bits 

LIS_f illbytel 

+b 

1 

B 

filler byte 

LIS_Fgnd 

+c 

2 

W 

Current process is in foreground 

LIS_ProcType 

+e 

1 

B 

Current process type 

LIS_f illbyte2 

+f 

1 

B 

filler byte 

L I S_AX 

+ 10 

2 

W 

@@V1 Environment selector 

LIS_BX 

+ 12 

2 

W 

@@V1 Offset of command line start 

LIS_CX 

+ 14 

2 

W 

@@V1 Length of Data Segment 

LIS_DX 

+ 16 

2 

W 

@@V1 STACKSIZE from the .EXE file 

LIS_SI 

+ 18 

2 

W 

@@V1 HEAPSIZE from the .EXE file 

L I S_D I 

+ la 

2 

W 

@@V1 Module handle of the application 

LIS_DS 

+ 1 c 

2 

W 

@@V1 Data Segment Handle of application 

LIS_PackSel 

+ le 

2 

W 

First tiled selector in this EXE 

LIS_PackShrSel 

+20 

2 

W 

First selector above shared arena 

LIS_PackPckSel 

+22 

2 

w 

First selector above packed arena 


LIS_ProcStatus flag definitions: 

Name Bit Mask Description 

PS_XITLST 0x01 Doing ExitList Processing 

PS_XITTH1 0x02 Exiting thread 1 

PS_XITALL 0x04 The whole process is exiting 

PS_SYNCPARENT 0x10 Parent cares about termination 

PS_WAITPARENT 0x20 Parent did an exec-and-wait 

PS_DYING 0x40 Process is dying 

PS_EMBRYO 0x80 Process in embryonic state 

LIS_ProcType flag definitions: 

Name Value Description 

LIS_PT_FULLSCRN 0 Full screen app . 

LIS_PT_REALMODE 1 Real mode process 

P T_VDM 1 VDM 

LIS_PT_VIOWIN 2 VIO windowable app. 

LIS_PT_PRESMGR 3 Presentation Manager app. 


LIS_PT_DETACHED 4 


Detached app. 



Global Information Segement 


Pointers 
Locations 
VM Owner 


Format 

InfoSegGDT 


SAS field SAS_info_global points to the current GISEG. 

dff4:0 is the address of the copy of the GISEG for the current thread & process. 

infoseg (0xff75) - shared arena copy 
os2krnl (Oxffaa) - system arena copy 


Field Name 

Offset 

Length 

Type 

SIS_BigTime 

+ 0 

4 

D 

SIS_MsCount 

+4 

4 

D 

SIS_HrsTime 

+ 8 

1 

B 

SIS_MinTime 

+ 9 

1 

B 

SIS_SecTime 

+a 

1 

B 

SIS_HunTime 

+b 

1 

B 

SIS_TimeZone 

+c 

2 

W 

SIS_ClkIntrvl 

+e 

2 

W 

SIS_DayDate 

+ 10 

1 

B 

SIS_MonDate 

+ 11 

1 

B 

SIS_YrsDate 

+ 12 

2 

W 

SIS_DOWDate 

+ 14 

1 

B 

SIS_VerMa jor 

+ 15 

1 

B 

SIS_VerMinor 

+ 16 

1 

B 

SIS_RevLettr 

+ 17 

1 

B 

SIS_CurScrnGrp 

+ 18 

1 

B 

SIS_MaxScrnGrp 

+ 19 

1 

B 

SIS_HugeShfCnt 

+ la 

1 

B 

SIS_ProtMdOnly 

+lb 

1 

B 

SIS_FgndPID 

+ 1 c 

2 

W 

SIS_Dynamic 

+ le 

1 

B 

SIS_MaxWait 

+ lf 

1 

B 

SIS_MinSlice 

+20 

2 

W 


Description 

Time from 1-1-1970 in seconds 

Freerunning milliseconds counter 

Hours 

Minutes 

Seconds 

Hundredths of seconds 

Timezone in min from GMT (Set to EST) 
Timer interval (units=0 . 0001 secs) 
Day-of-month (1-31) 

Month (1-12) 

Year (>= 1980) 

Day-of-week (1-1-80 = Tues = 3) 

Major version number 
Minor version number 
Revision letter 
Fgnd screen group # 

Maximum number of screen groups 
Shift count for huge segments 
Protect-mode-only indicator 
Foreground process ID 
Dynamic variation flag (l=enabled) 
Maxwait (seconds) 

Minimum timeslice (milliseconds) 


SIS_ 

_MaxSlice 

+ 22 

2 

W 

Maximum timeslice (milliseconds) 

SIS_ 

_BootDrv 

+ 24 

2 

W 

Drive from which system was booted 

SIS_ 

_mec_table 

+ 26 

20 

B 

Table of RAS Major Event Codes (MECs) 

SIS_ 

_MaxVioWinSG 

+ 46 

1 

B 

Max. no. of VIO windowable SG's 

SIS_ 

_MaxPresMgrSG 

+ 47 

1 

B 

Max. no. of Presentation Manager SG's 

SIS_ 

_SysLog 

+ 48 

2 

W 

Error Logging Status 

SIS_ 

_MMIOBase 

+4a 

2 

W 

Memory mapped I/O selector 

SIS_ 

_MMIOAddr 

+4c 

4 

D 

Memory mapped I/O address 

SIS_ 

_MaxVDMs 

+50 

1 

B 

Max. no. of Virtual DOS machines 

SIS_ 

.Reserved 

+51 

1 

B 



SIS_SysLog flag definitions: 

Name Bit Mask Description 

LF_LOGENABLE 0x0001 Logging enabled 
LF_LOGAVAILABLE 0x0002 Logging available 


Process Information Block 


Pointers 

PTDA field ptda_avatib points to the PIB for the related process. 
PIB field pib_pchenv points to the process' environement strings. 

Locations 

Allocated in the Process' Private Arena. 

VM Owner 

PIB owner id: tktib (0xff3f) (also used for TIB ownership). 
Environment Owner id: tkenv (0xff3e). 


Format 

PIB Process Information Block. 


Field Name 

Offset 

Length 

Type 

Description 

pib_ulpid 

+ 0 

4 

D 

Process I . D . 

pib_ulppid 

+ 4 

4 

D 

Parent process I.D. 

pib_hmte 

+ 8 

4 

D 

Program (.EXE) module handle 

pib_pchcmd 

+c 

2 

W 

Command line pointer 

pib_pchenv 

+ 10 

4 

D 

Environment pointer 

pib_f lstatus 

+ 14 

4 

D 

Process' status bits 

pib_ultype 

+ 18 

4 

D 

Process' type code 


pib flstatus flag definitions: 


Name Bit Mask 

Description 

PS_XITLST 0x01 

Doing ExitList Processing 

PS_XITTH1 0x02 

Exiting thread 1 

PS_XITALL 0x04 

The whole process is exiting 

PS_SYNCPARENT 0x10 

Parent cares about termination 

PS_WAITPARENT 0x20 

Parent did an exec-and-wait 

PS_DYING 0x4 0 

Process is dying 

PS_EMBRYO 0x80 

Process in embryonic state 


pib_ultype flag definitions: 


Name Value 

Description 

LIS_PT_FULLSCRN 0 

Full screen app . 

L I S_P T_REALMODE 1 

Real mode process 

P T_VDM 1 

VDM 

LIS_PT_VIOWIN 2 

VIO windowable app. 

L I S_P T_P RE SMGR 3 

Presentation Manager app. 

LIS_PT_DETACHED 4 

Detached app. 


Thread Information Block 

Pointers 

TCB field TCBptib points to the TIB for the related thread. 

TIB field tib_ptib2 points to the associated TIB2. 

GDT Selector 1 50b maps the TIB and is the default value for the FS register. 

Locations 

Allocated in the Process' Private Arena. 

VM Owner 

tktib (0xff3f) (also used for PIB ownership). 

Format 

TIB Thread Information Block system independent section. 

Field Name Offset Length Type Description 

tib_pexchain +04 D Head of exception handler chain 


tib_pstack 

+ 4 

4 

D 

tib_pstacklimit 

+ 8 

4 

D 

tib_ptib2 

+c 

2 

W 

tib_version 

+ 10 

4 

D 

tib_ordinal 

+ 14 

4 

D 


Pointer to base of stack 
Pointer to end of stack 
Pointer to system specific TIB 
Version number for this TIB structure 
Thread Ordinal Number 


TIB2 Thread Information Block system dependent section. 

Field Name Offset Length Tupe Description 


tib2_ultid 

+ 0 

4 

D 

tib2_ulpri 

+ 4 

4 

D 

tib2_version 

+ 8 

4 

D 

tib2_usMCCount 

+c 

2 

W 

tib2_fMCForceFlag 

+e 

2 

W 


Thread I.D. 

Thread priority 

Version number for this structure 
Must Complete count 
Must Complete force flag 


System Stack Frames Client Register Information 


Pointers 

Locations 


VM Owner 


TCB field TCB_pcriFrameType points to the CRI. 

_crilSF locates the Interrupt Stack Frame CRI. 

_criTSF locates the Trap Stack Frame CRI. 

_criVSF locates the VDM Stack Frame CRI. 

_criSEF locates the System Entry Stack Frame CRI. 

_criPASCALSEF locates the PASCAL System Entry Stack Frame CRI. 

_criSSF locates the SCI Stack Frame CRI. 

_criDHF locates the Device FHelp Stack Frame CRI. 

fpoldstack contains a 32-bit far pointer to the ISF built by the Interrupt Router at interrupt time. 

os2krnl (Oxffaa) 


Format 

CRI Client Register Information 


Field Name 

Offset Length 

Type 

Description 

cri_ulSize 

+ 0 4 

D 

size of stack frame 

cri_eax 

+ 4 4 

S 

eax rip 

cri_ebx 

+ 8 4 

S 

ebx rip 


cri_ecx 

+c 

4 

S 

ecx rip 

cri_edx 

+ 10 

4 

S 

edx rip 

cri_ebp 

+ 14 

4 

s 

ebp rip 

cri_esi 

+ 18 

4 

s 

esi rip 

cri_edi 

+ 1 c 

4 

s 

edi rip 

cri_ds 

+20 

4 

s 

ds rip 

cri_es 

+ 24 

4 

s 

es rip 

cri_f s 

+ 28 

4 

s 

f s rip 

cri_gs 

+2c 

4 

s 

gs rip 

cri_cs 

+30 

4 

s 

cs rip 

cri_eip 

+34 

4 

s 

eip rip 

cri_ef lag 

+38 

4 

s 

eflag rip 

cri_ss 

+3c 

4 

s 

ss rip 

cri_esp 

+40 

4 

s 

esp rip 

cri_cbargs 

+44 

4 

s 

cbargs rip 

cri_trapnum 

+48 

4 

s 

trapnum rip 

cri_errcode 

+4c 

4 

s 

errcode rip 

cri_pfnRebuild 

+50 

4 

D 


cri_pfpfnKernelExit +54 

RIP Register Information Packet 

4 

D 


Field Name 

Offset 

Length 

Type 

Description 

rip_f lags 

+ 0 

2 

W 

Flags 

rip_of f set 

+ 2 

4 

W 

Offset of register into stack frame 


rip_flags flag definitions: 


Name Bit Mask 

KM_R I P_ INVALID 0x0001 

KM_RI P_INVAL I D_SET 0x0002 
KM_RI P_WORD 0x0004 

KM_R I P_T S D_RE L AT I VE 0x0008 
KM_RIP_C32 0x0010 


Description 
invalid register 
invalid register to 
word register 
rip_offset relative 
32-bit C style call 


set 


to TSD beginning 


ISF Interrupt Manager Stack Frame 

This is what the stack frame looks like when the system is entered thru the interrupt manager during a hardware interrupt. For a hardware 
interrupt in a VDM context, the stack frame always needs to be a "VSF" type so the stack frame base is adjusted by ISF_VSF_START. The 
points the stack frame base to ”isf_edi" in the regular interrupt frame. The interrupt stack frame has also been padded (ISF_STACK_PAD) 
between the general registers (EDI to EAX) and the hardware pushed registers (EIP to SS) with a dummy trap number and error code to 
look like the VSF stack frame. 



Field Name 

Offset 

Length 

Type Description 

isf_Curr Int Level 

+ 0 

4 

D 

isf_gs 

+4 

2 

W 

isf_padgs 

+ 6 

2 

W 

isf_fs 

+ 8 

2 

W 

isf_padf s 

+a 

2 

W 

isf_es 

+c 

2 

W 

isf_pades 

+e 

2 

W 

i s f _ds 

+ 10 

2 

W 

isf_padds 

+ 12 

2 

W 

isf_edi 

+ 14 

4 

D start of VDM 

isf_esi 

+ 18 

4 

D 

i s f _ebp 

+ 1 c 

4 

D 

isf_padesp 

+20 

4 

D 

isf_ebx 

+ 24 

4 

D 

isf_edx 

+ 28 

4 

D 

isf_ecx 

+2c 

4 

D 

isf_eax 

+30 

4 

D 

isf_pad 

+34 

8 

B 

isf_eip 

+3c 

4 

D 

isf_cs 

+40 

2 

W 

isf_padcs 

+42 

2 

W 

isf_ef lag 

+ 44 

4 

D 

isf_esp 

+ 48 

4 

D 

i s f_s s 

+4c 

2 

W 

isf_padss 

+4e 

2 

W 


TSF Trap or Exception Stack Frame 

This is what the stack frame looks like when the system is entered thru a 386 exception (from protected mode). 


Field Name 

Offset 

Length 

Type Description 

tsf_edi 

+ 0 

4 

D 

tsf_esi 

+4 

4 

D 

t s f _ebp 

+ 8 

4 

D 

tsf_padesp 

+c 

4 

D 

tsf_ebx 

+ 10 

4 

D 

tsf_edx 

+ 14 

4 

D 

tsf_ecx 

+ 18 

4 

D 

tsf_eax 

+ 1 c 

4 

D 

tsf_gs 

+20 

2 

W 



tsf_padgs 

+22 

2 

w 

tsf_f s 

+24 

2 

w 

tsf_padf s 

+26 

2 

w 

tsf_es 

+28 

2 

w 

tsf_pades 

+2a 

2 

w 

tsf_ds 

+2c 

2 

w 

tsf_padds 

+2e 

2 

w 

tsf_trapnum 

+30 

4 

D 

tsf_errcode 

+34 

4 

D 

tsf_eip 

+38 

4 

D 

tsf_cs 

+3c 

2 

W 

tsf_padcs 

+3e 

2 

W 

tsf_ef lag 

+40 

4 

D 

tsf_esp 

+44 

4 

D 

t s f_s s 

+48 

2 

W 

tsf_padss 

+4a 

2 

W 


KSF Kernel Stack Frame 

This is what the stack frame looks like when the system is re-entered from ring 0. This is frame used for handling exception while already in 
kernel mode. 


Field Name 

Offset 

Length 

Type Description 

ksf_edi 

+ 0 

4 

D 

ksf_esi 

+4 

4 

D 

ksf_ebp 

+ 8 

4 

D 

ksf_padesp 

+c 

4 

D 

ksf_ebx 

+ 10 

4 

D 

ksf_edx 

+ 14 

4 

D 

ksf_ecx 

+ 18 

4 

D 

ksf_eax 

+ 1 c 

4 

D 

ksf_gs 

+20 

2 

W 

ksf_padgs 

+ 22 

2 

W 

ksf_f s 

+ 24 

2 

W 

ksf_padf s 

+ 26 

2 

W 

ksf_es 

+ 28 

2 

w 

ksf_pades 

+2a 

2 

w 

ksf_ds 

+2c 

2 

w 

ksf_padds 

+2e 

2 

w 

ksf_trapnum 

+30 

4 

D 

ksf_errcode 

+34 

4 

D 



ksf_eip 

+38 

4 

D 

ksf_cs 

+3c 

2 

W 

ksf_padcs 

+3e 

2 

W 

ksf_ef lag 

+40 

4 

D 

VSF VDM Process Stack Frame 



This is what the stack frame looks like when the system is entered from a VDM thru a exception, software or hardware interrupt. Most of the 
8086 emulation code uses this stack frame directly for performance. For hardware interrupts taken in a VDM (in either V86 mode or 
protected mode), the interrupt stack frame (see ISF) is adjusted to look like this frame. 

The alternate stack frame holds the real or protected mode sensitive registers for the other mode. So when the VDM is in protected mode, 
the last V86 mode segment registers and CS:EIP, SS:ESP can be accessed, etc. Two things happen with we mode switch: 1) the alternate 
register set is exchanged with the regular set (vsf_eip to vsf_padgs is the exchanged with vsf_alteip to vsf_altpadgs), 2) the TSS's ESPO 
value is changed to the appropriate place in the VSF structure. For V86 mode, ESPO points to the begining of the segment registers 
(vsf_gs/vsf_padgs) and for protected mode ESPO points to the SS register (vsf_ss/vsf_padss). For protected mode entry, the segments 
registers are stored in vsf_ds to vsf_gs explictly. This makes the V86 mode and protected mode stack frames the same for VDDs and the 
MVDM kernel code. 

Field Name 

Offset Length 

Type Description 

vsf_edi 

+ 0 

4 

D 

vsf_esi 

+ 4 

4 

D 

vsf_ebp 

+ 8 

4 

D 

vsf_padesp 

+c 

4 

D 

vsf_ebx 

+ 10 

4 

D 

vsf_edx 

+ 14 

4 

D 

vsf_ecx 

+ 18 

4 

D 

vsf_eax 

+ 1 c 

4 

D 

vsf_trapnum 

+20 

4 

D 

vsf_errcode 

+ 24 

4 

D 

vsf_eip 

+ 28 

4 

D 

vsf_cs 

+2c 

2 

W 

vsf_padcs 

+2e 

2 

W 

vsf_ef lag 

+30 

4 

D 

vsf_esp 

+34 

4 

D 

vsf_ss 

+38 

2 

W 

vsf_padss 

+3a 

2 

W 

vsf_es 

+3c 

2 

W 

vsf_pades 

+3e 

2 

W 

vsf_ds 

+40 

2 

W 

vsf_padds 

+42 

2 

W 

vsf_f s 

+44 

2 

W 

vsf_padf s 

+4 6 

2 

W 

vsf_gs 

+48 

2 

W 

vsf_padgs 

+4a 

2 

W 



vsf_alteip 

+4c 

4 

D 

vsf_altcs 

+50 

2 

W 

vsf_altpadcs 

+52 

2 

W 

vsf_altef lag 

+54 

4 

D 

vsf_altesp 

+58 

4 

D 

vsf_altss 

+5c 

2 

W 

vsf_altpadss 

+5e 

2 

W 

vsf_altes 

+ 60 

2 

W 

vsf_altpades 

+ 62 

2 

W 

vsf_altds 

+ 64 

2 

W 

vsf_altpadds 

+ 66 

2 

W 

vsf_altfs 

+ 68 

2 

W 

vsf_altpadf s 

+ 6a 

2 

W 

vsf_altgs 

+ 6c 

2 

W 

vsf_altpadgs 

+ 6e 

2 

W 


SEF System Entry Stack Frame 

This is the frame put on the by the call gate system entry function (KMEnterKmodeCallGate or KMEnterKmodeAPI32). 
This frame is used for: 

• 32-bit C APIs, with C callable workers (criSEF) 

• 16-bit PASCAL APIs, with C callable workers (criPASCALSEF) 

Field Name Offset Length Type Description 


sef_edi 

+ 0 

4 

D 

sef_esi 

+4 

4 

D 

sef_ebp 

+ 8 

4 

D 

sef_padesp 

+c 

4 

D 

sef_ebx 

+ 10 

4 

D 

sef_edx 

+ 14 

4 

D 

sef_ecx 

+ 18 

4 

D 

sef_eax 

+ 1 c 

4 

D 

sef_gs 

+20 

2 

W 

sef_padgs 

+ 22 

2 

W 

sef_f s 

+ 24 

2 

W 

sef_padf s 

+ 26 

2 

W 

sef_es 

+ 28 

2 

W 

sef_pades 

+2 a 

2 

W 

sef_ds 

+2c 

2 

W 

sef_padds 

+2e 

2 

W 



sef_retaddr 

+30 

4 

D 

sef_cbargs 

+34 

4 

D 

sef_ef lag 

+38 

4 

D 

sef_eip 

+3c 

4 

D 

sef_.cs 

+40 

2 

W 

sef_padcs 

+42 

2 

W 


SCI System Call Interpreter Call Gate Stack Frame 

This is what the stack frame looks like when the system is entered thru SCI via call gate using the KMEnterKmodeSCI function. 


Field Name 

ssf_edi 

ssf_esi 

s s f _ebp 

ssf_padesp 

ssf_ebx 

ssf_edx 

ssf_ecx 

ssf_eax 

ssf_gs 

ssf_padgs 

ssf_f s 

ssf_padf s 

ssf_es 

ssf_pades 

s s f _ds 


Offset Length Type Description 


+ 0 4 D 

+ 4 4 D 

+ 8 4 D 

+ c 4 D 

+ 10 4 D 

+ 14 4 D 

+ 18 4 D 

+ 1 c 4 D 

+ 20 2 W 

+ 22 2 W 

+ 24 2 W 

+ 26 2 W 

+ 28 2 W 

+2a 2 W 

+2c 2 W 


ssf_padds 

ssf_thopadr 

ssf_cbargs 

ssf_sciret 


+2e 2 W 

+30 4 D 


+34 4 D The Most Significant Bit of cbargs in an 

SCI stack frame is used to denote that a 
16 bit callgate is being used with the 
SCI mechanism. Used by Dynamic API's. 

+38 2 W 


ssf_ef lag 

ssf_eip 

ssf_cs 


+3a 4 D 

+3e 4 D 

+42 2 W 


ssf_padcs 


+42 2 W 


DHF Device Help Stack Frame 


Field Name 


Offset Length Type Description 



dhf_edi 

+ 0 

4 

D 

dhf_esi 

+4 

4 

D 

dhf_ebp 

+ 8 

4 

D 

dhf_padesp 

+c 

4 

D 

dhf_ebx 

+ 10 

4 

D 

dhf_edx 

+ 14 

4 

D 

dhf_ecx 

+ 18 

4 

D 

dhf_eax 

+ 1 c 

4 

D 

dhf_gs 

+20 

2 

W 

dhf_padgs 

+ 22 

2 

W 

dhf_f s 

+ 24 

2 

W 

dhf_padf s 

+ 26 

2 

W 

dhf_es 

+ 28 

2 

W 

dhf_pades 

+2a 

2 

W 

dhf_ds 

+2c 

2 

W 

dhf_padds 

+2e 

2 

W 

dhf_ef lag 

+30 

4 

D 

dhf_scratch 

+34 

4 

D 

dhf_eip 

+38 

4 

D 

dhf_cs 

+3c 

2 

W 

dhf_padcs 

+3e 

4 

D 

TF Hardware Exception Trap Stack Frame 

Stack frame for the trap manager before we go into kernel mode. 

Field Name 

Offset 

Length 

Type Description 

tf_trapnum 

+ 0 

4 

D 

tf_errcode 

+ 4 

4 

D 

tf_eip 

+ 8 

4 

D 

tf_cs 

+c 

2 

W 

tf_padcs 

+e 

2 

W 

tf_ef lags 

+ 10 

4 

D 

tf_esp 

+ 14 

4 

D 

tf_ss 

+ 18 

2 

W 

tf_padss 

+ la 

2 

W 


Exit List Entry Data Structure 



Pointers 


PTDA field ptda_pexllist points to the head of Exit List chain. 


Locations 


Allocated from the kernel heaps. 


VM Owner 


tkextlst (0xffc7) 

Format 

EXENT 

Field Name Offset Length Type Description 


exl_ 

.next 

+ 0 

4 

D 

link to next block/order 

exl_ 

_addr 

+ 4 

4 

D 

Exit list routine address 

exl_ 

.class 

+ 8 

2 

W 

order & position 0 thru OxlFF 

exl_ 

-type 

+a 

2 

W 

16:16 or 0:32 


exl type values: 

Name Value Description 

TK_TYPE1 6 0 
TK_TYPE32 1 
TK_TYPEDT 2 


Exception Handler Structures 


Pointers 

TIB field tib_pexchain points to the head of the chain of EXCEPTIONREGISTRATIONRECORDs. 
The 1 st parameter to the exception handler points to the EXCEPTIONREPORTRECORD. 

The 2nd parameter to the exception handler points to the EXCEPTIONREGISTRATIONRECORD. 
The 3nd parameter to the exception handler points to the CONTEXTRECORD. 

Locations 

Allocated in the Process' Private Arena,. 


VM Owner 

tktib (0xff3f) (also used for PIB ownership). 

Format 

CONTEXTRECORD Exception handler context record. 


Field Name 


Offset Length Type Description 


ContextFlags 

+ 0 

4 

D 

Flags 


+ 4 

6c 

S 

Floating point section 

ctx_env 

+ 4 

lc 

D 

Floating point environment 

ctx_stack 

+ 20 

50 

S 

Floating point register stack (8 FPREG 
structures) 


+ 70 

10 

S 

Segment Register section 

ctx_SegGs 

+ 70 

4 

D 

GS segment register 

ctx_SegFs 

+ 74 

4 

D 

FS segment register 

ctx_SegEs 

+ 78 

4 

D 

ES segment register 

ctx_SegDs 

+7 c 

4 

D 

DS segment register 


+ 80 

18 

S 

Integer Register section 

ctx_RegEdi 

+ 80 

4 

D 

EDI register 

ctx_RegEsi 

+ 84 

4 

D 

ESI register 

ctx_RegEax 

+ 88 

4 

D 

EAX register 

ctx_RegEbx 

+ 8c 

4 

D 

EBX register 

ctx_RegEcx 

+ 90 

4 

D 

ECX register 

ctx_RegEdx 

+ 94 

4 

D 

EDX register 


+ 98 

18 

S 

Control Register section 

ctx_RegEbp 

+ 98 

4 

D 

EBP register 

ctx_RegEip 

+ 9c 

4 

D 

EIP register 

ctx_SegCs 

+a0 

4 

D 

CS selector 

ctx_EFlags 

+a4 

4 

D 

Processor Flags register 

ctx_RegEsp 

+a8 

4 

D 

ESP register 

ctx_SegSs 

+ac 

4 

D 

SS segment register 

FPREG Floating Point Register Stack Element 


Field Name 

Offset 

Length 

Tgpe 

? Description 

losig 

+ 0 

4 

D 

Low significance double-word 

hisig 

+ 4 

4 

D 

High significance double-word 

signexp +8 

ContextFlags flag definitions: 

2 

W 

Exponent 

Name 


Bit Mask 

Description 

CONTEXT_CONTROL 


OxOOOOOOOlL 

SS : ESP , CS : EIP , EFLAGS , EBP 



CONTEXT_INTEGER 


0x00000002L EAX, EBX, ECX, EDX, ESI, EDI 


CONTEXT_SEGMENTS 0x00000004L DS, ES, FS, GS 

CONTEXT_FLOATING_POINT 0x00000008L Numeric coprocessor state 

EXCEPTIONREPORTRECORD Exception Handler Report Record. 


Field Name 

Offset 

Length 

Type 

Description 

Except ionNum 

+ 0 

4 

D 

Exception number 

fHandlerFlags 

+ 4 

4 

D 

Exception attributes 

NestedExceptionReport Record 

+ 8 

4 

D 

Preceding exception's report record if 
nested exception 

Except i onAddr e s s 

+c 

4 

D 

Exception address 

cParameters 

+ 10 

4 

D 

Size of exception specific information 

Except ionlnfo 

+ 14 

10 

D 

Exception specfic information 


fHandlerFlags flag definitions: 


Name 

Bit Mask 

Description 

EH_NONCONT INUABLE 

0x1 

Noncontinuable exception 

EH_UNWINDING 

0x2 

Unwind is in progress 

EH_EXIT_UNWIND 

0x4 

Exit unwind is in progress 

EH_S TACK_INVAL I D 

0x8 

Stack out of limits or unaligned 

EH_NESTED_CALL 

0x10 

Nested exception handler call 


EXCEPTIONREGISTRATIONRECORD Exception Handler Registration Record. 

Field Name Offset Length Type Description 

prev_structure +04 D Previously registered exception handler 

ExceptionHandler +44 D Exception handler entry point address or 

-1 if end of chain 


Loader Control Block Reference 


The following control blocks are described in this section: 
Module Table Entry (MTE) 

Swappable Module Table Entry (SMTE) 
Object Table Entry (OTE) 

Segment Table Entry (STE) 


Loader Demand Load Data (LDRDLD) 


Module Table Entry for OS/2 Warp V4.0 and OS/2 Warp V3.0 


For MTE formats for other versions of OS/2 see: 

MTE for OS/2 V2. 11 

Pointers 

_mte_h points to the head of the chain of MTEs. 

_global_h points to head of the chain of library module MTEs. 

Locations 

Dynamically allocated from the kernel resident heap except for the two MTEs that represent kernel interfaces. 
DosMosMte locates the MTE in OS2KRNL for DOSCALLS.DLL. 

VDDModMte locates the MTE in OS2KRNL for MVDM.DLL. 

VM Owner 

Dynamically allocated MTEs have owner id Idrmte (0xffa6) 

Format 


Field Name 

Offset 

Length Type Description 

mte_f lags2 

+ 0 

2 

w 

Module flags 2 

mte_handle 

+ 2 

2 

w 

the handle for this mte 

mte_swapmte 

+ 4 

4 

D 

link to swappable mte 

mte_link 

+ 8 

4 

D 

link to next mte 

mte_f lagsl 

+c 

4 

D 

Module flags 1 

mte_impmodcnt 

+ 10 

4 

D 

Num of entries in Imp Mod Name Tbl 

mte_sf n 

+ 14 

2 

W 

file system number for open file 

mte_usecnt 

+ 16 

2 

w 

.EXE only - use count 

mt e_mo dn ame 

+ 18 

8 

B 

resident module name (zero extended) 

mte_flags1 flag definitions: 




Name 

Bit 

Mask 

Description 

NOAUTODS 

0x00000000 

No Auto DS exists 

SOLO 

0x00000001 

Auto 

DS is shared 

INSTANCEDS 

0x00000002 

Auto 

DS is not shared 

INSTLIBINIT 

0x00000004 

Per- 

instance Libinit 


GINISETUP 0x00000008 Global Init has been setup 

NOINTERNFIXUPS 0x00000010 internal fixups in .EXE-. DLL applied 

NOEXTERNFIXUPS 0x00000020 external fixups in .EXE-. DLL applied 


CLASS_PROGRAM 


0x00000040 Program class 


CLAS S_GLOBAL 

0x00000080 

CLASS_SPECIFIC 

0x00000000 

CLASS_ALL 

0x00000000 

CLASS_MASK 

0x00000000 

MTEPROCESSED 

0x00000100 

USED 

0x00000200 

DOSLIB 

0x00000400 

DOSMOD 

0x00000800 

MTE_MEDIAFIXED 

0x00001000 

LDRINVALID 

0x00002000 

PROGRAMMOD 

0x00000000 

DEVDRVMOD 

0x00004000 

LIBRARYMOD 

0x00008000 

VDDMOD 

0x00010000 

MVDMMOD 

0x00020000 

INGRAPH 

0x00040000 

GINIDONE 

0x00080000 

MTEADDRALLOCED 

0x00100000 

FSDMOD 

0x00200000 

FSHMOD 

0x00400000 

MTELONGNAMES 

0x00800000 

MTE_MEDIACONTIG 

0x01000000 

MTE_MEDIA16M 

0x02000000 

MTE SWAP ONLOAD 

0x04000000 

MTEPORTHOLE 

0x08000000 

MTEMODPROT 

0x10000000 

MTENEWMOD 

0x20000000 

MTEDLLTERM 

0x40000000 

MTESYMLOADED 

0x80000000 


Global class 

Specific class, as against global 
nonspecific class - all modules 

MTE being loaded 

MTE is referenced - see ldrgc.c 

set if D0SCALL1 

set if DOSCALLS 

File Media permits discarding 

module not loadable 

program module 

device driver module 

DLL module 

VDD module 

Set if VDD Helper MTE (MVDM.DLL) 

In Module Graph - see ldrgc.c 
Global Init has finished 
Allocate specific or not 
FSD MTE 
FS helper MTE 

Module supports long-names 
File Media contiguous memory req 
File Media requires mem below 16M 
make code pages swap on load 
porthole module 

Module has shared memory protected 

Newly added module 

Gets instance termination 

Set if debugger symbols loaded 


mte_flags2 flag definitions: 


Name 

Bit Mask 

Description 


MTEFORMATMASK 

0x0003 

Module 

format 

mask 

MTEFORMATR1 

0x0000 

Module 

format 

reserved 

MTEFORMATNE 

0x0001 

Module 

format 

NE 

MTEFORMATLX 

0x0002 

Module 

format 

LX 

MTEFORMATR2 

0x0003 

Module 

format 

reserved 


MTESYSTEMDLL 


0x0004 


DLL exists in system list 



MTELOADORATTACH 

0x0008 

MTECIRCLEREF 

0x0010 

MTEFREEFIXUPS 

0x0020 

MTEPRELOADED 

0x0040 

MTEGETMTEDONE 

0x0080 

MTEPACKSEGDONE 

0x0100 

MTE2 OLIELIST 

0x0200 

MTESYSPROCESSED 

0x0400 

MTEDLLONEXTLST 

0x1000 


Module under load or attach - for init 

Module circular reference detection 

Free system mte's fixup flag d#98488 

MTE Preload completed 

GetMTE already resolved 

Segment packed memory allocated 

Name present in version20 lie list 

System DLL already processed 

DLL has term routine on exit list #74177 
removed - 75809 


Module Table Entry for OS/2 V2.1 1 


Field Name 

Offset 

Length 

Type 

Description 

mte_f lags2 

+ 0 

2 

W 

Module flags 2 

mte_handle 

+2 

2 

W 

the handle for this mte 

mt e_s w apmt e 

+ 4 

4 

D 

link to swappable mte 

mte_modname 

+ 8 

4 

A 

resident module name (zero extended) 

mte_link 

+c 

4 

D 

link to next mte 

mte_f lagsl 

+ 10 

4 

D 

Module flags 1 

mte_impmodcnt 

+ 14 

4 

D 

Num of entries in Imp Mod Name Tbl 

mte_sf n 

+ 18 

2 

W 

file system number for open file 

mte_usecnt 

+ la 

2 

W 

.EXE only - use count 


Swappable Module Table Entry for OS/2 Warp V4.0 


For SMTE formats for other versions of OS/2 see: 
SMTE for OS/2 Warp V3.0 


Pointers 

Locations 


MTE field mte_swapmte points to the associated SMTE. 

Dynamically allocated from the kernel swappable heap except for the SMTE associated with DOSCALLS.DLL. 
DosMosMteSwappable locates the SMTE in OS2KRNL associated with DOSCALLS.DLL. 


VM Owner 


Dynamically allocated SMTEs have owner id Idrmte (0xffa6) 


Format 


Field Name 

Offset 

Length 

Type 

Description 

smte_mpages 

+ 0 

4 

D 

Module # pages 

smte_startob j 

+ 4 

4 

D 

Object # for instruction pointer 

smte_eip 

+ 8 

4 

D 

Extended instruction pointer 

smte_stackob j 

+c 

4 

D 

Object # for stack pointer 

smte_esp 

+ 10 

4 

D 

Extended stack pointer 

smte_page shift 

+ 14 

4 

D 


smte_f ixupsize 

+ 18 

4 

D 

Fixup section size 

smte_ob jtab 

+ 1 c 

4 

D 

Object table offset 

smte_ob jcnt 

+20 

4 

D 

Number of objects in module 

smte_ob jmap 

+ 24 

4 

D 

Object page map offset 

smt e_i t e rmap 

+ 28 

4 

D 

Object iterated data map offset 

smte_rsrctab 

+2c 

4 

D 

Offset of Resource Table 

smt e_rsr cent 

+30 

4 

D 

Number of resource entries 

smte_restab 

+34 

4 

D 

Offset of resident name table 

smte_enttab 

+38 

4 

D 

Offset of Entry Table 

smt e_f paget ab 

+3c 

4 

D 

Offset of Fixup Page Table 

smte_f rectab 

+40 

4 

D 

Offset of Fixup Record Table 

smte_impmod 

+44 

4 

D 

Offset of Import Module Name Table 

smte_impproc 

+48 

4 

D 

Offset of Imp Procedure Name Tab 

smte_datapage 

+4c 

4 

D 

Offset of Enumerated Data Pages 

smt e_nre stab 

+50 

4 

D 

Offset of Non-resident Names Table 

smt e_cbnre stab 

+ 54 

4 

D 

Size of Non-resident Name Table 

smte_autods 

+ 58 

4 

D 

Object # for automatic data object 

smte_debuginfo 

+5c 

4 

D 

Offset of the debugging info 

smte_debuglen 

+ 60 

4 

D 

The len of the debug info in bytes 

smt e_he ap size 

+ 64 

4 

D 

use for converted 16-bit modules 

smte_path 

+ 68 

4 

D 

full pathname 

smte_semcount 

+ 6c 

2 

W 

Count of threads waiting on MTE 
semaphore. 0 => semaphore is free 

smte_semowner 

+ 6e 

2 

W 

Slot number of the owner of MTE semahore 

smt e_p file cache 

+70 

4 

D 

Pointer to file cache for 
Dos32CacheModule 

smte_stacksize 

+74 

4 

D 

Thread 1 Stack size from the exe header 

smte_alignshif t 

+78 

2 

W 

use for converted 16-bit modules 

smte_NEexpver 

+7a 

2 

W 

expver from NE header 


+7c 2 W length of full pathname 


smte_pathlen 


smte_NEexetype 

+7e 

2 

W 

exetype from NE ] 

header 


smte_csegpack 

+ 80 

2 

W 

count 

of segs to 

pack 


smt e_ma j o r_o s 

+ 82 

1 

B 

major 

os version 

to lie 

about 

smte_minor_os 

+ 83 

1 

B 

minor 

os version 

to lie 

about 


Swappable Module Table Entry for OS/2 Warp V3.0 


Field Name 

Offset 

Length 

Type 

Description 

mte_f lags2 

+ 0 

2 

W 

Module flags 2 

mte_handle 

+ 2 

2 

W 

the handle for this mte 

mte_swapmte 

+ 4 

4 

D 

link to swappable mte 

mte_link 

+ 8 

4 

D 

link to next mte 

mte_f lagsl 

+ c 

4 

D 

Module flags 1 

mte_impmodcnt 

+ 10 

4 

D 

Num of entries in Imp Mod Name Tbl 

mte_sf n 

+ 14 

2 

W 

file system number for open file 

mte_usecnt 

+ 16 

2 

W 

.EXE only - use count 

mte_modname 

+ 18 

8 

B 

resident module name (zero extended) 


Object Table Entry for OS/2 Warp V4.0 and OS/2 Warp V3.0 


Pointers 

Locations 

VM Owner 
Format 


SMTE field smte_objtab points to the associated OTE for 32-bit modules. 

Dynamically allocated from the kernel swappable heap except for the SMTE associated with DOSCALLS.DLL. 
dcm_ote_start locates the OTE in OS2KRNL associated with DOSCALLS.DLL. 

Dynamically allocated OTEs have owner id Idrmte (0xffa6) and share the same heap block as their SMTE. 


Field Name Offset Length Type Description 

ote_size +04 D Object virtual size 

ote_base +44 D Object base virtual address 

+ 8 


ote_f lags 


4 


D 


Attribute flags 


ote_pagemap +c 4 
ote_mapsize +10 4 
ote_resu +14 4 


D Object page map index 
D Num of entries in obj page map 
S 


ote_flags flag definitions: 


Name 

Bit Mask 

Description 


OBJREAD 

OxOOOOOOOlL 

Readable Object 


OBJWRITE 

0x00000002L 

Writeable Object 


OBJEXEC 

0x00000004L 

Executable Object 


OBJRSRC 

0x00000008L 

Resource Object 


OB JD IS CARD 

OxOOOOOOlOL 

Object 

is Discardable 


OB JS HARED 

0x00000020L 

Object 

is Shared 


OB JP RE LOAD 

0x00000040L 

Object 

has preload pages 


OBJINVALID 

0x00000080L 

Object 

has invalid pages 


OB JZEROFIL 

OxOOOOOlOOL 

Object 

has zero-filled pages 

OB JRESIDENT 

0x00000200L 

Object 

is resident 


OB JALIAS1 6 

OxOOOOlOOOL 

16 



OB JBIGDEF 

0x00002000L 

Big/Default bit setting 


OB JCONFORM 

0x00004000L 

Object 

is conforming for 

code 

OBJIOPL 

0x00008000L 

Object 

I/O privilege level 

OB JMADEPRIV 

0x40000000L 

Object is made private for debug 
(now obsolete) 

OBJALLOC 

0x80000000L 

Object 

is allocated used 

by loader 


Segment Table Entry for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 


Pointers 
Locations 
VM Owner 
Format 


SMTE field smte_objtab points to the associated STE for 16-bit modules. 

Dynamically allocated from the kernel swappable heap. 

Dynamically allocated STEs have owner id Idrmte (0xffa6) and share the same heap block as their SMTE. 


Field Name Offset Length Type Description 

ste_offset +02 W file offset to segment data 


ste_size +2 
ste_flags +4 
ste_minsiz +6 
ste_seghdl +8 
ste_selector +a 
ste_fixups +c 


2 

2 

2 

2 

2 

4 


W file data size 

W type and attribute flags 

W minimum allocation size 

W segment handle 

W segment selector 

D fixup record storage 


ste_flags flag definitions: 


Name 

Bit Mask 

Description 

STE_TYPE_MASK 

0x0001 

segment type field 

STE_CODE 

0x0000 

code segment type 

STE_DATA 

0x0001 

data segment type 

STE_PACKED 

0x0002 

segment is packed 

STE_SEMAPHORE 

0x0004 

segment semaphore 

STE_ITERATED 

0x0008 

segment data is iterated 

STE_WAITING 

0x0010 

segment is waiting on semephore 

STE_S HARED 

0x0020 

segment can be shared 

S T E_P RELOAD 

0x0040 

segment is preload 

STE_ERONLY 

0x0080 

excute only if code segment read only if 
data segment 

STE_RELOCINFO 

0x0100 

set if segment has reloc records 

STE_CONFORM 

0x0200 

segment is conforming 

STE_RING_2 

0x0800 

ring 2 selector 

STE_RING_3 

0x0000 

ring 3 selector 

STE_HUGE 

0x1000 

huge segment 

STE_PAGEABLE 

0x2000 

just a page can be faulted in 

STE_PRESENT 

0x2000 

packed segment already loaded 

STE_SELALLOC 

0x4000 

used to indicate sel allocated 

STE_GDTSEG 

0x8000 

used to indicate GTD sel alloc 


Loader Demand Load Data OS/2 Warp V4.0 and OS/2 Warp 
V3.0 


Pointers 

PTDA field ptda_pldrdldHead points to chain of modules loaded by DosLoadModule for a given process. 
_pldrdldHeadKernel points to the head of kernel reference list of LDRDLDs. 



Locations 


Dynamically allocated from the kernel resident heap. 


VM Owner 


Idrdld (0xffa4) 


Format 


Field Name 


Offset Length Type Description 


ldrdld_pldrdldNext +0 


4 


D Pointer to next Idrdld 


ldrdld_hmte 


+ 4 


2 


W handle of loaded module 


ldrdld_cRef 


+ 6 


2 


W Number of times loaded 


File System Control Block Reference 


The following control blocks are described in this section: 


File System Control Block Entry (FSC) 
System File Table Entry (SFT) 

Master File Table Entry (MFT) 

Record Lock Record (RLR) 

Volume Parameter Block (VPB) 

Drive Parameter Block (DPB) 

Current Directory Structure (CDS) 

File System Buffer (BUF) 

Named Pipe Structures 
Anonymous Pipe Structures 


An overview of the File System Control Blocks follows: 


File System Control Block Diagrams 


The following diagrams illustrate the relationships between various file system control blocks 


Open Files - Application to System 
Open Files - System View 
Open Device - System View 
Shared Files with Locked Ranges 


Anonymous and Named Pipes 


Open Files - Application to System 



Open File - Application to System 



Open Files - System View 



Open File - System View 



EA SFT 


DEV 



Open Device - System View 




Shared Files with Locked Ranges 




Anonymous and Named Pipes 



Anonymous Pipes 



Named Pipes 

NPN 





File System Control Block for OS/2 Warp V4.0 and OS/2 
Warp V3.0 


Pointers 


Locations 

VM Owner 

Format 

FSCSEG 


SFT field sf_FSC points to the associated FSC_ENTRY. 

VPB field vpb_FSC points to the associated FSC_ENTRY. 

CDS field cd_ownerFSC points to the associated FSC_ENTRY. 
SAS field SAS_dd_FSC contains the selector for FSCSEG. 
GDT_FSC locates the GDT descriptor for the FSCSEG. 

Dynamically allocated from the kernel resident heap. 

fsc (0xff95). 


Field Name Offset Length Type Description 


f ss_Limit 

0 


2 


W 


Offset PAST last allocated byte 

f ss_ShutdownFlags 

2 


2 


w 


flags for shutdown 

fss_SDWait Count 

4 


2 


w 


number of processes pending before 

f ss_pad 

6 


2 


w 


shutdown can commence (DWORD align) 

FS ENTRY 








Field Name 


Offset 

Length 

Type Description 

FS_ATTRIBUTE 


0 


4 


D 

-> FSD attribute, (in FSD memory 

FS_NAME 


4 


4 


D 

-> FSD name. (in FSD memory 

FS_ATTACH 


8 


4 


D 

DosQFsAttach, DosFsAttach 

FS_CHDIR 


c 


4 


D 

DosChdir 

FS_CHGFILEPTR 


10 


4 


D 

DosChgFilePtr 

FS_CLOSE 


14 


4 


D 

DosClose 

FS_COPY 


18 


4 


D 

DosCopy 

FS_DELETE 


1C 


4 


D 

DosDelete 

FS_EXIT 


20 


4 


D 

DosExit 

FS_FILEATTRIBUTE 


24 


4 


D 

DosFilelnfo, DosSetFileMode 

FS_FILEINFO 


28 


4 


D 

DosQFilelnf o, DosSetFilelnf o 

F S_F I LE 1 0 


2C 


4 


D 

DosFilelO 


FS_FINDCLOSE 

30 

4 

D 

DosFindClose 

FS_FINDFIRST 

34 

4 

D 

DosFindFirst 

FS_FINDFROMNAME 

38 

4 

D 

DosFindFromName-Private to server 

FS_FINDNEXT 

3C 

4 

D 

DosFindNext 

FS_FINDNOTIFYCLOSE 

40 

4 

D 

DosFindNotifyClose 

FS_FINDNOTIFYFIRST 

44 

4 

D 

DosFindNotifyFirst 

FS_FINDNOTIFYNEXT 

48 

4 

D 

DosFindNotifyNext 

FS_FSINFO 

4C 

4 

D 

DosQFsInfo, DosSetFsInfo 

FS_INIT 

50 

4 

D 

— No corresponding API 

FS_IOCTL 

54 

4 

D 

DosDevIoctl 

FS_MKDIR 

58 

4 

D 

DosMkdir 

FS_MOUNT 

5C 

4 

D 

— No corresponding API 

FS_MOVE 

60 

4 

D 

DosMove 

FS_NEWSIZE 

64 

4 

D 

DosNewsize 

FS_NMPIPE 

68 

4 

D 

All named pipe related API's 

FS_OPENCREATE 

6C 

4 

D 

DosOpen 

FS_PATHINFO 

70 

4 

D 

DosQPathlnf o, DosSetPathlnf o 

FS_PROCESSNAME 

74 

4 

D 

— No corresponding API 

FS_READ 

78 

4 

D 

DosRead, DosReadAsync 

FS_RMDIR 

7C 

4 

D 

DosRmdir 

FS_SETSWAP 

80 

4 

D 

— No corresponding API 

FS_WRITE 

84 

4 

D 

DosWrite, DosWriteAsync 

FS_OPENPAGEFILE 

88 

4 

D 

init time only 

FS_ALLOCATEPAGESPACE 

8C 

4 

D 

size swap file 

FS_CANCELLOCKREQUEST 

90 

4 

D 

DosCancelLockRequest 

FS_FILELOCKS 

94 

4 

D 

DosSetFileLocks 

FS_VERIFYUNCNAME 

98 

4 

D 

Used to save function addresses 

FS_COMMIT 

9C 

4 

D 

DosBufReset, DosClose 

F S_DOP AGE 1 0 

AO 

4 

D 

perform paging 

FS_FSCTL 

A4 

4 

D 

DosFsCtl 

FS_FLUSHBUF 

A8 

4 

D 

DosBufReset 

FS_SHUTDOWN 

AC 

4 

D 

DosShutdown 

FS_SDCHGFILEPTR 

BO 

4 

D 

Used to save function addresses 

FS_SDFSINFO 

B4 

4 

D 

at shutdown time. These functions 

FS_S DREAD 

B8 

4 

D 

will only be called by shutdown 

FS_SDWRITE 

BC 

4 

D 

filters . 


FS_ATTRIBUTE flag definitions 



Name 


Bit Mask Description 


FS_ATTR_REMOTE 0x0001 0 = local FSD, 1 = remote FSD 

FS_ATTR_UNC 0x0002 0 = normal, 1 = this is UNC FSD 

FS_ATTR_LOCKINFO 0x0004 0 = no notice, l=notify filelocks 

FS_ATTR_LVL7 0x0008 0 = no level 7 requests, 1 = yes 

FS_ATTR_PIPESVR 0x0010 0 = don't FSD on PIPE req, 1 = yes 

FS_ATTR_VERNO 0x7000 bits 28-30 version no 
FS_ATTR_EA 0x8000 bit 31 -> 1 = extended attribute 

FS_COMMIT flag definitions 

Name Bit Mask Description 

FS_COMMIT_ALL 2 all handles commit 

FS_COMMIT_ONE 1 one handle commit 

Euqates for close type 

Name Bit Mask Description 

FS_CL_ORD INARY 0 ordinary close 

FS_CL_FORPROC 1 final close for process 

FS_CL_FORSYS 2 final close for system 

fscnameentstruc 

Field Name Offset Length Type Description 

FSCNmEnt_Emulation 0 4 D 

FSCNmEnt_Group 4 1 B 

FSCNmEnt_NameLen 5 1 B 

FSCNmEnt_ProcName 6 1 B 

mFS ENTRY 

Field Name Offset Length Type Description 


MFS_ 

_CHGFILEPTR 

0 

4 

D 

DosChgFilePtr 

MFS_ 

.CLOSE 

4 

4 

D 

DosClose 


MFS_ 

_INIT 

8 

4 

D 

— No corresponding API 

MFS_ 

.OPEN 

C 

4 

D 

DosOpen 


MFS_ 

.READ 

10 

4 

D 

DosRead, 

DosReadAsync 

MFS_ 

.TERM 

14 

4 

D 

DosRead, 

DosReadAsync 


uncfscentrstruc 



Field Name 

Offset 

Length 

Type 

Description 

UNCf sc_VpbID 

0 

4 

D 

Unique ID UNC VPB 

UNCf sc_FSCptr 

4 

4 

D 

Hold Seg : of s to UNC FSD's FSC 

UNCf sc_hVPB 

8 

2 

W 

Handle to VPB in VPB Seg (offset) 

UNCf sc_Active 

A 

2 

W 

Does this entry contain UNC FSD Info? 

uncliststruc 





Field Name 

Offset 

Length 

Type 

Description 

UNCf sc_l 

0 

C 

B 


UNCf sc_VpbID 

0 

4 

D 

Unique ID UNC VPB 

UNCf sc_FSCptr 

4 

4 

D 

Hold Seg: of s to UNC FSD's FSC 

UNCf sc_hVPB 

8 

2 

W 

Handle to VPB in VPB Seg (offset) 

UNCf sc_Active 

A 

2 

W 

Does this entry contain UNC FSD Info? 

UNCf sc_2 

C 

C 

B 


UNCf sc_VpbID 

C 

4 

D 

Unique ID UNC VPB 

UNCf sc_FSCptr 

10 

4 

D 

Hold Seg: of s to UNC FSD's FSC 

UNCf sc_hVPB 

14 

2 

W 

Handle to VPB in VPB Seg (offset) 

UNCf sc_Active 

16 

2 

W 

Does this entry contain UNC FSD Info? 

UNCf sc_3 

18 

C 

B 


UNCf sc_VpbID 

18 

4 

D 

Unique ID UNC VPB 

UNCf sc_FSCptr 

1C 

4 

D 

Hold Seg: of s to UNC FSD's FSC 

UNCf sc_hVPB 

20 

2 

W 

Handle to VPB in VPB Seg (offset) 

UNCf sc_Active 

22 

2 

W 

Does this entry contain UNC FSD Info? 

UNCf sc_4 

24 

C 

B 


UNCf sc_VpbID 

24 

4 

D 

Unique ID UNC VPB 

UNCf sc_FSCptr 

28 

4 

D 

Hold Seg: of s to UNC FSD's FSC 

UNCf sc_hVPB 

2C 

2 

W 

Handle to VPB in VPB Seg (offset) 

UNCf sc_Active 

2E 

2 

W 

Does this entry contain UNC FSD Info? 


System File Table Entry for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 



Pointers 


MFT field mft_sptr points to the associated sf_entry. 

RLR field rlr_sptr points to the associated sf_entry. 

SAS field SAS_file_SFT contains the selector for the SFT segment table. 
NP field np_ssft points to the server SFT for a named pipe. 

NP field np_csft points to the client SFT for a named pipe. 

GDT_SFT locates the GDT descriptor for the SFT segement table. 


Locations 


VM Owner 


Format 

SFT 


Dynamically allocated from the system arena. 


sft (Oxffal). 


Field Name 
sft_link 
sft_count 
sft_handle 
sf t_inshutdown 


Offset Length Tgpe Description 

0 2 W selector for next chunk of table 

2 2 W number of entries in this block 

4 2 W handle of segment holding this block 

6 2 W flags for shutdown 


sf entry 


Field Name 
s f _re f _count 


Offset Length Tgpe Description 

0 2 W number of processes sharing entry 


sf_usercnt 2 2 W For files: number of threads waiting for 

access to sf_entry. For devices: number 
of threads using this sf_entry. 


reserved 4 1 B Used to be attr of file - moved to * 

independent part of the SFT for general 
* access 


sf_flags 5 2 W Bits 8-15 

Bit 15 = 1 if remote file 

= 0 if local file or device 
Bit 14 = not used 
Bit 13 = Pipe bit 
Bit 12 = FCB bit 

= 1 if fcb sft 
= 0 if normal sft 
Bit 11 = if Pipe, 

= 0 if anonymous pipe 
= 1 if named pipe 

Bit 10 == sf_inuse = sf_entry is in use 

by some thread, ie busy 

Bit 9 == sf_want = some thrd blocked 

waiting to use the sf_entry 

Bit 8 == sf_noJFN, no handle alloced 

for sft 

Bits 0-7 (old FCB_devid bits) 

If remote file or local file, bit 
6=0 if dirty Device ID number, bits 
0-5 if local file, 
bit 7=0 for local file 

=1 for local I/O device 
If local I/O device, bit 6=0 if EOF 
(input) 


Bit 5=1 if Raw mode 

Bit 0=1 if console input device 

Bit 1=1 if console output device 

Bit 2=1 if null device 

Bit 3=1 if clock device 


sf_f lags2 

7 

2 

W 


sf_devptr 

9 

4 

D 

Not used if local file, points 

sf_FSC 

D 

4 

D 

Pointer to the file system control 

sf_cookie 

11 

4 

D 

server's per-file id (for oplock 
support) 

sf_chain 

15 

4 

D 

16:16 Link to next SFT 

sf_MFT 

19 

4 

D 

32 bit FLAT pointer to MFT entry 

sf_f sd 

ID 

32 

S 

File system dependent section 

s f _f s i 

4F 

2a 

S 

File system independent section 

sf_plock 

79 

2 

W 

16 bit offset to first pending LOCK 
record 

sf_NmPipeSfn 

7b 

2 

W 

SFN of named pipe for spooled files 

sf_codepage 

7d 

2 

W 

current codepage (font) for data in file 

sf_LockID 

If 

4 

D 

lock-id for protected file-handle access 


sf_flags flag definitions 

Name Bit Mask Description 

SF_ISNET 0x8000 True if SFT is for remote 

SF_PIPE 0x2000 Anonymous Pipe 

SF_FCB 0x1000 True if SFT is for an FCB 

SF_NMPIPE 0x0800 true if name pipe 

SF_INUSE 0x0400 True if sf entry is in use by some 
thread, that is, busy 

SF_BLOCKED 0x0200 True if some thread is blocked waiting 
to use the sf entry 

SF_NOJFN 0x0100 True if no handle alloc' ed for SFT 

sf_flags2 flag definitions 


Name 

Bit Mask 

Description 


SF_FORMAT_MOUNT 

0x8000 

True if a format mount was done, 
still in effect 

and 

SF_BEGINFORMAT_FAILED 

0x4000 

True if a beginformat ioctl failed 

S S F 2_LD RB I NARY S EM 

0x2000 

'ON' if SFT owned by some thread 


SF_SRVRDR 

0x1000 

serving pipe redirection in effect 

SFF2_LOCKED_DRIVE 

0x0800 

A LOCK was issued on this direct 
handle to lock the drive. 

access 

SFF2_SPOOLED 

0x0400 

File is spooled 


SFF2_DATAWRITTEN 

0x0200 

Data written to file 




SFF2_Consistency 


0x0180 

consistency bits 

SFF2_CANCEL JOB 


0x0040 

spool job has been canceled*/ ;whs 

SFF2_NONS POOLED 


0x0020 

File 

is nonspooled; going to printer 

SFF2_STPTHINFDN 


0x0010 

SetPathlnfo done, don't set archive 

Sf f2_RA_ON 


0x0008 

Readahead started 

Sf f2_UNC 


0x0004 

UNC 

object 

sf f 2_isf ree 


0x0002 

this 

SFT is on free list (unused) 

sf f 2_RA_BIG 


0x0001 

Big 

Readahead 

sfdFATFS 





Field Name 

Offset Length Tgpe Description 

sfdFAT_f irFILEclus 

0 

2 

w 

First cluster of file (bit 15 = 0) 

sfdFAT_cluspos 

2 

2 

w 

Position of last cluster accessed 

sfdFAT_lstclus 

4 

2 

w 

Last cluster accessed 

sfdFAT_dirsec 

6 

4 

D 

Sector # of directory sector for this 
file 

s f dF AT_di rpo s 

A 

1 

B 

Offset of this entry in the above 

s f dFAT_EAHandle 

B 

2 

W 

starting cluster of EAs 

s f dF AT_n ame [11] 

D 

B 

B 


sfdFAT_bRAReads 

18 

4 

D 

# of consecutive reads within range 

s f dF AT_b RAB i gRe a d s 

1C 

4 

D 

# of consecutive big reads 

s f dF AT_f 1 dMa s k 

20 

4 

D 

Unique File Dirty Mask 

sfdFAT_pSFT 

24 

4 

D 

Linear address of SFT 

sfdFAT_ulNextRA 

28 

4 

D 

Position where next rahead starts 

sfdFAT_bBufRun 

2C 

4 

D 

Number of sectors in rahead run 

sfdFAT_LastFATSec 

30 

2 

W 

last FAT sector added to chain 


sftfsd 

Field Name Offset Length Type Description 

sfd_work[50] 0 32 B 

B 

sftsfi 

Field Name Offset Length Tgpe Description 


sf i_mode 

0 

2 

w 

mode of access or high bit on 

. if FCB 

sf i_mode2 

2 

2 

w 

additional openmode bits for 

DosOpen2 

sf i_hVPB 

4 

2 

w 

handle of volume 


sf i_ctime 

6 

2 

w 

Creation time of file 




sf i_cdate 


8 2 W Creation date of file 


sf i_atime 

A 

2 

w 

Time of last access of file 

sf i_adate 

C 

2 

w 

Date of last access of file 

sf i_mtime 

E 

2 

w 

Time of last modification of file 

sf i_mdate 

10 

2 

w 

Date of last modification of file 

sf i_size 

12 

4 

D 

Size associated with file 

sf i_position 

16 

4 

D 

Read/Write pointer or LRU count for FCBs 

sf i_UID 

1A 

2 

w 

User ID 

sf i_PID 

1C 

2 

w 

Process ID 

sf i_PDB 

IE 

2 

w 

Process Data Block 

sf i_self sfn 

20 

2 

w 

SFN of this sf_entry, used to speed 

sf i_tstamp 

22 

1 

B 

update time stamp flags; see ST_ equs 

sf i_type 

23 

2 

W 

f ile /device /named-pipe /FCB 

pPVDBFil 

25 

4 

D 

performance counter data block pointer 

sf i_DOSattr 

29 

1 

B 

DOS attributes of file (sys, hid, r/o, arch 


sfi_type flag definitions. 


Name 


Bit Mask 

Description 

STYPE_ 

_FILE 

0x0000 

file 

STYPE_ 

.DEVICE 

0x0001 

device 

STYPE_ 

_NMPIPE 

0x0002 

named pipe 

STYPE_ 

_FCB 

0x0004 

SFT is for an FCB 


Master File Table Entry for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 ALLSTRICT kernel 


For MTE formats for other versions of OS/2 see: 

MTE for OS/2 Warp V4.0 and OS/2 Warp V3.0 RETAIL kernel 


Pointers 

SFT field sf_MFT points to the associated MFT entry. 

SAS field SAS_file_MFT points to the PTREE head for the MFT PTREE. 

Locations 

Dynamically allocated from the kernel resident heap. 

VM Owner 

mft (0xff9e). 


Format 


Field Name 


Offset Length Type Description 


mft_ksem 

+ 0 

10 

s 

multi read/single write semaphore 

mft_lptr 

+ 10 

2 

w 

16 bit offset to first LOCK record 

mft_sptr 

+ 12 

4 

D 

16 bit FAR pointer to first SFT in chain 

mft_pCMap 

+ 16 

4 

D 

32 bit FLAT pointer to cluster map 

mft_CMapKSem 

+ la 

10 

S 

semaphore for access to pCMap 

mft_opf lags 

+2a 

2 

W 

oplock flags 

mf t_serl 

+2c 

2 

W 

serial number for FCB checking 

mft_f lags 

+2e 

2 

w 

general purpose MFT flags 

mf t_signature 

+30 

2 

w 

for sanity check 

mft_hvpb 

+32 

2 

w 

handle of vpb 

mf t_name 

+34 

1 

B 

start of name string (zero terminated) 


mft_flags flag definitions 

Name Bit Mask Description 

mft_pagerheap 0x0001 MFT is allocated on pager heap 

MFT_DEFAULTHEAP 0x0 MFT is allocated on kernel (heap default 

MFT heap) 


mft_opflags flag definitions 


Name Bit 

mft_opnolock 0 

mft_oplock 1 

mft_opbatch 2 

mft_opbreak 4 


mft_opbreakf ailed 8 


Mask Description 

no oplock or opbatch on file 
oplock on file 
opbatch on file 

oplock/batch cleanup in process 
oplock/batch cleanup failed 


Master File Table Entry for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 RETAIL kernel 


Field Name Offset Length Type Description 

mft_ksem +0 C S multi read/single write semaphore 


mft_lptr 


+c 


2 


W 


16 bit offset to first LOCK record 



mft_sptr 

+e 

4 

D 

16 bit FAR pointer to first SFT in chain 

mft_pCMap 

+ 12 

4 

D 

32 bit FLAT pointer to cluster map 

mft_CMapKSem 

+ 16 

C 

S 

semaphore for access to pCMap 

mft_opf lags 

+22 

2 

W 

oplock flags 

mft_serl 

+24 

2 

w 

serial number for FCB checking 

mft_f lags 

+26 

2 

w 

general purpose MFT flags 

mft_hvpb 

+28 

2 

w 

handle of vpb 

mf t_name 

+2 a 

1 

B 

start of name string (zero terminated) 


Record Lock Record for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 


Pointers 

MFT field mftjptr contains the offset within the RLR segment to the first RLR associated with the MFT. 
GDT_RLR locates the GDT descriptor for the RLR segment. 

Locations 

Dynamically allocated from the system arena. 

VM Owner 

fsreclok (0xff47). 

Format 


Field 

Name 

Offset 

Length 

Type 

Description 

rlr_next 

+ 0 

2 

W 

16 bit offset to next RLR. 0 if end 

rlr_prev 

+ 2 

2 

W 

16 bit offset to prev RLR. 0 if SFT 

rlr_fba 

+ 4 

4 

D 

offset of first byte of locked region 

rlr_lba 

+ 8 

4 

D 

offset of last byte of locked region 

rlr_sptr 

+c 

4 

D 

16:16 FAR pointer to SFT 

rlr_UID 

+ 10 

2 

W 

lock issuer's user ID 

rlr_PID 

+ 12 

2 

W 

lock issuer's process ID 

rlr_PDB 

+ 14 

2 

W 

lock issuer's PDB, 0 for non-3xBox 

rlr_f lags 

+ 16 

1 

B 

flags 


rlr_flags flag definitions 

Name Bit Mask Description 

RLR_EXCLUS IVE 0 


RLR_S HARED 


1 


RLR_WAITING 2 

RLR_CANCELPLOCK 4 


Volume Parameter Block for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 


Pointers 


Locations 

VM Owner 

Format 

vob 


SFT field sfi_hVPB contains the offset within the VPB segment of the associated VPB. 
MFT field mft_hVPB contains the offset within the VPB segment of the associated VPB. 
DPB field dpb_hVPB contains the offset within the VPB segment of the associated VPB. 
CDS field cdi_hVPB contains the offset within the VPB segment of the associated VPB. 
GDT_VPB locates the GDT descriptor for the VPB segment. 

VPB segment is dynamically allocated from the kernel resident heap. 

vpb (0xffa2). 


Field Name 

Offset 

Length 

Type 

Description 

vpb_f link 

0 

2 

W 

handle of forward link 

vpb_blink 

2 

2 

W 

handle of back link 

vpb_re f _count 

4 

2 

W 

count of objects that point to VPB 

vpb_search_count 

6 

2 

W 

count of searches that point to VPB 

vpb_f irst_access 

8 

1 

B 

initialized to -1 to force a media 

vpb_signature 

9 

2 

W 

Signature specifying VPB validity 

vpb_f lags 

B 

1 

B 

flags (bits 1, 6, 3-0 defined below) 

vpb_fMisc 

C 

1 

B 

More flags (bit 7 defined below) 

vpb_FSC 

D 

4 

D 

Pointer to the file system control block 
(FSC) . 

vpb_f sd 

11 

40 

S 

File system dependent section 

vpb_f si 

51 

2C 

S 

File system independent section 


vpb_signature values 


Name Bit Mask Description 

VPB_VALID 0x4 4 4A 


VPB_INVALID Ox4A47 


vpbJD values 


Name 

Bit Mask 

Description 




UNREAD_ID1 

0x4A52 

Media unreadable 




UNREAD_ID2 

0x534E 

Media unreadable 




D AMAGED_I D 1 

0x0000 

Media damaged but 

recognised 

by 

IFS 

DAMAGED_ID2 

0x0000 

Media damaged but 

recognised 

by 

IFS 


vpb_falgs flag definitions 


Name 

Bit Mask 

Description 


VPBCHECK 

0x01 

a volume ID check is going 
VPB 

on for this 

VPBNEWBOOT 

0x02 

new format disk 


VPBMOUNT 

0x04 

Mount in progress 


VPBFORMATMOUNT 

0x08 

FormatMount done, not cleared 

VPBINVALID 

0x10 

volume formatted - old vpb 

invalid 

VPBINITCACHE 

0x20 

Initializing Cache Data 


VPBSETVID 

0x40 

vid set is in progress 


VPBALLOCATE 

0x80 

cluster allocation in progress 


vpb_fMisc flag definitions 


Name 

VP B_F M_WR I TEABLE 
VP B_FM_UNKNOWN 
VP B_RE MO T E_D RIVE 
VPB_FM_ALLOCSHWAIT 

VPB_FM_ALLOCEXWAIT 


Bit Mask Description 

0x01 Set if we know volume can be written 

0x02 Set if no FATs and not claimed by FSD 

0x04 set for attaches of remote drives 

0x08 Set if somebody wants alloc access so 

that they can get some disk clusters for 
this volume 

0x10 excl. access wait for somebody who wants 

to release some clusters 


VP B_F M_ I N I T C AC H E_E RRO R 0x2 0 Error initializing cache 


VPB_FM_INITCACHE_DONE 0x40 


vpbfsd 

Field Name Offset Length Type Description 

vpd_work[64] 0 40 B 


B 



vpbfsi 


Field Name 

Offset 

Length 

Type 

Description 

vpi_ID 

0 

4 

D 

32 bit unique ID of file (See 
UNREAD_IDx, D AMAGED_I Dx ) 

vpi_pDPB 

4 

4 

D 

Drive volume is in 

vpi_cbSector 

8 

2 

W 

Size of physical sector in bytes 

vpi_totsec 

A 

4 

D 

Total number of sectors on medium 

vpi_trksec 

E 

2 

W 

Sectors per track on medium 

vpi_nhead 

10 

2 

W 

Number of heads in device 

vpi_text [ 12 ] 

12 

C 

B 


vpi_pDCS 

IE 

4 

D 

device capability struc 

vpi_pVCS 

22 

4 

D 

volume characteristic struc 

vpi_drive 

26 

1 

B 

drive (0=A) 

vpi_unit 

27 

1 

B 

unit 

vpi_f lags 

28 

2 

W 

flags for memory restrictions 


vpdFATFS 


Field Name 

Offset 

Length 

Type 

Description 

vpdF AT_c 1 u s t e r_ma s k 

0 

1 

B 

Sectors/cluster - 1 

vpdFAT_cluster_shift 

1 

1 

B 

Log2 of sectors/cluster 

vpdF AT_f i r s t_F AT 

2 

2 

W 

Starting record of FATs 

vp dF AT_F AT_c o u n t 

4 

1 

B 

Number of FATs for this drive 

vp dF AT_r o o t _e n t r i e s 

5 

2 

W 

Number of directory entries 

vpdFAT_f irst_sector 

7 

4 

D 

First sector of first cluster 

vpdF AT_ma x_c luster 

B 

2 

W 

Number of clusters on drive + 1 

vpdFAT_FAT_s i ze 

D 

2 

W 

Number of records occupied by FAT 

vpdFAT_dir_sector 

F 

4 

D 

Starting record of directory 

vp dF AT_me d i a 

13 

1 

B 

Media byte (duplicate of VPB) 

vpdFAT_next_f ree 

14 

2 

W 

Cluster # of last allocated cluster 

vpdFAT_f ree_cnt 

16 

2 

W 

Count of free clusters, -1 if unknown 

vpdF AT_FATentry size 

18 

1 

B 

12 or 16 - can you guess why ??? @@ 

vpdFAT_IDsector 

19 

4 

D 

sector number of ID 

vpdFAT_minEOF 

ID 

2 

W 

minimum EOF cluster value: 12-bit -> 
FF8 , 16-bit -> FFF8 

vpdFAT_access 

IF 

2 

W 

whether rmdir XOR mov dir XOR (chdir 
mkdir OR mov file OR create) * has acce 
to volume 

vpdF AT_a c c wa i t 

21 

2 

W 

who's waiting for access 

vpdF AT_a Hoc 

23 

2 

W 

whether disk cluster alloc OR release 



vpdFAT_ea flags 


25 


flags for EA usage 


vpdFAT_eareaders 27 
vpdFAT_eawaiters 29 
vpdFAT_eahandles 2B 
vpdFAT_pEASFT 2D 
vpdFAT_pBadSector 31 
vpdFAT_pClusBitMap 35 


vpdFAT_pNextFreeBitMap 39 
vpdFAT_cNextFreeBitMap 3D 


2 

2 

2 

2 

4 

4 

4 

4 

2 


W 

W number of threads with pending reads 

W number of threads waiting to run 

W number of handles in EAOffTable 
D SFT for "EA DATA. SF" 

D Ptr for Bad sectors data 

D Ptr to free cluster bit map 

D Ptr to next free bit map position 
W Count of dwords remaining in bit map 


vpdFAT_eaflags flag definitiions 


Name Bit Mask 

eavpb_f ileopen 0x0001 
eavpb_changing 0x0002 
eavpb_dooropen 0x0004 


Description 

the EA file on this volume is open 

the EA file is changing 

the drive door has been opened 


Drive Parameter Block for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 


Pointers 

VPB field vpi_pDPB points to the associated DPB. 

Locations 

DPB segment is dynamically allocated from the kernel resident heap. 

VM Owner 

dpb (0xff96). 

Format 

DPB 


Field Name 

Offset 

Length 

Type 

Description 

dpb_drive 

+ 0 

1 

B 

Logical drive # assoc with DPB 
( A=0 , B=1 , . . .) 

dpb_unit 

+ 1 

1 

B 

Driver unit number of DPB 

dpb_dr i ve r_addr 

+2 

4 

D 

Pointer to driver 

dpb_next_dpb 

+ 6 

4 

D 

Pointer to next Drive parameter block 

dpb_cbSector 

+a 

2 

W 

sector size (for volume checking) 

dpb_f i r s t_F AT 

+c 

2 

W 

sector of 1st FAT (for ancient dev 
drivers ) 


dpb_toggle_time 


+e 


4 


D 


time of last drive toggle 


dpb_hVPB 

+ 12 

2 

W 

handle of volume currently in 

drive 

dpb_media 

+ 14 

1 

B 

most recent media that was in 

drive 

dpb_f lags 

+ 15 

1 

B 

synchronization flags (see below) 

dpb_drive_lock 

+ 16 

2 

W 

Contains pid if drive locked 

by process 

dpb_strategy2 

+ 18 

4 

D 

strategy2 addr (or 00000000) 



dpb_falgs flag definitions: 

Name Bit Mask Description 


DPBCHECK 0x10 

disk in 
for VPB 

drive is being removed/checked 

DPBNONREMOV 0x20 

1 => 

drive supports 

non-removable media 

DPBVCRAMDISK 0x40 

Ram ] 

Disk Driver 


DPB3X 

Field Name 

Offset 

Length 

Tgpe 

Description 

dpb3x_drive 

+ 0 


1 

B 

Logical drive # assoc with DPB 
( A=0 , B=1 , . . .) 

dpb3x_UNIT 

+1 


1 

B 

Driver unit number of DPB 

dpb3x_sector_size 

+ 2 


2 

W 

Size of physical sector in bytes 

dpb3x_cluster_mask 

+ 4 


1 

B 

Sectors/cluster - 1 

dpb3x_cluster_shift 

+ 5 


1 

B 

Log2 of sectors/cluster 

dpb 3 x_f i r s t_F AT 

+ 6 


2 

W 

Starting record of FATs 

dpb 3 x_F AT_c o u n t 

+ 8 


1 

B 

Number of FATs for this drive 

dpb3x_root_entries 

+ 9 


2 

W 

Number of directory entries 

dpb3x_f irst_sector 

+b 


2 

W 

First sector of first cluster 

dpb 3 x_max_c luster 

+d 


2 

W 

Number of clusters on drive + 1 

dpb 3 x_F AT_s i z e 

+ f 


1 

B 

Number of records occupied by FAT 

dpb3x_dir_sector 

+ 10 


2 

W 

Starting record of directory 

dpb 3 x_d rive r _a dd r 

+ 12 


4 

D 

Pointer to driver 

dpb 3 x_me d i a 

+ 16 


1 

B 

Media byte 

dpb3x_f irst_access 

+ 17 


1 

B 

This is initialized to -1 to force a 
media check the first time this DPB is 
used 

dpb3x_next_dpb 

+ 18 


4 

D 

Pointer to next Drive parameter block 

dpb3x_next_f ree 

+ 1 c 


2 

W 

Cluster # of last allocated cluster 

dpb3x_f ree_cnt 

+ le 


2 

W 

Count of free clusters, -1 if unknown 

DPB4X 

Field Name 

Offset 

Length 

Tgpe 

Description 



dpb4x_drive 

+ 0 

1 

B 

dpb4x_UNIT 

+1 

1 

B 

dpb4x_sector_size 

+ 2 

2 

W 

dpb4x_cluster_mask 

+ 4 

1 

B 

dpb4x_cluster_shift 

+ 5 

1 

B 

dpb 4 x_f i r s t_F AT 

+ 6 

2 

W 

dpb4x_FAT_count 

+ 8 

1 

B 

dpb4x_root_entries 

+ 9 

2 

W 

dpb4x_f irst_sector 

+b 

2 

W 

dpb4x_max_cluster 

+d 

2 

W 

dpb 4 x_F AT_s i z e 

+f 

2 

W 

dpb4x_dir_sector 

+ 11 

2 

W 

dpb4x_driver_addr 

+ 13 

4 

D 

dpb4x_media 

+ 17 

1 

B 

dpb4x_f irst_access 

+ 18 

1 

B 

dpb 4 x_next_dpb 

+ 19 

2 

D 

dpb 4 x_next_f r ee 

+ ld 

2 

W 

dpb 4 x_f r ee_cnt 

+ lf 

2 

W 


Logical drive # assoc with DPB 
(A=0,B=1, . . . ) 

Driver unit number of DPB 
Size of physical sector in bytes 
Sectors/cluster - 1 
Log2 of sectors/cluster 
Starting record of FATs 
Number of FATs for this drive 
Number of directory entries 
First sector of first cluster 
Number of clusters on drive + 1 
Number of records occupied by FAT 
Starting record of directory 
Pointer to driver 
Media byte 

This is initialized to -1 to force a 
media check the first time this DPB is 
used 

Pointer to next Drive parameter block 
Cluster # of last allocated cluster 
Count of free clusters, -1 if unknown 


Current Directory Structure for OS/2 Warp V4.0 and OS/2 
Warp V3.0 


Pointers 

Locations 

VM Owner 

Format 

cddFATFS 


SAS field SAS_file_CDS contains the selector for CDS RMP segment. 

CDSAddr locates the RMP handle which contains the selector for the CDS RMP segment. 

CDS segment is dynamically allocated from the kernel resident heap. 

cdsrmp ( 0 xff 61 ). 


Field Offset Length Type Description 

Name 

cddFAT_id 0 2 W cluster of current dir 


cdfsd 


Field Name Offset Length Type Description 

cdd_work[8] 0 8 S 


cdfsi 


Field Name 
cdi_hVPB 
cdi_end 
cdi_f lags 
cdi_text [260] 


Offset 

0 

2 

4 

5 


Length Type Description 

2 W hVPB for the drive mapped to this CDS 

2 W End of assignment 

1 B fs independent flags (see below) 

104 A 


curdir 


Offset Length Type Description 


Field Name 

cd_handle 0 2 W lookup key for this CDS 

cd_pid 2 2 W PID part of lockup key for handles 1-26 

cd_refcnt 4 2 W reference count CDS ' s 

cd_flags 6 1 B See below for definitions 

cd_devptr 7 4 D local pointer to DPB or net device 

cd_OwnerFSC B 2 W Owner FSC.Offst 

cd_fsd D 8 S File system dependent section 

cd_fsi 15 10A S File system independent section 


cdi_hVPB 15 2 W 

cdi_end 17 2 W 

cdi_flags 19 1 B 

cdi_text [2 60 ] 1A 104 B 

HE 1 B 


hVPB for the drive mapped to this CDS 
End of assignment 
fs independent flags (see below) 


cd_flags flag definitions 


Name 

Bit Mask 

Description 




CD_ 

_ISNET 

0x80 

This 

CDS 

is 

for a 

remote 

drive 

CD_ 

_INUSE 

0x40 

This 

CDS 

is 

in use 


CD_ 

_SPLICE 

0x20 

This 

CDS 

is 

for a 

JOINed 

drive 

CD_ 

_JOIN 

CD_SPLICE 

This 

CDS 

is 

for a 

JOINed 

drive 

CD_ 

_LOCAL 

0x10 

This 

CDS 

is 

for a 

SUBSTed drive 

CD_ 

_ISPSEUDOCHAR 

0x08 

This 

CDS 

for 

a pseudo-char dev 

CD_ 

_ISUNC 

0x04 

This 

CDS 

for 

a UNC 

: name 




cdi_flags flag definitions 


Name Bit Mask 

CD I_IS VALID 0x80 

CDI_ISROOT 0x40 

CDI_MEDIASWAPPED 0x20 


Description 

This CDS contains a valid cd_fsd 
This CDS is for a root (no cdfsd) 
This CDS may not be valid (forces 


File System Buffer for OS/2 Warp V4.0 and OS/2 Warp V3.0 


Pointers 

SAS field SAS_file_Buffers contains the selector for the file system buffer segment. 
GDT_Buffers locates the GDT descriptor for the BUFSEG segment. 


Locations 

VM Owner 

Format 

BUFSEG 

BUFSEG segment is dynamically allocated from the kernel resident heap. 

fsbuf (0xff93). 

Field Name 

Offset 

Length 

Type 

Description 

bs_MRUHead 

+ 0 

2 

w 

Head of MRU buffer list (LRU tail) 

bs_MRUTail 

+ 2 

2 

w 

Tail of MRU buffer list (LRU head) 

bs_FreeHead 

+ 4 

2 

w 

Head of Free buffer list 

bs_Handle 

+ 6 

2 

w 

Handle for virtual memory manager 

bs_nBuf fers 

+ 8 

2 

w 

Number of buffers in segment 

bs_buf f size 

+a 

2 

w 

Size of buf fer+header , in bytes. 

bs_seglimit 

+c 

2 

w 

Limit for entire buffer segment. 

bs_pStats 

+e 

2 

w 

Offset of statistics block (for PROFILE) 

bs_of fRemMed 

+ 10 

2 

w 

Minimum "legal" offset of buffer for 
removable media 

bs_MaxSec 

+ 12 

2 

w 

Maximum sector size for block device 
drivers 

bs_BigBufBase 

+ 14 

2 

w 

Base of big buffers pool 

bs_BigBufMap 

+ 16 

2 

w 

Big buffers usage bit map (bitO - BufO) 

bs_physBuf Seg 

+ 18 

4 

D 

Buffer segment Physical Address 


BUFFINFO 


Field Name 

Offset 

Length 

Type 

Description 

buf_next 

+ 0 

2 

W 

Pointer to next buffer in list (-1 = 
end) 

buf_prev 

+2 

2 

W 

Pointer to previous buffer in list (-1 : 
end) 

buf_f reeLink 

+ 4 

2 

w 

Pointer to next free buffer (-1 = end) 

buf_hVPB 

+ 6 

1 

w 

serial number of volume 

buf_sector 

+ 8 

4 

D 

Sector number of buffer 

buf_wrtcnt 

+c 

1 

B 

For FAT sectors, # times sector written 
out 

buf_wrtcntinc 

+d 

2 

W 

For FAT sectors, # sectors between each 
write 

buf_f lags 

+f 

1 

B 

Flags 

buf_tid 

+ 10 

2 

W 

thread ID of buffer owner 

buf_ref cnt 

+ 12 

2 

W 

number of threads using buffer for read 

buf_f ill 

+ 14 

2 

W 

random debugging information 

buf_pad 

+ 16 

2 

W 

Force dword alignment. 


buf_falgs flag definitions: 

Name Bit Mask Description 


BUF_ 

_DIRTY 

0x80 

Bit 

7 = 

1 

if 

buffer 

dirty 

BUF_ 

.VISIT 

0x40 

Bit 

6 = 

1 

if 

buffer 

seen in search 

BUF_ 

_WANT 

0x20 

Bit 

5 = 

1 

if 

process 

; waiting for buffer 

BUF_ 

_BUSY 

0x10 

Bit 

4 = 

1 

if 

in use 

by 

process 

BUF_ 

_ISDATA 

0x08 

Bit 

3 = 

1 

if 

buffer 

is 

DATA 

BUF_ 

_ISDIR 

0x04 

Bit 

2 = 

1 

if 

buffer 

is 

DIR 

BUF_ 

_ISFAT 

0x02 

Bit 

1 = 

1 

if 

buffer 

is 

FAT 

BUF_ 

_ATTEMPTING_READ 

0x01 

Bit 

0 = 

1 

if 

buffer 

is 

in swapper pool 


Named Pipe Structures for OS/2 Warp V4.0 and OS/2 Warp 
V3.0 

Pointers 

SFT field sf_fsd points to the associated NP structure. 

NmpRmpHand locates the RMP handle that contains the selector for the NPN RMP segment. 

NPN field npnjink points to the double linked list of NP structures that are instances of the named pipe. 
Instances of named pipes are double-lined by np_flink and npblink. 



NP fields np_selector1 and np_selector2 point to associated NPB structures. 


Locations 

The NPN RMP is allocated from the kernel swappable heap. 

The NP is allocated from the system arena. 

The NPB is allocated from the kernel resident heap. 

VM Owner 

NP owner id is npipenp (0xff31). 

NPN owner id is npipenpn (0xff30). 

NPB owner id is npipenbuf (0xff9f). 

Format 

There are four important data structures associated with named pipes: the SFT corresponding to an open named pipe, a pair of kernel 
internal data structures describing the pipe and one or two allocated memory segments which contain the data buffers for the pipe. 

The parts of the SFT specific to named pipes are: 

sf_f lags SF_NMPIPE and SF_PIPE set 

sf_np pointer to pipe info. 

sf_pipmod mode of pipe, per-sft internal state bits 

Where : 

sf_np is defined to be sf_fsd+0, the pointer to np structure 

sf_pipmod is defined to be sf_fsd+4, the mode of pipe, plus internal state 

NP_Named Pipe data structure 

The internal data structure for an instance of a pipe. One of these structures is allocated for each open instance of a particular named pipe. 

Allocated NP structures are placed on two lists. The first is headed by ActiveNPList, with list pointer np_next linking together all currently 
active NP structures. 

The second list is headed by the NPN structure defined below and is doubly-linked by the np_flink and np_blink pointers. This list is used to 
iterate over all instances of a particular pipe name. 


Field Name 

Offset Length 

Type 

Description 

np_state 

+ 0 

1 

B 

state of pipe 

np_ref cnt 

+1 

1 

B 

SFT reference count for pipe (1 or 2) 

np_next 

+ 2 

2 

W 

pointer to next in active list 

np_f link 

+ 4 

2 

W 

pointer to next instance of pipe 

np_blink 

+ 6 

2 

W 

pointer to previous instance of pipe 

np_namkey 

+ 8 

2 

W 

RMP key value for npn structure 

np_scnt 

+a 

1 

B 

count of servers (max. 1) 

np_ccnt 

+b 

1 

B 

count of clients (max. 1) 

np_selectorl 

+c 

2 

W 

selector for outgoing data buffer 

np_selector2 

+e 

2 

W 

selector for incoming data buffer 

np_pipmod 

+ 10 

2 

W 

pipe mode specified at creation time 

np_f lags 

+ 12 

2 

W 

pipe flags 

np_ssft 

+ 14 

4 

D 

back pointer to server SFT 


np_csft 

+ 18 

4 

D 

back pointer to client SFT 

np_timeo 

+ lc 

4 

D 

default timeout for DosWaitNmPipe 

np_ssem 

+20 

4 

D 

server end system semaphore 

np_ssemkey 

+24 

2 

W 

server's semaphore key 

np_csem 

+26 

4 

D 

client end system semaphore 

np_csemkey 

+2 a 

2 

W 

client's semaphore key 

NPN Named Pice Name data structure 



The following structure contains the common name for the multiple instances of a pipe. Its key value is used as the ProcBlock key 
waiters on the pipe. The key value is also used as an RMP key to look up the name record from the NP structure. 

Field Name 

Offset 

Length 

Type 

Description 

npn_link 

+ 0 

4 

D 

pointer to first instance 

npn_key 

+4 

2 

W 

unique serial number of name 

npn_len 

+ 6 

2 

W 

total length of structure 

npn_name 

+ 8 

254 

A 

name of pipe, null terminated 

NPB Named Pice Buffer data structure 



The following variables are used to control the access to a pipe buffer and are part of the allocated buffer for the pipe. In the case i 
duplex pipe, two independent data buffers are allocated. Only one buffer will be allocated for a simplex pipe. 

Field Name 

Offset 

Length 

Type 

Description 

npb_selector 

+ 0 

2 

W 

selector of buffer 

npb_f irst 

+2 

2 

W 

base of buffer 

npb_in 

+4 

2 

W 

next free byte in buffer 

npb_out 

+ 6 

2 

W 

next byte of data in buffer 

npb_last 

+ 8 

2 

W 

end+1 of buffer 

npb_rdlck 

+a 

2 

W 

read lock sem. 

npb_wtlck 

+c 

2 

W 

write lock sem. 

npb_rdsem 

+e 

2 

W 

read sync sem. 

npb_wtsem 

+ 10 

2 

W 

write sync sem. 

npb_rdcnt 

+ 12 

1 

B 

count of readers of buffer 

npb_wtcnt 

+ 13 

1 

B 

count of writers to buffer 

npb_data 

+ 14 

2 

W 

size of data left in pipe 


np_state allowable values for named pipe state 

Internally, byte stream mode pipes store just a collection of bytes in the data buffer. Message stream mode pipes have individual messages 
preceeded by a word which indicates the size of the message. 

Named pipes may be in one of several states depending on the actions that have been taken on it by the server end and client end. The 
following state/action table summarizes the valid state transitions: 


Current state 


Action 


Next state 



<none> 

server 

MakeNmPipe 

DISCONNECTED 

DISCONNECTED 

server 

connect 

LISTENING 

LISTENING 

client 

open 

CONNECTED 

CONNECTED 

server 

disconn 

DISCONNECTED 

CONNECTED 

client 

close 

CLOSING 

CLOSING 

server 

disconn 

DISCONNECTED 

CONNECTED 

server 

close 

CLOSING 

<any other> 

server 

close 

<pipe deallocated> 


A special internal state, LISTEN2 is used when a client open is in progress (since some operations may block). This is treated the same as 
the LISTENING state except that a new open or wait will not recognize it as an available pipe. 

If a server disconnects his end of the pipe, the client end will enter a special state in which any future operations (except close) on the file 
descriptor associated with the pipe will return an error. 


Name Bit Mask 

NP_DISCONNECTED 1 

NP_LISTENING 2 

NP_CONNECTED 3 

NP_CLOSING 4 

NP_LISTEN2 0x12 


Description 

after pipe creation or Disconnect 

after DosNmPipeConnect 

after Client open 

after Client close 

internal; client open in progress 


nppipmod, sf_pipmod bit mask values: 


Name 

Bit Mask 

NP_NBLK 

0x8000 

NP_NBLKR 

0x8000 

NP_NBLKW 

0x8000 

NP_SERVER 

0x4000 

NP_WMESG 

0x0400 

NP_RMESG 

0x0100 

NP_TIMOUT 

0x3800 


Description 

non-blocking read/write 
non-blocking read 
non-blocking write 
set if server end 
write messages 
read as messages 

Timeout np_sem_blk & np_sem_wait 


Anonymous Pipe Structures for OS/2 Warp V4.0 and OS/2 
Warp V3.0 

Pointers 

SFT field sfi_hVPB contains the selector that maps IOBLOCK structure. 

Locations 

The pipe IOBLOCK is allocated from the kernel heaps. 

VM Owner 

pipe (OxffaO). 


Format 


IOBLOCK Anonymous Pipe data structure 


A 'pipe' is a connection between (among) file handles (JFN's). Data written to the 'write end' of the pipe are made available for reading on 
the 'read end'. The $Pipe system call creates a pipe and returns two file handles, one for the read end and one for the write end. These 
handles are manipulated in the same way as normal file handles; they may be 'dup'ed and are inherited in the same way. Data are written 
into a pipe via a 'write' system call on the write end of the pipe. Likewise, data are read from the pipe via a 'read' call on the read end. 

Data that are written to a pipe are captured in a circular buffer. The size of the buffer is specified when the pipe is created; if no size is 
specified, a default size is used. 

The circular buffer is described by an 'ioblock'. The ioblock is the buffer's header; the circular buffer proper follows the ioblock in a heap 
memory object (mapped by a GDT selector) allocated when the pipe is created. The ioblock contains all of the per-pipe information, such as 
reader, writer, and reference counts, and also holds the pointers into the circular buffer proper. 

The selector that points to the circular buffer is stored in the SFT, at sfi_hVPB. 

When the in and out pointers are equal, the circular buffer is empty. When the in pointer trails the out pointer by 1 , the buffer is full. Thus, a 
51 2 byte buffer can hold only 51 1 bytes; one byte is lost so that full and empty conditions can be distinguished. So that the user can put 51 2 
bytes in a pipe that they created with a size of 512, we allow for this byte lost when allocating the segment. 


Field Name 

Offset 

Length 

Type 

Description 

io_inprogcnt 

+ 0 

1 

B 

count of read/wrts in progress 

io_ref cnt 

+ 1 

1 

B 

count of references 

io_rdrcnt 

+2 

1 

B 

count of readers 

io_wtrcnt 

+3 

1 

B 

count of writers 

io_selector 

+ 4 

2 

W 

buffer selector 

io_f irst 

+ 6 

2 

W 

ptr to base of circular buffer 

io_in 

+ 8 

2 

W 

ptr to next free byte 

io_out 

+a 

2 

W 

ptr to next byte of data 

io_last 

+c 

2 

W 

ptr to end+1 of buffer 

io_rdlksem 

+e 

2 

W 

read lock semaphore 

io_wtlksem 

+ 10 

2 

W 

write lock semaphore 

io_rdsem 

+ 12 

2 

W 

read sync semaphore 

io_wtsem 

+ 14 

2 

W 

write sync semaphore 


I/O System Control Block Reference 


The following control blocks are described in this section: 
Physical Device Driver Pleader (DEV) 

PDD IRQ Information Blocks (DIRQ) 

Virtual Device Driver Entry Point Structures 
Device Driver Request Packets (REQ) 


BIOS Parameter Block (BPB) 

An overview of the I/O System Control Blocks follows: 


I/O System Control Block Diagrams 


The following diagrams illustrate the relationships between various I/O system control blocks 
Physical Device Driver Communication 
Physical Device Driver IRQ Sharing 
Virtual Device Driver Communication 


Physical Device Driver Communication 


Physical Device Driver Communication 


SAS 

SAS device driver section 


PDD1 PDD2 PDD3 





PDDEP 

I 


Registered Marne 


PDDEP 


H- 


Registered Marne 



_ppddephead 


Physical Device Driver IRQ Sharing 



Physical Device Driver IRQ Sharing 


IRQI array 



PDDi 


Interrupt 
entry pt 


PDD2 


Interrupt 
entry pt 




Virtual Device Driver Communication 



Virtual Device Driver Communication 


_phdlVddHead 



VDDs registering same name 


VDDPROC VDD 



VDDEP 


■> 


Registered Name 


MTE 

■>i 


Physical Device Driver Header (DEV) for OS/2 Warp V4.0 and 
OS/2 Warp V3.0 


Pointers 

Locations 
VM Owner 
Format 


DPB field dpb_driver_addr points to the associated Physical Device Driver Header. 
SFT field sf_devptr points to the associated Physical Device Driver Header. 

Built at the beginning of the first module segment of the device driver. 

ddl (0xff50) to dd16 (0xff5f). 


Field Name 

Offset 

Length Type Description 

SDevNext 

+ 0 

4 


D 

Pointer to next device header 

SDevAtt 

+ 4 

2 


W 

Attributes of the device 

SDevStrat 

+ 6 

2 


W 

Strategy entry point 

SDevInt 

+ 8 

2 


W 

IDC entry point 

SDevName 

+a 

8 


A 

name (block uses only 1st byte) 

SDevProtCS 

+ 12 

2 


W 

Protect-mode CS of strategy entry 

SDevProtDS 

+ 14 

2 


W 

Protect-mode DS 

SDevRealCS 

+ 16 

2 


W 

Real-mode CS of strategy entry pt 

SDevRealDS 

+ 18 

2 


W 

Real-mode DS 

SDevCaps 

+20 

4 


D 

bit map of DD /MM restrictions 

SDevCaps flag definitions 





Name 

Bit Mask 

Description 

DEV_IOCTL2 

0x0001 


DD 

can 

handle dev ioctl2 

DEV_1 6MB 

0x0002 


DD 

can 

handle phys . addresses >16MB 

DEV_PARALLEL 

0x0004 


DD 

handles parallel port 

D E V_AD AP T E R_D D 

0x0008 


DD 

supports Adapter Dev Driver Intf 

DEV_INITCOMPLETE 

0x0010 


DD 

can 

handle CMDInitComplete 


Device Driver Type defininitions 

Name Bit Mask Description 


DEV_CIN 


0x0001 


025 Device is console in 


DEV_COUT 0x0002 
DEV_NULL 0x0004 
DEV_CLOCK 0x0008 
DEV_SPEC 0x0010 
DEV_ADD_ON 0x0020 
DEV_GIOCTL 0x0040 
DEV_FCNLEV 0x0380 
DEV_30 0x0800 

DEV_SHARE 0x1000 
DEV_NON_IBM 0x2000 
DEV_IOCTL 0x4000 
D E V_C HAR_D E V 0x8000 


125 Device is console out 
225 Device is the Null device 
325 Device is the clock device 

4 2 Devices can support INT 29h 

5 Device is add-on driver (BWS) 

6 3 Device supports generic ioctl 
9-7 5 Device function level 

11 2 5 Accepts Open/Close/Removable 
Media 

12 Device wants FS sharing checking 

13 2 5 Device is a non IBM device. 

14 2 Device accepts IOCTL request 

15 2 5 Device is a character device 


Level definitions for devices 


Name Bit Mask 

DEVLEV_0 0x0000 
DEVLEV_1 0x0080 
DEVLEV_2 0x0100 
DEVLEV_3 0x0180 


Description 

DOS 3.0 and before 

DOS 5.0 

OS/2 vl.2 (new gen ioctl iface) 

OS/2 v2 . 0 (support of memory above 16MB) 


PDD IRQ Information Blocks (DIRQ) for OS/2 Warp V4.0 and 
OS/2 Warp V3.0 


Pointers 

Locations 


VM Owners 


Format 

IRQI 


IRQI field irqi_pdirqHead points to the head of a chain of associated DIRQs. 

airqi locates the table of IRQI entries. 

DIRQs are allocated dynamically from the kernel resident heap. 

The IRQI array is a static part of the OS2KRNL load module. 

IRQI owner id: os2krnl (Oxffaa). 

DIRQ owner id: intdirq (0xff78). 


Field Name 


Offset Length Type Description 


irqi_pdirqHead 

+ 0 

4 

D 

irqi_usIRQNum 

+ 4 

2 

W 

irqi_usFlags 

+ 6 

2 

W 


irqi_usFlags flag definitions 


Head of shared DD chain (0 = not set) 
IRQ number 
IRQ Flags 


Name 


Bit Mask Description 



0x0003 

reserved 

irqf_fVDM 

0x0004 

If set, this IRQ is a candidate for 
routing to a VDM, if it is not claimed 
by a PDD 

irqf_fNPX 

0x0008 

If set, the IRQ is the NPX interrupt 
level 


irqf_f Sharing 0x0010 If set, the IRQ is sharable. If clear 

the IRQ can not be shared by DD . 

irqf_fSys 0x0020 If set, the IRQ is owned by the system 

and the handler can not be changed or 

removed by a device driver. Set 
initially for the slave, IRQ 2. 


irqf_fShared 0x0040 If set, the IRQ can be shared by more 

than 1 DD . This bit reflects the shared 
parameter of the first dh_SetIRQ issued 
for this level. 


DIRQ 


Field Name 

Offset 

Length 

Type 

Description 

dirq_pdirqLink 

+ 0 

4 

D 

Next DIRQ structure in 

dirq_f 1 6pf n 

+ 4 

4 

D 

DD ' s interrupt handler 

dirq_usDS 

+ 8 

2 

W 

DD ' s data segment 

dirq_usIRQNum 

+a 

2 

W 

IRQ number 

dirq_pdirqFreeList 

+c 

4 

D 

list of unset DIRQs 


Virtual Device Driver Entry Point Structures 


Pointers 

_pvddepHead points to the head of a chain of VDDEP structres. One is allocated for each VDD the registers an 
either or both a VDD/VDD or VDD/OS2 entry point. There entry points are used respectively when either a 
VDHRequestVDD/VDHOpenVDD or DosRequestVDD/DosOpenVDD call is made. 

VDDEP field vddep_vddp points to the associated chain of VDDPROC structures. One is allocated for each VDD 
the registers entry points under the same name. 

_phdlVddHead points to the head of a chain of HDLVDD structures. One is allocated for each open VDD. The 
handle returned is the address of the associated HDLVDD. 



_ppddephead points to the head of a chain of PDDEP structures. One is allocated for each Physical Device Driver 
that registers an entry point for VDD/PDD communication. The entry point is registered using DevHlp_RegisterPDD, 
and accessed using VDHRequestPDD. 


Locations 
VM Owner 


Format 

VDDEP 


VDDEPs, VDDPROCs, HDLVDDs and PDDEPs are allocated dynamically from the kernel resident heap. 

VDDEP owner id: vddep (0xffd2). 

VDDPROC owner id: vddproc (Oxffdb). 

HDLVDD owner id: vddlr (0xffd7). 

PDDEP owner id: vddpddep (Oxffda). 


Field Name 

Offset Length 

Type 

vddep_szVDD 

+ 0 9 

A 

vddep_vddp 

+ 9 4 

D 

vddep_hmte 

+d 4 

D 

vddep_pvddep 

+ 11 4 

D 


VDDPROC 


Field Name 

Offset Length 

Type 

vddproc_pfnvdd 

+ 0 4 

D 

vddproc_pfnos2 

+ 4 4 

D 

pvddproc 

+ 4 4 

D 

HDLVDD 

Field Name 

Offset Length 

Type 

hdlvdd_pvddproc 

+ 0 4 

D 

hdlvdd 

+ 4 4 

D 


PDDEP 


Field Name 

Offset Length 

Type 

pddep_szPDD 

+ 0 9 

A 

pddep_fpfn 

+ 9 4 

D 

pddep_ppddep 

+d 4 

D 


Description 

VDD Name 

VDD entry points (pointer to VDDPROC) 
VDD hmte for deregistering if VDD fails 
Next VDD (pointer to next VDDEP) 


Description 

Entry point for VDD/VDD comm. 

Entry point for OS2/VDD comm. 

Entry points registered with same name 


Description 

VDD routine to be called (pointer to 
VDDPROC) 

Pointer to next VDD handle; NULL if no 
more 


Description 

PDD name 

Entry point routine 
Next entry point (PDDEP) 


Device Driver (Strategy 1) Request Packet (REQ) for OS/2 
Warp V4.0 and OS/2 Warp V3.0 


Pointers 

TCB field TCBReqPkt points to the Request Packet pre-allocated to a thread. 

Locations 

Allocated from the Request Packet Pool in the System Arena. 

VM Owner 

reqpktl (0xff40). 

Format 


Field Name 

Offset 

Length 

Type 

Packet 

+ 0 

20 

S 

PktLen 

+ 0 

1 

B 

PktUnit 

+ 1 

1 

B 

PktCmd 

+2 

1 

B 

PktStatus 

+3 

2 

W 

PktFlag 

+5 

1 

B 


+ 6 

3 

B 

PktDOSLink 

+5 

4 

D 

PktDevLink 

+ 9 

4 

D 

PktData 

+d 

18 

S 


+d 

10 

S 

GlOCategory 

+d 

1 

B 

GIOFunction 

+e 

1 

B 

GlOParaPack 

+f 

4 

D 

GIODataPack 

+ 13 

4 

D 

GIOSFN 

+ 17 

2 

W 

GIOParaLen 

+ 19 

2 

w 

GIODataLen 

+lb 

2 

W 


+d 

c 

s 

InitcUnit 

+d 

1 

B 

InitpEnd 

+e 

4 

D 

InitDevHlp 

+e 

4 

D 

InitEcode 

+e 

2 

W 

InitEdata 

+ 10 

2 

w 

InitParms 

+ 12 

4 

D 


Description 

Device Driver Request Packet 
length in bytes of packet 
subunit number of block device 
command code 
status word 

disk driver internal flags 
reserved 

device multiple-request link 
data pertaining to specific packet 

Generic IOCTL 
Category Code 
Function code 

pointer to parameter packet 
pointer to data packet 
(used by Spooler?) 
length of parameter packet 
length of data packet 

INIT Command for Base DDs (0 and 27) 
number of units returned 
pointer to free mem after dev 

address of Device Helper router 

size of code segment 
size of data segment 
pointer parameters 


InitpBPB 

+ 12 

4 

D 

pointer to BPBs 

Initdrv 

+ 16 

1 

B 

drive no. assigned to unit 0 


+ 17 

1 

B 

reserved 

InitSysiData 
(for resident 
drivers only) 

+ 18 

1 

B 

Syslnit's DOSALIAS selector 


+d 

d 

S 

query for extended capability command 
( Oxld) 


+d 

3 

B 

reserved 

DCS_Addr 

+ 10 

4 

W 

16 

VCS_Addr 

+ 14 

4 

W 

16 


+d 

6 

B 

Media Check command 1 

MedChkmedia 

+d 

1 

B 

last media byte seen 

MedChkf laga 

+e 

1 

B 

-l=change 0=dont know l=no change 

MedChkpVIDa 

+ f 

4 

D 

pointer to VID 


+d 

9 

S 

build BPB command 2 

BldBPBmedia 

+d 

1 

B 

media byte 

BldBPBbuf fer 

+e 

4 

D 

scratch buffer 


+d 

f 

S 

Read/Write 10 commands 3, 4, 8, 9, 12, 
24, 25, 26 

IOmedia 

+d 

1 

B 

media byte 

IOpData 

+e 

4 

D 

transfer address 

IOcount 

+ 12 

2 

W 

count of bytes/sectors 

IOstart 

+ 14 

2 

W 

starting sector (block) 

IOPhysRBA 

+ 14 

4 

D 

physical starting sector 

IOSFNsRBA 

+ 18 

2 

W 

for device only 

PktAdvise 

+ la 

2 

W 

for >= vl2 only 


+d 

4 

S 

Device Open/Close commands 13 and 14 

OCSFN 

+d 

2 

W 

sfn of open instance for virtualization 


+d 

1 

s 

Start/Stop console commands (98, 99) 

CStpSKG 

+d 

1 

B 

Screen/Keyboard number 


+d 

6 

S 

De-install driver command 20 

DINEndLocn 

+d 

4 

D 


DINLengthn 

+ 11 

2 

W 



PktStatus word masks 



Name 

Bit Mask 

Description 

STERR 

0x8000 

Bit 15 

- Error 

STINTER 

0x0400 

Bit 10 

- Interim 

STBUI 

0x0200 

Bit 9 

- Busy 

STDON 

0x0100 

Bit 8 

- Done 

STECODE 

OxOOff 

Error 

code 

WRECODE 

0 




PktFlag flags 


Name 

Flag 

value 

Description 


fPktIntl3RP 

0x01 

Int 13 Request 

Packet 

f Pkt Cal lOut Done 

0x02 

Int 13 Callout 

completed 

fPktDisklOTchd 

0x04 

Disk_IO has touched this packet 

STDON 

0x0100 

Bit 8 - Done 


STECODE 

OxOOff 

Error code 


WRECODE 

0 




See Device Driver Strategy Commands for a cross-reference of PktCmd command codes. 


BIOS Parameter Block (BPB) for OS/2 Warp V4.0 and OS/2 
Warp V3.0 


Pointers 

I/O Request Packet fields InitpBPB and BldBPBbuffer point to the BPB structure. 

Locations 

Allocated from the System Arena. 

VM Owner 

Non-specific. 

Format 

BPB 


Field Name Offset Length Type Description 


BPSECSZ 

0 

2 

w 

Size in bytes of physical sector 

BPCLUS 

2 

1 

B 

Sectors/Alloc unit 

BPRES 

3 

2 

W 

Number 

of 

reserved sectors 

BPFTCNT 

5 

1 

B 

Number 

of 

FATs 

BPRDCNT 

6 

2 

W 

Number 

of 

directory entries 


BPSCCNT 

8 

2 

w 

BPMEDIA 

a 

1 

B 

BPFTSEC 

b 

2 

W 

BPBSecPerTrack 

d 

2 

W 

BPBcHeads 

f 

2 

W 

BPBcSecHidden 

11 

2 

W 

BPBcSecHiddenH 

13 

2 

W 

BPBcSecTotal 

15 

4 

D 

PHYDRV 

19 

1 

B 

CURHD 

la 

1 

B 


Total number of sectors 
Media descriptor byte 

Number of sectors taken up by one FAT 
sectors per track 
number of heads 

number of hidden sectors before the 
reserved sectors 

High word of hidden sectors 

Big total sectors (if BPSCCNT = 0) 

PHYSICAL DRIVE NUMBER (0 OR 80H) 

Unitialized 


Reference Tables 


The following reference information is tabulated in this section: 
OS/2 System Error Codes 
OS/2 System Exception Codes 
Trap Screen Reference 
Standard GDT Assignments 
Standard LDT Assignments 
VM System Owner Ids 
DevHIp Function Cross-reference 
Device Driver Strategy Commands 
System Ordinal Cross-reference 
OS/2 Fix Pack to Build Level Cross-reference 


System Error Codes 


OS/2 System Error Codes 

Code Description 

0 NO ERROR 

1 INVALID FUNCTION 

2 FILE NOT FOUND 


3 


PATH NOT FOUND 


4 TOO MANY OPEN FILES 

5 ACCESS DENIED 

6 INVALID HANDLE 

7 ARENA TRASHED 

8 NOT ENOUGH MEMORY 

9 INVALID BLOCK 

10 BAD ENVIRONMENT 

1 1 BAD FORMAT 

12 INVALID ACCESS 

13 INVALID DATA 

15 INVALID DRIVE 

16 CURRENT DIRECTORY 

17 NOT SAME DEVICE 

18 NO MORE FILES 

19 WRITE PROTECT 

20 BAD UNIT 

21 NOT READY 

22 BAD COMMAND 

23 CRC 

24 BAD LENGTH 

25 SEEK 

26 NOT DOS DISK 

27 SECTOR NOT FOUND 

28 OUT OF PAPER 

29 WRITE FAULT 

30 READ FAULT 

31 GEN FAILURE 

32 SHARING VIOLATION 

33 LOCK VIOLATION 

34 WRONG DISK 

35 FCB UNAVAILABLE 

36 SHARING BUFFER EXCEEDED 

37 CODE PAGE MISMATCHED 

38 HANDLE EOF 

39 HANDLE DISK FULL 

4 0 BAD COMMAND 

41 CRC 

42 BAD LENGTH 

43 SEEK 


44 


NOT DOS DISK 



45 SECTOR NOT FOUND 

46 OUT OF PAPER 

47 WRITE FAULT 

48 READ FAULT 

49 GEN FAILURE 

50 NOT SUPPORTED 

51 REM NOT LIST 

52 DUP NAME 

53 BAD NETPATH 

54 NETWORK BUSY 

55 DEV NOT EXIST 

56 TOO MANY CMDS 

57 ADAP HDW ERR 

58 BAD NET RESP 

59 UNEXP NET ERR 

60 BAD REM ADAP 

61 PRINTQ FULL 

62 NO SPOOL SPACE 

63 PRINT CANCELLED 

64 NETNAME DELETED 

65 NETWORK ACCESS DENIED 

66 BAD DEV TYPE 

67 BAD NET NAME 

68 TOO MANY NAMES 

69 TOO MANY SESS 

70 SHARING PAUSED 

71 REQ NOT ACCEP 

72 REDIR PAUSED 

73 SBCS ATT WRITE PROT 

74 SBCS GENERAL FAILURE 

75 XGA OUT MEMORY 

80 FILE EXISTS 

81 DUP FCB 

82 CANNOT MAKE 

83 FAIL 124 

84 OUT OF STRUCTURES 

85 ALREADY ASSIGNED 

86 INVALID PASSWORD 

87 INVALID PARAMETER 



NET WRITE FAULT 


89 NO PROC SLOTS 

90 NOT FROZEN 

NOT SYS COMP NOT LOADED 

FROZEN 

91 ERR TSTOVFL 

92 ERR TSTDUP 

93 NO ITEMS 

95 INTERRUPT 

96 INVALID DTA 

99 DEVICE IN USE 

100 TOO MANY SEMAPHORES 

101 EXCL SEM ALREADY OWNED 

102 SEM IS SET 

103 TOO MANY SEM REQUESTS 

104 INVALID AT INTERRUPT TIME 

105 SEM OWNER DIED 

106 SEM USER LIMIT 

107 DISK CHANGE 

108 DRIVE LOCKED 

109 BROKEN PIPE 

110 OPEN FAILED 

111 BUFFER OVERFLOW 

112 DISK FULL 

113 NO MORE SEARCH HANDLES 

114 INVALID TARGET HANDLE 

115 PROTECTION VIOLATION 

116 VIOKBD REQUEST 

117 INVALID CATEGORY 

118 INVALID VERIFY SWITCH 

119 BAD DRIVER LEVEL 

120 CALL NOT IMPLEMENTED 

121 SEM TIMEOUT 

122 INSUFFICIENT BUFFER 

123 INVALID NAME 

123 HPFS INVALID VOLUME CHAR 

124 INVALID LEVEL 

125 NO VOLUME LABEL 

126 MOD NOT FOUND 

127 PROC NOT FOUND 



128 

129 

130 

131 

132 

133 

134 

135 

136 

137 

138 

139 

140 

141 

142 

143 

144 

145 

146 

147 

148 

149 

150 

151 

152 

153 

154 

154 

155 

156 

157 

158 

159 

160 
161 
162 

163 

164 

165 


WAIT NO CHILDREN 

CHILD NOT COMPLETE 

DIRECT ACCESS HANDLE 

NEGATIVE SEEK 

SEEK ON DEVICE 

IS JOIN TARGET 

IS JOINED 

IS SUBSTED 

NOT JOINED 

NOT SUBSTED 

JOIN TO JOIN 

SUBST TO SUBST 

JOIN TO SUBST 

SUBST TO JOIN 

BUSY DRIVE 

SAME DRIVE 

DIR NOT ROOT 

DIR NOT EMPTY 

IS SUBST PATH 

IS JOIN PATH 

PATH BUSY 

IS SUBST TARGET 

SYSTEM TRACE 

INVALID EVENT COUNT 

TOO MANY MUXWAITERS 

INVALID LIST FORMAT 

LABEL TOO LONG 

HPFS VOL LABEL LONG 

TOO MANY TCBS 

SIGNAL REFUSED 

DISCARDED 

NOT LOCKED 

BAD THREAD ID ADDR 

BAD ARGUMENTS 

BAD PATHNAME 

SIGNAL PENDING 

UNCERTAIN MEDIA 

MAX THRDS REACHED 

MONITORS NOT SUPPORTED 


UNC DRIVER NOT INSTALLED 



167 


LOCK FAILED 


168 SWAPIO FAILED 

169 SWAPIN FAILED 

170 BUSY 

171 INT TOO LONG 

173 CANCEL VIOLATION 

174 ATOMIC LOCK NOT SUPPORTED 

175 READ LOCKS NOT SUPPORTED 

180 INVALID SEGMENT NUMBER 

181 INVALID CALLGATE 

182 INVALID ORDINAL 

183 ALREADY EXISTS 

184 NO CHILD PROCESS 

185 CHILD ALIVE NOWAIT 

186 INVALID FLAG NUMBER 

187 SEM NOT FOUND 

188 INVALID STARTING CODESEG 

189 INVALID STACKSEG 

190 INVALID MODULETYPE 

191 INVALID EXE SIGNATURE 

192 EXE MARKED INVALID 

193 BAD EXE FORMAT 

194 ITERATED DATA EXCEEDS 64k 

195 INVALID MINALLOCS I ZE 

196 DYNLINK FROM INVALID RING 

197 IOPL NOT ENABLED 

198 INVALID SEGDPL 

199 AUTODATASEG EXCEEDS 64k 

200 RING2SEG MUST BE MOVABLE 

201 RELOC CHAIN XEEDS SEGLIM 

202 INFLOOP IN RELOC CHAIN 

203 ENVVAR NOT FOUND 

204 NOT CURRENT CTRY 

205 NO SIGNAL SENT 

206 FILENAME EXCED RANGE 

207 RING2 STACK IN USE 

208 META EXPANSION TOO LONG 

209 INVALID SIGNAL NUMBER 


210 


THREAD 1 INACTIVE 



211 INFO NOT AVAIL 

212 LOCKED 

213 BAD DYNALINK 

214 TOO MANY MODULES 

215 NESTING NOT ALLOWED 

216 CANNOT SHRINK 

217 ZOMBIE PROCESS 

218 STACK IN HIGH MEMORY 

219 INVALID EXITROUTINE RING 

220 GETBUF FAILED 

221 FLUSHBUF FAILED 

222 TRANSFER TOO LONG 

223 FORCENOSWAP FAILED 

224 SMG NO TARGET WINDOW 

228 NO CHILDREN 

229 INVALID SCREEN GROUP 

230 BAD PIPE 

231 PIPE BUSY 

232 NO DATA 

233 PIPE NOT CONNECTED 

234 MORE DATA 

240 VC DISCONNECTED 

250 CIRCULARITY REQUESTED 

251 DIRECTORY IN CDS 

252 INVALID FSD NAME 

253 INVALID PATH 

254 INVALID EA NAME 

255 EA LIST INCONSISTENT 

256 EA LIST TOO LONG 

257 NO META MATCH 

258 FINDNOTIFY TIMEOUT 

259 NO MORE ITEMS 

260 SEARCH STRUC REUSED 

261 CHAR NOT FOUND 

262 TOO MUCH STACK 

263 INVALID ATTR 

264 INVALID STARTING RING 

265 INVALID DLL INIT RING 

266 CANNOT COPY 


267 


DIRECTORY 



OPLOCKED FILE 


269 OPLOCK THREAD EXISTS 

270 VOLUME CHANGED 

271 FINDNOTIFY HANDLE IN USE 

272 FINDNOTIFY HANDLE CLOSED 

273 NOTIFY OBJECT REMOVED 

274 ALREADY SHUTDOWN 

275 EAS DIDNT FIT 

276 EA FILE CORRUPT 

277 EA TABLE FULL 

278 INVALID EA HANDLE 

279 NO CLUSTER 

280 CREATE EA FILE 

281 CANNOT OPEN EA FILE 

282 EAS NOT SUPPORTED 

283 NEED EAS FOUND 

284 DUPLICATE HANDLE 

285 DUPLICATE NAME 

286 EMPTY MUXWAIT 

287 MUTEX OWNED 

288 NOT OWNER 

289 PARAM TOO SMALL 

290 TOO MANY HANDLES 

291 TOO MANY OPENS 

292 WRONG TYPE 

293 UNUSED CODE 

294 THREAD NOT TERMINATED 

295 INIT ROUTINE FAILED 

296 MODULE IN USE 

297 NOT ENOUGH WATCHPOINTS 

298 TOO MANY POSTS 

299 ALREADY POSTED 

300 ALREADY RESET 

301 SEM BUSY 

303 INVALID PROCID 

304 INVALID PDELTA 

305 NOT DESCENDANT 

306 NOT SESSION MANAGER 


307 


INVALID PCLASS 



308 


INVALID SCOPE 


309 INVALID THREADID 

310 DOSSUB SHRINK 

311 DOSSUB NOMEM 

312 DOSSUB OVERLAP 

313 DOSSUB BADSIZE 

314 DOSSUB BADFLAG 

315 DOSSUB BADSELECTOR 

316 MR MSG TOO LONG 

316 MGS MR MSG TOO LONG 

317 MR MID NOT FOUND 

318 MR UN ACC MSGF 

319 MR INV MSGF FORMAT 

320 MR INV IVCOUNT 

321 MR UN PERFORM 

322 TS WAKEUP 

323 TS SEMHANDLE 

324 TS NOTIMER 

326 TS HANDLE 

327 TS DATETIME 

328 SYS INTERNAL 

329 QUE CURRENT NAME 

330 QUE PROC NOT OWNED 

331 QUE PROC OWNED 

332 QUE DUPLICATE 

333 QUE ELEMENT NOT EXIST 

334 QUE NO MEMORY 

335 QUE INVALID NAME 

336 QUE INVALID PRIORITY 

337 QUE INVALID HANDLE 

338 QUE LINK NOT FOUND 

339 QUE MEMORY ERROR 

340 QUE PREV AT END 

341 QUE PROC NO ACCESS 

342 QUE EMPTY 

343 QUE NAME NOT EXIST 

344 QUE NOT INITIALIZED 

345 QUE UNABLE TO ACCESS 

346 QUE UNABLE TO ADD 

347 QUE UNABLE TO INIT 



349 

VIO 

INVALID MASK 

350 

VIO 

PTR 

351 

VIO 

APTR 

352 

VIO 

RPTR 

353 

VIO 

CPTR 

354 

VIO 

LPTR 

355 

VIO 

MODE 

356 

VIO 

WIDTH 

357 

VIO 

ATTR 

358 

VIO 

ROW 

359 

VIO 

COL 

360 

VIO 

TOPROW 

361 

VIO 

BOTROW 

362 

VIO 

RIGHTCOL 

363 

VIO 

LEFTCOL 

364 

scs 

CALL 

365 

scs 

VALUE 

366 

VIO 

WAIT FLAG 

367 

VIO 

UNLOCK 

368 

SGS 

NOT SESSION MGR 

369 

SMG 

INVALID SGID 

369 

SMG 

INVALID SESSION ID 

370 

SMG 

NOSG 

370 

SMG 

NO SESSIONS 

371 

SMG 

GRP NOT FOUND 

371 

SMG 

SESSION NOT FOUND 

372 

SMG 

SET TITLE 

373 

KBD 

PARAMETER 

374 

KBD 

NO DEVICE 

375 

KBD 

INVALID IOWAIT 

376 

KBD 

INVALID LENGTH 

377 

KBD 

INVALID ECHO MASK 

377 

KBD 

INVALID INPUT MASK 

378 

KBD 

INVALID INPUT MASK 

379 

MON 

INVALID PARMS 

380 

MON 

INVALID DEVNAME 

381 

MON 

INVALID HANDLE 

382 

MON 

BUFFER TOO SMALL 

383 

MON 

BUFFER EMPTY 



384 MON DATA TOO LARGE 

385 MOUSE NO DEVICE 

386 MOUSE INV HANDLE 

387 MOUSE INV PARMS 

388 MOUSE CANT RESET 

389 MOUSE DISPLAY PARMS 

390 MOUSE INV MODULE 

391 MOUSE INV ENTRY PT 

392 MOUSE INV MASK 

393 NO MOUSE NO DATA 

394 NO MOUSE PTR DRAWN 

395 INVALID FREQUENCY 

396 NLS NO COUNTRY FILE 

396 NO COUNTRY SYS 

397 NLS OPEN FAILED 

397 OPEN COUNTRY SYS 

398 NLS NO CTRY CODE 

398 NO COUNTRY OR CODEPAGE 

399 NLS TABLE TRUNCATED 

400 NLS BAD TYPE 

401 NLS TYPE NOT FOUND 

401 COUNTRY NO TYPE 

402 VIO SMG ONLY 

403 VIO INVALID ASCIIZ 

404 VIO DEREGISTER 

405 VIO NO POPUP 

406 VIO EXISTING POPUP 

407 KBD SMG ONLY 

408 KBD INVALID ASCIIZ 

409 KBD INVALID MASK 

410 KBD REGISTER 

411 KBD DEREGISTER 

412 MOUSE SMG ONLY 

413 MOUSE INVALID ASCIIZ 

414 MOUSE INVALID MASK 

415 MOUSE REGISTER 

416 MOUSE DEREGISTER 

417 SMG BAD ACTION 

418 SMG INVALID CALL 

419 SCS SG NOTFOUND 



420 


421 

422 

423 

424 

425 

426 

427 

428 

429 

430 

431 

432 

433 

434 

435 

436 

437 

438 

439 

440 

441 

442 

443 

444 

445 

446 

447 

448 

449 

450 

451 

452 

453 

454 

455 

456 

457 

458 


SCS NOT SHELL 

VI 0 INVALID PARMS 

VIO FUNCTION OWNED 

VIO RETURN 

SCS INVALID FUNCTION 

SCS NOT SESSION MGR 

VIO REGISTER 

VIO NO MODE THREAD 

VIO NO SAVE RESTORE THD 

VIO IN BG 

VIO ILLEGAL DURING POPUP 
SMG NOT BASESHELL 
SMG BAD STATUSREQ 
QUE INVALID WAIT 
VIO LOCK 

MOUSE INVALID IOWAIT 
VIO INVALID HANDLE 
VIO ILLEGAL DURING LOCK 
VIO INVALID LENGTH 
KBD INVALID HANDLE 
KBD NO MORE HANDLE 
KBD CANNOT CREATE KCB 
KBD CODEPAGE LOAD INCOMPL 
KBD INVALID CODEPAGE ID 
KBD NO CODEPAGE SUPPORT 
KBD FOCUS REQUIRED 
KBD FOCUS ALREADY ACTIVE 
KBD KEYBOARD BUSY 
KBD INVALID CODEPAGE 
KBD UNABLE TO FOCUS 
SMG SESSION NON SELECT 
SMG SESSION NOT FOREGRND 
SMG SESSION NOT PARENT 
SMG INVALID START MODE 
SMG INVALID RELATED OPT 
SMG INVALID BOND OPTION 
SMG INVALID SELECT OPT 
SMG START IN BACKGROUND 
SMG INVALID STOP OPTION 



459 


460 

461 

462 

463 

464 

465 

466 

467 

468 

469 

470 

471 

472 

473 

474 

475 

476 

477 

478 

479 

480 

481 

482 

483 

484 

485 

486 

487 

488 

489 

490 

491 

492 

493 

494 

495 

496 

497 


SMG BAD RESERVE 

SMG PROCESS NOT PARENT 

SMG INVALID DATA LENGTH 

SMG NOT BOUND 

SMG RETRY SUB ALLOC 

KBD DETACHED 

VIO DETACHED 

MOU DETACHED 

VIO FONT 

VIO USER FONT 

VIO BAD CP 

VIO NO CP 

VIO NA CP 

INVALID CODE PAGE 

CPLIST TOO SMALL 

CP NOT MOVED 

MODE SWITCH INIT 

CODE PAGE NOT FOUND 

UNEXPECTED SLOT RETURNED 

SMG INVALID TRACE OPTION 

VIO INTERNAL RESOURCE 

VIO SHELL INIT 

SMG NO HARD ERRORS 

CP SWITCH INCOMPLETE 

VIO TRANSPARENT POPUP 

CRITSEC OVERFLOW 

CRITSEC UNDERFLOW 

VIO BAD RESERVE 

INVALID ADDRESS 

ZERO SELECTORS REQUESTED 

NOT ENOUGH SELECTORS AVA 

INVALID SELECTOR 

SMG INVALID PROGRAM TYPE 

SMG INVALID PGM CONTROL 

SMG INVALID INHERIT OPT 

VIO EXTENDED SG 

VIO NOT PRES MGR SG 

VIO SHIELD OWNED 

VIO NO MORE HANDLES 


VIO SEE LOG 



VIO ASSOCIATED DC 


500 

KBD 

NO CONSOLE 

501 

MOUSE NO CONSOLE 

502 

MOUSE INVALID HANDLE 

503 

SMG 

INVALID DEBUG PARMS 

504 

KBD 

EXTENDED SG 

505 

MOU 

EXTENDED SG 

506 

SMG 

INVALID ICON FILE 

507 

TRC 

PID NON EXISTENT 

508 

TRC 

COUNT ACTIVE 

509 

TRC 

SUSPENDED BY COUNT 

510 

TRC 

COUNT INACTIVE 

511 

TRC 

COUNT REACHED 

512 

NO 

MC TRACE 

513 

MC 

TRACE 

514 

TRC 

COUNT ZERO 

515 

SMG 

TOO MANY DDS 

516 

SMG 

INVALID NOTIFICATION 

517 

LF 

INVALID FUNCTION 

518 

LF 

NOT AVAIL 

519 

LF 

SUSPENDED 

520 

LF 

BUF TOO SMALL 

521 

LF 

BUFFER CORRUPTED 

521 

LF 

BUFFER FULL 

522 

LF 

INVALID DAEMON 

522 

LF 

INVALID RECORD 

523 

LF 

INVALID TEMPL 

523 

LF 

INVALID SERVICE 

524 

LF 

GENERAL FAILURE 

525 

LF 

INVALID ID 

526 

LF 

INVALID HANDLE 

527 

LF 

NO ID AVAIL 

528 

LF 

TEMPLATE AREA FULL 

529 

LF 

ID IN USE 

530 

MOU 

NOT INITIALIZED 

531 

MOUINITREAL DONE 

532 

DOSSUB CORRUPTED 

533 

MOUSE CALLER NOT SUBSYS 

534 

ARITHMETIC OVERFLOW 



535 

TMR 

NO DEVICE 

536 

TMR 

INVALID 

TIME 

537 

PVW 

INVALID 

ENTITY 

538 

PVW 

INVALID 

ENTITY TYPE 

539 

PVW 

INVALID 

SPEC 

540 

PVW 

INVALID 

RANGE TYPE 

541 

PVW 

INVALID 

COUNTER BLK 

542 

PVW 

INVALID 

TEXT BLK 

543 

PRF 

NOT INITIALIZED 

544 

PRF 

ALREADY 

INITIALIZED 

545 

PRF 

NOT STARTED 

546 

PRF 

ALREADY 

STARTED 

547 

PRF 

TIMER OUT OF RANGE 

548 

PRF 

TIMER RESET 

549 

HPFS 

CHKDSK 

NO PARM SPACE 

550 

HPFS 

CHKDSK 

NORECOGNIZE 

551 

HPFS 

CHKDSK 

NOROOT FIND 

552 

HPFS 

CHKDSK 

NOFIX FS ERROR 

553 

HPFS 

CHKDSK 

CORRECT FS ERR 

554 

HPFS 

CHKDSK 

ORGAN FIX 

555 

HPFS 

CHKDSK 

RELOC BBPDATA 

556 

HPFS 

CHKDSK 

REM CORRU BLOC 

557 

HPFS 

CHKDSK 

REM CORRUP FIL 

558 

HPFS 

CHKDSK 

FIX SPACE ALLO 

559 

HPFS 

NOT FORMATTED DISK 

560 

HPFS 

CHKDSK 

COR ALLOC 

561 

HPFS 

CHKDSK 

SEARC UNALLOC 

562 

HPFS 

CHKDSK 

DET LOST DATA 

563 

HPFS 

CHKDSK 

PERCENT SEARC 

564 

HPFS 

CHKDSK 

LOST DATASEARC 

565 

HPFS 

CHKDSK 

CRIT NOREAD 

566 

HPFS 

CHKDSK 

DISK INUSE 

567 

HPFS 

CHKDSK 

RECOVTEMP RELOC 

568 

HPFS 

TOTAL DISK SPACE 

569 

HPFS 

DIR KBYTES 

570 

HPFS 

FILE KBYTES 

571 

HPFS 

KBYTES 

AVAILABLE 

572 

HPFS 

CHKDSK 

PLACE REC FILE 

573 

HPFS 

CHKDSK 

RECO DIR AS 

574 

HPFS 

CHKDSK 

PLACEED DATA 



575 

576 

577 

578 

579 

580 

581 

582 

583 

584 

585 

586 

587 

588 

589 

590 

591 

592 

593 

594 

595 

596 

597 

598 

599 

600 
601 
602 

603 

604 

605 

606 

607 

608 

609 

610 
611 
612 
613 


HPFS CHKDSK RECOV EA 
HPFS CHKDSK FIND EA INTEM 
HPFS CHKDSK RELOC TEMP EA 
HPFS CHKDSK RELOC AC LIST 
HPFS CHKDSK LIST NORELOC 
HPFS CHKDSK TRUN EA LIST 
HPFS CHKDSK TRUN EA NAME 
HPFS CHKDSK TRUN EA BBLOCK 
HPFS CHKDSK REM INVALID EA 
HPFS CHKDSK FIX EA ALLOC 
HPFS CHKDSK FIX ALACCCTRL 
HPFS CHKDSK ACCTR LIST BBL 
HPFS CHKDSK REM ACLIST 
HPFS CHKDSK FOUND DATANORL 
HPFS WRONG VERSION 
HPFS CHKDSK FOUND DATATEMP 
HPFS CHKDSK FIX TEMPSTATUS 
HPFS CHKDSK FIX NEEDEADATA 
HPFS RECOVER PARM ERROR 
HPFS RECOV FILE NOT FOUND 
HPFS RECOV UNKNOWN ERROR 
HPFS RECOV NOT ENOUGH MEM 
HPFS RECOV NOWRITE DATA 
HPFS RECOV NOTEMP CREATE 
HPFS RECOV EA NOREAD 
HPFS RECOV FILE BYTES 
HPFS RECOV BAD BYTES RECOV 
HPFS RECOV FILEBYTES NOREC 
HPFS RECOV DISK INUSE 
HPFS RECOV FILE NODELETE 
HPFS RECOV NOCREATE NEWFILE 
HPFS RECOV SYSTEM ERROR 
HPFS SYS PARM ERROR 
HPFS SYS CANNOT INSTALL 
HPFS SYS DRIVE NOTFORMATED 
HPFS SYS FILE NOCREATE 
HPFS SIZE EXCEED 
HPFS SYNTAX ERR 
HPFS NOTENOUGH MEM 



614 

615 

616 

617 

618 

619 

620 
621 
622 

623 

624 

625 

626 

627 

628 

629 

630 

631 

632 

633 

634 

635 

636 

637 

638 

639 

640 

641 

642 

643 

644 

645 

646 

647 

648 

649 

650 

651 

671 

672 


HPFS WANT MEM 

HPFS GET RETURNED 

HPFS SET RETURNED 

HPFS BOTH RETURNED 

HPFS STOP RETURNED 

HPFS SETPRTYRETURNED 

HPFS ALCSG RETURNED 

HPFS MSEC SET 

HPFS OPTIONS 

HPFS POS NUM VALUE 

HPFS VALUE TOO LARGE 

HPFS LAZY NOT VALID 

HPFS VOLUME ERROR 

HPFS VOLUME DIRTY 

HPFS NEW SECTOR 

HPFS FORMAT PARM ERROR 

HPFS CANNOT ACCESS CONFIG 

HPFS RECOV FILE 

HPFS CHKDSK KBYTES RESERVE 

HPFS CHKDSK KBYTES IN EA 

HPFS BYTEBUF SET 

HPFS FORMATTING COMPLETE 

HPFS WRONG VOLUME LABEL 

HPFS FMAT TOO MANY DRS 

VDD UNSUPPORTED ACCESS 

VDD LOCK USEAGE DENIED 

TIMEOUT 

VDM DOWN 

VDM LIMIT 

VDD NOT FOUND 

INVALID CALLER 

PID MISMATCH 

INVALID VDD HANDLE 

VLPT NO SPOOLER 

VCOM DEVICE BUSY 

VLPT DEVICE BUSY 

NESTING TOO DEEP 

VDD MISSING 

BIDI INVALID LENGTH 

BID I INVALID INCREMENT 



673 

BIDI 

INVALID COMBINATION 

674 

BIDI 

INVALID RESERVED 

675 

BIDI 

INVALID EFFECT 

676 

BIDI 

INVALID CSDREC 

677 

BIDI 

INVALID CSDSTATE 

678 

BIDI 

INVALID LEVEL 

679 

BIDI 

INVALID TYPE SUPPORT 

680 

BIDI 

INVALID ORIENTATION 

681 

BIDI 

INVALID NUM SHAPE 

682 

BIDI 

INVALID CSD 

683 

BIDI 

NO SUPPORT 

684 

NO BIDI RW INCOMPLETE 

689 

HPFS 

LAZY ON 

690 

HPFS 

LAZY OFF 

691 

IMP 

INVALID PARM 

692 

IMP 

INVALID LENGTH 

693 

MSG 

HPFS DISK WARN 

694 

MSG 

HPFS FNODE WARN 

730 

MON 

BAD BUFFER 

731 

MODULE CORRUPTED 

732 

BOOT 

DRIVE NOT ACCESSIBLE 

1477 

SM OUTOF SWAPFILE 

2055 

LF TIMEOUT 

2057 

LF SUSPEND SUCCESS 

2058 

LF RESUME SUCCESS 

2059 

LF REDIRECT SUCCESS 

2060 

LF REDIRECT FAILURE 

32768 

SWAPPER NOT ACTIVE 

32769 

INVALID SWAP ID 

32770 

IOERR SWAP FILE 

32771 

SWAP 

TABLE FULL 

32772 

SWAP 

FILE FULL 

32773 

CANT 

INIT SWAPPER 

32774 

SWAPPER ALREADY INIT 

32775 

PMM 

INSUFFICIENT MEMORY 

32776 

PMM 

INVALID FLAGS 

32777 

PMM 

INVALID ADDRESS 

32778 

PMM 

LOCK FAILED 

32779 

PMM 

UNLOCK FAILED 



32780 


PMM MOVE INCOMPLETE 


32781 UCOM DRIVE RENAMED 

32782 UCOM FILENAME TRUNCATED 

32783 UCOM BUFFER LENGTH 

32784 MON CHAIN HANDLE 

32785 MON NOT REGISTERED 

32786 SMG ALREADY TOP 

32787 PMM ARENA MODIFIED 

32788 SMG PRINTER OPEN 

32789 PMM SET FLAGS FAILED 

32790 INVALID DOS DD 

32791 BLOCKED 

32792 NOBLOCK 

32793 INSTANCE SHARED 

32794 NO OBJECT 

32795 PARTIAL ATTACH 

32796 INCACHE 

32797 SWAP 10 PROBLEMS 

32798 CROSSES OBJECT BOUNDARY 

32799 LONGLOCK 

32800 SHORTLOCK 

32801 UVIRTLOCK 

32802 ALIASLOCK 

32803 ALIAS 

32804 NO MORE HANDLES 

32805 SCAN TERMINATED 

32806 TERMINATOR NOT FOUND 

32807 NOT DIRECT CHILD 

32808 DELAY FREE 

32809 GUARDPAGE 

32900 SWAPERROR 

32901 LDRERROR 

32902 NOMEMORY 

32903 NOACCESS 

32904 NO DLL TERM 

65026 CPSIO CODE PAGE INVALID 

65027 CPSIO NO SPOOLER 

65028 CPSIO FONT ID INVALID 

65033 CPSIO INTERNAL ERROR 

65034 CPSIO INVALID PTR NAME 



65037 

CPSIO 

NOT ACTIVE 

65039 

CPSIO 

PID FULL 

65040 

CPSIO 

PID NOT FOUND 

65043 

CPSIO 

READ CTL SEQ 

65045 

CPSIO 

READ FNT DEF 

65047 

CPSIO 

WRITE ERROR 

65048 

CPSIO 

WRITE FULL ERROR 

65049 

CPSIO 

WRITE HANDLE BAD 

65074 

CPSIO 

SWIT LOAD 

65077 

CPSIO 

INV COMMAND 

65078 

CPSIO 

NO FONT SWIT 

65079 

ENTRY 

IS CALLGATE 

OxFFOO 

USER DEFINED BASE 


Dos INT 24 Critical Error Codes 


Code 

Description 

0 

124 

WRITE PROTECT 

1 

124 

BAD UNIT 

2 

124 

NOT READY 

3 

124 

BAD COMMAND 

4 

124 

CRC 

5 

124 

BAD LENGTH 

6 

124 

SEEK 

7 

124 

NOT DOS DISK 

8 

124 

SECTOR NOT FOUND 

9 

124 

OUT OF PAPER 

10 

124 

WRITE FAULT 

11 

124 

READ FAULT 

12 

124 

GEN FAILURE 

13 

124 

DISK CHANGE 

15 

124 

WRONG DISK 

16 

124 

UNCERTAIN MEDIA 

17 

124 

CHAR CALL INTERRUPTED 

18 

124 

NO MONITOR SUPPORT 

19 

124 

INVALID PARAMETER 

20 

124 

DEVICE IN USE 

21 

124 

QUIET INIT FAIL 



OS/2 System Exception Codes 


Exception values are 32-bit values laid out as follows: 


3322222222221111111111 

10987654321098765432109876543210 
Sev C Facility Code 


where 

Sev - is the severity code 

00 - Success 

01 - Informational 

10 - Warning 

11 - Error 

C - is the Customer code flag 

Facility - is the facility code 

Code - is the facility's status code 

Exceptions specific to OS/2 2.0 (e.g. XCPT_SIGNAL) will be marked 
with a facility code of 1 . 


80000001 H 

XCPT_GUARD_PAGE_VIOLATION 

PI Access Code 

00000001 H 
00000002H 

P2 FaultAddr 

8001 0001 H 

XCPT_UNABLE_TO_GROW_STACK 

0C001 0001 H 

XCPT_PROCESS_TERMINATE 
This exception is sent to a thread for Synchronous Process Termination and also for Thread Termination. 

0C001 0002H 

XCPT_ASYNC_PROCESS_TERMINATE 
PI TID of 'terminator' thread 

0C001 0003H 

XCPT_SIGNAL 

PI Signal Number 

1 XCPT_SIGNAL_INTR 

3 XCPT_SIGNAL_KILLPROC 

4 XCPT_SIGNAL_BREAK 

0C001 0004H 

XCPT_B1 NPX_ERRATA_02 

0C0000005H 

XCPT ACCESS VIOLATION 


XCPT_READ_ACCESS 

XCPT_WRITE_ACCESS 



0C0000006H 

0C000001 CH 

0C000001 DH 
OC0000024H 
0C0000025H 
OC0000026H 
0C0000027H 
OC0000028H 
OC0000093H 

OC0000094H 

0C0000095H 

QC0000096H 


This relates to Traps 0x09, 0x0b, 0x0c, OxOd and OxOe. 
PI Access Code 


00000000H 
00000001 H 
00000002H 
00000004H 
00000008H 
0000001 OH 


XCPT_UNKNOWN_ACCESS 

XCPT_READ_ACCESS 

XCPT_WRITE_ACCESS 

XCPT_EXECUTE_ACCESS 

XCPT_SPACE_ACCESS 

XCPT_LIMIT_ACCESS 


P2 


FaultAddr 

Selector 

-1 


XCPT_READ_ACCESS/XCPT_WRITE_AC 

CESS 

XCPT_SPACE_ACCESS 

XCPT_LIMIT_ACCESS/XCPT_UNKNOWN 

ACCESS 


XCPT_IN_PAGE_ERROR 
This relates to Trap OxOe. 

PI FaultAddr 


XCPTJLLEGALJNSTRUCTION 
This relates to Trap 0x06. 

XCPT_INVALID_LOCK_SEQUENCE 

XCPT_NONCONTINUABLE_EXCEPTION 

XCPT_INVALID_DISPOSITION 

XCPTJJNWIND 

XCPT_BAD_STACK 

XCPT_INVALID_UNWIND_TARGET 

XCPT_ARRAY_BOUNDS_EXCEEDED 
This relates to Trap 0x05. 

XCPT_FLOAT_DENORMAL_OPERAND 
This relates to Trap 0x1 0. 

XCPT_FLOAT_DIVIDE_BY_ZERO 
This relates to Trap 0x1 0. 

XC PT_FLOAT_l N EXACT_RESU LT 
This relates to Trap 0x1 0. 


OC0000097H 


XCPT FLOAT INVALID OPERATION 



This relates to Trap 0x1 0. 


OC0000098H 

XCPT_FLOAT_OVERFLOW 
This relates to Trap 0x1 0. 

OC0000099H 

XCPT_FLOAT_STACK_CHECK 
This relates to Trap 0x1 0. 

0C000009AH 

XCPT_FLOAT_UNDERFLOW 
This relates to Trap 0x1 0. 

0CO00009BH 

XCPT_INTEGER_DIVIDE_BY_ZERO 
This relates to Trap 0x00. 

OC000009CH 

XCPT_INTEGER_OVERFLOW 
This relates to Trap 0x04. 

OC000009DH 

XCPTPRIVILEGEDINSTRUCTION 
This relates to Trap OxOd. 

0C000009EH 

XC PT_D ATATYP E_M ISALIGNMENT 
This relates to Trap 0x1 1 . 


PI 

Access Code 



00000001 H 

XCPT READ ACCESS 


00000002H 

XCPT_WRITE_ACCESS 

P2 

Alignment 


P3 

FaultAddr 



OC000009FH 

XCPT_BREAKPOINT 
This relates to Trap 0x03. 

OCOOOOOAOH 

XCPT_SINGLE_STEP 
This relates to Trap 0x01 . 

For a further information refer to: 

• OS/2 Technical Library - Control Program Programming Reference, Appendix C. 

• bsexcpt.h or bsexcpt.inc include files supplied with the OS/2 Programmers Toolkit. 


Trap and Exeption Popup Message Reference 


The trap screen and has in two basic formats: 



The application exception (SYS0147, SYS317x, SYS3190) messages. 

The Internal Processing Error (IPE). 

Application Trap/Exception 

Application exeption popups are logged in the POPUPLOG.OS2 file of which the following is an example. They are also displayed in a 
popup window in a slightly abbreviated form. 

Control of exception logging and popup displays may be done from the TRAPLOG command or SUPPRESSPOPUPS CONFIG.SYS 
statement. 


01- > 

02 - > 

03- > 

04- > 

05- > 

06- > 

07- > 

08- > 
0 9-> 
10 -> 

11- > 

12 — > 

13— > 

14— > 


02-25-1999 10:58:35 SYS3175 PID 00b2 

E : \CLASSES\LABS\LAB26\BEDBUG.EXE 
C0000005 
lbf 94e24 
Pl=00000001 
EAX=00000000 
ESI=00000001 
DS=0053 DSACC=d0f 3 
ES=0053 ESACC=d0f 3 
FS=150b FSACC=00f 3 
GS=0000 GSACC=**** 

CS :EIP=005b: lbf 94e24 
S3 :ESP=0053 : 0002 87ec 


TID 0001 Slot 0068 


P2=00000000 P3=XXXXXXXX P4=XXXXXXXX 
EBX=00060210 ECX=0002881c EDX=00060210 

EDI=00000002 

D S L IM= 1 f f f f f f f 
E S L IM= 1 f f f f f f f 
FSLIM=00000030 
GSLIM=* * ****** 

CSACC=d0df CSLIM=lfffffff 
SSACC=d0f 3 SSLIM=lfffffff 


EBP=000287f 8 FLG=00012206 


15-> DOSCALLl.DLL 0 0 02 : 0 0 0 0 4e2 4 


The information presented varies slightly according to circumstance. In general, inapplicable information is either omitted, or overlayed with 
asterisks (*) or exes (X). 

Each line of the trap screen conveys the following meaning: 

1 . Date and Time or Trap, Trap message Id and Failing Process Id, Thread Id and Thread Slot. 

2. Failing process. In general this will not be the trapping module. 

3. OS/2 System Exception code. See OS/2 System Exception Codes for a complete set of system generated exceptions. 

4. 32-bit Instruction address at time of exception. 

5. Exception Information Parameters, taken from the Exception Report Record. See OS/2 System Exception Codes for the 
exception information parameters that are associated with each system exception. 

Note: 

When PI =00000000 and P2=FFFFFFFF, this frequently indicates that the trap occurred while executing a system API 
and that the previous instruction in the user's code was a call gate. When this happen a bad parameter has been passed 
to the system from the application. 

If in addition the EFLAGS register has high word 0019xxxx then Virtual Machine Extensions may indirectly be causing a 
problem. Try VME=NO in CONFIG.SYS. 

6. The EAX, EXB, EXC and EDX registers at the time the exception was reported. 

7. The ESI and EDI registers at the time the exception was reported. 

8. The DS selector at the time the exception was reported. 

This information is presented in the form: 

xS=nnnn The selector value. 

xSACC=nnnn The descriptor access bits. 

Reading from right to left the bits of the access field are assigned the following meaning: 

0 (A) 1 =Accessed 

1 (W) 1=Writeable 

2 (E) 1=Executable 

3 0 


4 

5 & 6 
7 

8-11 


12 

13 

14 

15 


(S) 1=Application 0=System 
(DPL) Privilege Level 
(P) 1=Segment present 
0 

(AVL) 1 =UVIRT allocation 
(D) 1 =32-bit Operands/Data 
0 

(G) 1=4K granularity limit, 0=byte granularity limit 


xSLIM=nnnnnnnn 


See the "INTEL Pentium User's Guide, Volume 3" for more information on descriptor formats. 
The limit field from the descriptor. 


9. The ES selector at the time the exception was reported. 


1 0. The FS selector at the time the exception was reported. 

1 1 . The GS selector at the time the exception was reported. 

12. The instruction address at the time the exception was reported, followed by the CS selector Limit and Access fields. 

13. The stack address at the time the exception was reported, followed by the SS selector Limit and Access fields. 

14. The EBP register and EFLAGS register. 

15. The module name and relative object and offset within the module that corresponds to the exception address reported on line 4. 


Lines 3-5 are formatted from the Exception Report Record generated at the time the exception occurred. 

Lines 6-14 are formatted from the Exception Context Record generated at the time the exception occurred. 

Exception report and Context records can be modified by exception handlers so it is possible that the information displayed might 
not be correct. 

Exception popups will not be generated if an exception handler attepts recovery by returning XCPT_CONTINUE_EXECUTION to 
the system. Flowever this does not guarantee that the program will continue to operate correctly. When recovery is not successful it 
might be necessary to disable exception handlers. For Presentation Manager and the Workplace Shell this can be done by 
specifying SET SHAPIEXCEPTIONHANDLER=OFF and SHELLEXCEPTIONHANDLER=OFF in CONFIG.SYS. This can also be 
done from the kernel debugger by setting the first double-word of a thread's TIB to Oxffffffff. An alternative approach is to use 
system trace to log exception handier dispatching. Minor codes 361 , 362 and 363 of DOSCALL1 will log exception report and 
context records before and after they have been processed by and exception handler. Minor code 361 logs the original exception 
information, while minor code 363 logs the exception information that is returned to the system (and used for the popup log). Minor 
code 262 logs exception information before each exception handler is called. The Exception Registration Record is also logged by 
the tracepoint. 

To activate these tracepoints issue the following command sequence: 


TRACE ON /B : 512 /D : PROCNAME, TID 
TRACE ON DOSCALL1 (361, 362, 363) 


The first command defines a system trace buffer of 512Kb and turns on logging of Process name and Thread Id with each trace 
record. The second command activates the tracepoints. Use the TRACEGET and/or the TRACEFMT commands to extract and 
view the traced events. 

Using trace to log exceptions will also provide full trap information for floating point exception, which is not provided by any other 
means. 

The exception address reported in line 4 in most cases agrees with the CS:EIP reported in line 12. Flowever, when a nested 
exception occurs, the register information will relate to the most recent exception. A particular example of this is where an Exit List 
Flandler traps. Exit List Flandlers are called when a process terminates, after any exception handling. The system first generates an 
XCPT_PROCESS_TERMINATE exception, which may be handled by exception handlers. If this exception is not recovered then 
process termination continues with Exit List processing. Once this starts, application exception handlers will not be called if any 
further exceptions are generated. If a further exception is generated then it will become a nested exception of the original 
XCPT_PROCESS_TERMINATE. If an Exit List Flandler traps, a SYS3170 popup will be generated with the register information in 
lines 6-14 corresponding to the nested exception and lines 3 - 5 and 15 corresponding to the original 
XCPT_PROCESS_TERMINATE exception. 


Notes: 


If the system is unable to generate an exception popup message then a SYS0147 is generated. This can happen when there is 
insuffiencent kernel heap memory left to allocate a FIARDERR request packet. This is not the only cause of a SYS0147, PM 


resource (heap) shortages also cause this message, is exhausted this can occur. 

SYS3190 occurs because of a TRAP 6. The application is incorrectly using LOCK prefixes either deliberately or possibly it had 
taken a wild jump to a non-instuction boundary. 


System Internal Processing Error (IPE) 

The IPE message appears because of a fatal internal error condition. This may or may not be a trap, though the IPE trap is the most 
common. 

The IPE message has the general format: 


1- > <IPE specific Message> 

2- > THE SYSTEM DETECTED AN INTERNAL PROCESSING 

ERROR AT LOCATION ##xxxx : yyyyyyyy - aaaa:bbbb 

3- > 11111 , ffff 

4- > 038600dl 

5- > INTERNAL REVISION 6 . 307 DATE: 92/03/01 


The parts of the IPE message are: 

1 . IPE specific message, which could be a simple line of text, for example: 

CPS: Empty allocation block — not supported. 


or a formatted register dump for a system trap, such as: 


TRAP 0002 
EAX= 7d240a58 
ESI= fff 3272c 
CS : EIP= 0160 
SS : ESP= 0030 
DS= 0158 
ES= 0158 


ERRCD= 0000 ERACC= **** ERLIM= ******** 
EBX= f f202fdc ECX= 00064423 EDX= 00003624 
EDI= 7d240004 EBP= 00004a44 FLG= 00003202 
f f f702a6 CSACC= c09d CSLIM= ffffffff 
00004a38 SSACC= 1097 SSLIM= 00003fff 
DSACC= cOf 3 DSLIM= ffffffff CR0= fffffffb 
ESACC= cOf 3 


ESLIM= ffffffff CR2= la060014 
FS= 0000 FSACC= **** FSLIM= ******** 

GS= 0000 GSACC= **** GSLIM= ******** 


2. The CS:EIP of the caller to the kernel panic routine is shown as ##xxxx:yyyyyyyy . For traps this will always be an address 
within the trap handler and not the address at which the error occurred - that is given in the error specific message. 

The CS:EIP is prefixed with either ## to indicate protect mode, paging enables in accordance with the Kernel Debugger 
command prompt. 

The kernel relative object:offset address is shown as aaaa.bbbb. 

3. ///// is intended to be the source line number at which the panic occurred. Values greater then 60000 are generated panic 
sequence numbers, ffff is the source file number. 

Note: These values are mostly arbitrary and therefore not particularly useful. There is no published cross reference. 

4. The processor ID. 

5. The kernel revision information. 

An example of the IPE trap screen is show in the following diagram: 


i-> 


2 -> 


3-> 


4 -> 


TRAP 0002 ERRCD= 0000 ERACC= **** ERLIM= ******** 

EAX= 7d240a58 EBX= ff202fdc ECX= 00064423 EDX= 00003624 
ESI= fff 3272c EDI= 7d240004 EBP= 00004a44 FLG= 00003202 
CS : EIP= 0160 : fff702a6 CSACC= c09d CSLIM= ffffffff 
SS:ESP= 0030 : 00004a38 SSACC= 1097 SSLIM= 00003fff 
DS= 0158 DSACC= c0f3 DSLIM= ffffffff CR0= fffffffb 
ES= 0158 ESACC= c0f3 ESLIM= ffffffff CR2= la060014 
FS= 0000 FSACC= **** FSLIM= ******** 

GS= 0000 GSACC= **** GSLIM= ******** 

THE SYSTEM DETECTED AN INTERNAL PROCESSING 



ERROR AT LOCATION ## 0 1 6 0 : f f f 64 53 f - 000d:a53f 


60000 , 9084 
038600dl 

INTERNAL REVISION 6 . 307 DATE: 92/03/01 


The register information may be interpreted as for application trap screens, with the following points notes: 

1 . This line shows the T rap number followed by the INTEL error code. Most often the associated error code is a selector number. 
When this is the case, this line formats the selector's access and limit values. 

2. This line shows the address at which the trap occurred. 

3. The value of control register 0 (CR0) is formatted after the DS register. 

CR0 contains processor control mode settings. 

4. The value of control register 2 (CR2) is formatted after the ES register. 

CR2 contains the fault address for TRAP E errors. 


NMI Error Codes 


NMI exceptions (TRAP 2) have no hardware defined Error Code. OS/2 uses the error code in the trap screen to indicate the source of the 
NMI as follows: 


Error Code Msg No Description 

0000 SYS1944 Software caused NMI (INT 2) 

0001 SYS1945 RAM error, check memory (parity error) 

0002 SYS1946 Adapter caused error (I/O channel check) 

0003 SYS1947 Check bus mastering adapters, update 

adapter drivers. Also disable bus 
mastering on failing adapters as a 
problem determination tool to figure out 
which adapter is causing the failure. 
Contact the adapter vendor for further 
assistance. (DMA timeout) 

0004 SYS1948 A device driver or Dos application 

disabled interrupts too long. Contact 
appropriate software vendor for updated 
software (Watchdog timeout) . 

0005 SYS3140 Contact application or device driver 

hardware vendor (software generated 
NMI) . 


0006 

SYS3141 

see 

error 

code 

0003 

0007 

SYS3142 

see 

error 

code 

0004 

0008 

SYS3143 

see 

error 

code 

0002 

0009 

SYS3149 

see 

error 

code 

0001 


Standard GDT Assignments 



The following table lists the GDT assignments that are statically assigned or assigned dynamically during initialisation. 

This list is subject to change from release to release but may be verified by listing symbols from OS2KRNL segment DOSGDTDATA using 
the Kernel Debugger LS command. 

Note: 


The Callgate descriptor assigmments are shown for the ALLSTRICT kernel. For the RETAIL kernel they begin at one GTD entry 
earlier. Thus GDT_DOSALLOCSEG through GDT_R0CSC are assigned to selectors 1d08 through lead. 


Selector 

Symbol 

Description 

0 

GDT 

entry 0 is reserved (invalid) 

8 

GDT_GDT 

entry 8 used to be GDT (now invalid) 

10 

GDT_TSS 

Protect mode TSS 

18 

GDT_IDT 

Protect Mode IDT 

20 

GDT_RM_IDT 

Selector for 1st IK 

28 

GDT_LDT 

Selector for LDT 

30 

GDT_PTDA 

PTDA/TCB/TSD selector 

38 

GDT_FPEM 

Floating Point Emulator Work Area 

40 

GDT_ROMDATA 

ROM data at physical address 400h 

4a 

GDT_R2DS 

Ring 2 Data Selector 

53 

GDT_R3DS 

Ring 3 Data Selector 

5b 

GDT_R3CS 

Ring 3 Code Selector 

63 

GDT_R3PDS 

Ring 3 Protected Data Selector 

6b 

GDT_R3THKDS , 

Ring 3 Thunk Data Selector 

70 

GDT_SAS , 

System Anchor Segment 

78 

GDT_DOS ALIAS 

SAS Read/Write Alias 

80 

GDT_SYSINFOSEG 

Inf osegGDT 

CO 

CO 

GDT_DFTSS 

Double Fault TSS 

90 

GDT_DF STACK 

Trap 8 stack selector 

98 

GDT_VPB 

VPB BMP Segment 

aO 

GDT_RDR1 

Reserved 

a8 

GDT_Buf fers 

Buffer Pool Segment 

bO 

GDT_Unused 

unused selector (used to be MFT) 

b8 

GDT_RLR 

RLR selector 

cO 

GDT_SFT 

SFT selector of first SFT segment 

c8 

GDT_FSC 

FSC array segment selector 

dO 

GDT_mFSD 

mini-FSD 

d8 

GDT_RIPL 

Remote IPL data 

eO 

GDT_NULLIDT 

Invalid descriptor for mode switch 

e8 

GDT_I NTS TACK 

Interrupt stack alias 


fO GDT_RMCODE 

f 8 GDT_RMDATA 

100 DOSHLP_CODESEL 

108 GDT_Pool 

1508 GDT_Poolend 

150b GDT_TIB 

ldlO GDT_DOSALLOCSEG 

ldl8 GDT_DOSALLOCPROTSEG 

ld2 0 GDT_DOSDYNAMICTRACE 

ld2 8 GDT_DOS ERROR 

ld30 GDT_DOSFREERE SOURCE 

ld38 GDT_DOSQUERYABIOSSUPPORT 

ld4 0 GDT_D0S1 6LDRDIRTYWORKER 

ld4 8 GDT_DOS FREES EG 

ld50 GDT_DOSGETPROCADDR 

ld58 GDT_DOSIEXECPGM 

ld60 GDT_DOSIQAPPTYPE 

ld68 GDT_DOSISEMWAIT 

ld7 0 GDT_DOSLOADMODULE 

ld7 8 GDT_DOSMAKEPIPE 

ld80 GDT_DOSREALLOCSEG 

ld88 GDT_DOSSICG 

ld90 GDT_PANICWRITE 

ld98 GDT_DOSSETPRTY 

IdaO GDT_DOS LOGMODE 

Ida 8 GDT_DOSSETCP 

ldbO GDT_DOSGLOBALSEG 

ldb8 GDT_DOS CREATE THREAD 

ldcO GDT_DOSEXIT 

ldc8 GDT_DOSEXITLIST 

lddO GDT_DOSFREEMODULE 

ldd8 GDT_DOSRESUMETHREAD 

IdeO GDT_DOS SLEEP 

lde8 GDT_DOSSUSPENDTHREAD 

ldf 0 GDT_DOSLIBINIT 

ldf 8 GDT_REDIR 

leOO GDT_DOSCHGFILEPTR 

le08 GDT_DOSPROTECTCHGFILEPTR 

lelO GDT_DOS CLOSE 

lel8 GDT_DOSPROTECTCLOSE 


386 modesw code selector 
386 modesw data selector 
DosHlp Code Selector 
Start of dynamic GDT allocations 
End of dynamic GDT allocations 
TIB selector 
DOSALLOCSEG call gate 
DOSALLOCPROTSEG call gate 
DOSDYNAMICTRACE call gate 
DOSERROR call gate 
DOS FREERE SOURCE call gate 
DOSQUERYABIOSSUPPORT call gate 
DOS1 6LDRDIRTYWORKER call gate 
DOSFREESEG call gate 
DOSGETPROCADDR call gate 
DOSIEXECPGM call gate 
DOS IQAPPTYPE call gate 
DOSISEMWAIT call gate 
DOSLOADMODULE call gate 
DOSMAKEPIPE call gate 
DOSREALLOCSEG call gate 
DOSSICG call gate 
PANICWRITE call gate 
DOSSETPRTY call gate 
DOSLOGMODE call gate 
DOSSETCP call gate 
DOS GLOB ALS EG call gate 
DOSCREATETHREAD call gate 
DOSEXIT call gate 
DOSEXITLIST call gate 
DOSFREEMODULE call gate 
DOSRESUMETHREAD call gate 
DOSSLEEP call gate 
DOSSUSPENDTHREAD call gate 
DOSLIBINIT call gate 
REDIR call gate 
DOSCHGFILEPTR call gate 
DOSPROTECTCHGFILEPTR call gate 
DOSCLOSE call gate 
DOSPROTECTCLOSE call gate 



Ie20 

GDT_DOSDELETE 

DOSDELETE call gate 

le28 

GDT_DOSDEVIOCTL 

DOSDEVIOCTL call gate 

le30 

GDT_DOSDEVIOCTL2 

DOSDEVIOCTL2 call gate 

le38 

GDT_DOSDUP HANDLE 

DOSDUPHANDLE call gate 

le40 

GDT_DOSICOPY 

DOSICOPY call gate 

le48 

GD T_D 0 S I READ 

DOSIREAD call gate 

le50 

GDT_DOS IPROTECTREAD 

DOS IPROTECTREAD call gate 

le58 

GDT_DOSISETRELMAXFH 

DOSISETRELMAXFH call gate 

le60 

GDT_DOSIWRITE 

DOSIWRITE call gate 

le68 

GDT_DOSIPROTECTWRITE 

DOSIPROTECTWRITE call gate 

le7 0 

GD T_D 0 S MOVE 

DOSMOVE call gate 

le7 8 

GDT_DOSOPEN 

DOSOPEN call gate 

le88 

GDT_MS STACK 


le90 

GDT_OS2LDR 

os21dr's data 

le98 

GDT_NWDTSS 

NMI TSS 

leaO 

GDT_NWD STACK 

NMI Stack Selector 

lea8 

GDT_R0CSC 

R0 Code Selector for Init ] 


Standard LDT Assignments 


The following table lists the LDT assignments that are defined by the system. 


Selector Description 


7 

df f 7 


Read/Only access to the current LDT 

Read/Only access to the current Global Information 
Segment . 


dfff Read/Only access to the current Local Information 

Segment and the current threads ' s Thread Local 
Memory Area . 


VM System Object Owner IDs 


System Object Owner identifiers are a reserved range of hobs used as labels for identifying generic types of memory object. They are not 
handles to VMOBs, but are used in the own and hmte fields of some VMOBs and also in the own fields of some Kernel Heap Block 
headers. 

Note: 


From Warp 3.0 fix pack 35 and Warp 4.0 GA, system object ids for file system and physical device driver owners are no longer used. 


Instead the true module handle of the driver module is used. 


The following table lists the system objects IDs are defined. The names shown are those displayed by the Kernel Debugger and Dump 
Formatter when formatting VMOB structures: 


Name 

ID 

Description 

lielist 

Oxf f 2d 

LDR LieLists 

demversion 

Oxf f 2e 

DEM fake version entries 

vmbmapd 

Oxf f2f 

VM Arena Bitmap Directory 

npipenpn 

Oxf f 30 

Named pipe NPN segment 

npipenp 

Oxf f 31 

Named pipe NP segment 

reqpkttcb 

Oxf f 32 

DD TCB request packets 

reqpkt2 

Oxf f 33 

DD strat2 request packets 

spldevrmp 

Oxf f 34 

Spool Dev RMP segment 

chardevrmp 

Oxf f 35 

Char Dev RMP segment 

syssemrmp 

Oxf f 36 

System Semaphore RMP segment 

romdata 

Oxf f 37 

ROM data 

libpath 

Oxf f 38 

LDR LibPath 

jfnf lags 

Oxf f39 

JFN flags 

jfntable 

Oxf f 3a 

JFN table 

ptouvirt 

Oxf f 3b 

PhysToUVirt 

tkr3stack 

Oxf f 3c 

Ring 3 stack 

tkr2stack 

Oxf f 3d 

Ring 2 stack 

tkenv 

Oxf f 3e 

User Environment 

tktib 

Oxf f 3f 

Thread Information Block 

reqpkt 1 

Oxf f40 

DD strati request packets 

allocphys 

Oxf f41 

Allocated via DevHlp AllocPhys 

khbdon 

Oxf f 42 

Unusable donated heap page 
owner 

krhrwlm 

Oxf f 43 

Resident R/W IMeg mem heap 
owner 

krhrolm 

Oxf f 44 

Resident R/W IMeg mem heap 
owner 

mmph 

Oxf f 45 

dekko mapped memory 

pageio 

Oxf f46 

pageio per-swap-f ile save 
block 

f sreclok 

Oxf f 47 

record lock record owner 
File System Drivers 

fsdl 

Oxf f48 

FSD 1 

f sd2 

Oxf f 4 9 

FSD 2 

f sd3 

Oxf f 4a 

FSD 3 

f sd4 

Oxf f 4b 

FSD 4 

f sd5 

Oxf f 4c 

FSD 5 



f sd6 

Oxf f 4d 

FSD 6 

f sd7 

Oxf f 4e 

FSD 7 

f sd8 

Oxf f 4f 

FSD 8 and subsequent 



Device Drivers 

ddl 

Oxf f 50 

device driver 1 

dd2 

Oxf f 51 

device driver 2 

dd3 

Oxf f 52 

device driver 3 

dd4 

Oxf f 53 

device driver 4 

dd5 

Oxf f 54 

device driver 5 

dd6 

Oxf f 55 

device driver 6 

dd7 

Oxf f 56 

device driver 7 

dd8 

Oxf f 57 

device driver 8 

dd9 

Oxf f 58 

device driver 9 

ddlO 

Oxf f 59 

device driver 10 

ddll 

Oxf f 5a 

device driver 11 

ddl 2 

Oxf f 5b 

device driver 12 

ddl 3 

Oxf f 5c 

device driver 13 

ddl 4 

Oxf f 5d 

device driver 14 

ddl 5 

Oxf f 5e 

device driver 15 

ddl 6 

Oxf f 5f 

device driver 16 and 
subsequent 



Miscellaneous Owners 

f sclmap 

Oxf f 60 

cluster map owner 

cdsrmp 

Oxff 61 

Current Directory Structure 
RMP seg 

tom 

Oxf f 62 

Timeout Manager 

abios 

Oxf f 63 

Advanced BIOS 

cache 

Oxff 64 

cache 

dbgdcb 

Oxf f 65 

DBG Debug Control Block 

dbgkdb 

Oxf f 66 

DBG Kernel Debug Block 

dbgwpcb 

Oxff 67 

DBP Watch Point Control Block 

demsft 

Oxf f 68 

DEM SFT array (for FCBs) 

demf onto 

Oxf f 69 

DEM font offsets 

demf ont 

Oxf f 6a 

DEM font data 

devhlp 

Oxf f 6b 

allocated via devhlp AllocPhys 

discard 

Oxf f 6c 

discardable, zero fill object 

doshlp 

Oxf f 6d 

DosHelp segment 

dyndtgp 

Oxf f 6e 

DYN tracepoint parm block 

dyndto 

Oxf f 6f 

dynamic tracepoint 

dyndtot 

Oxf f 7 0 

tmp dynamic trace info 



dynmtel 

Oxf f 71 

DYN MTE dynamic trace link 

emalloc 

0xff72 

EM8 6 malloc ( ) 

emtss 

Oxf f73 

EM8 6 TSS 

device 

Oxf f74 

installed device driver 

infoseg 

Oxf f75 

infoseg (local or global) 

initmsg 

Oxf f 7 6 

INIT saved message 

init 

Oxf f 77 

generic init-time only 

intdirq 

Oxf f78 

INT IRQ info 

intstack 

Oxf f 7 9 

interrupt stack 

iopllist 

Oxf f 7a 

List of modules with IOPL 

kdbalias 

Oxf f 7b 

Kernel debugger alias 

kdbsym 

Oxf f7c 

Kernel debugger symbol 

kmhook 

Oxf f 7d 

KM hook info 

ksem 

Oxf f 7e 

KSEM semaphore 

lbdd 

Oxf f 7 f 

loadable base device driver 

lid 

Oxf f 80 

ABIOS logical identifier 

monitor 

Oxf f 81 

monitor segment 

mshare 

Oxf f 82 

named-shared 

mshrmp 

Oxf f 83 

RMP having mshare records 

nmi 

Oxf f 84 

non maskable interrupt 

npx 

Oxf f 85 

287/387 save area 

orphan 

Oxf f 86 

orphaned segment 

prof 

Oxf f 87 

profile support 

ptogdt 

Oxf f 88 

Allocated via 
dh_allocateGDTSe lector 

ptovirt 

Oxf f 89 

PhysToVirt 

puse 

Oxf f 8a 

Page Usage 

pusetmp 

Oxf f 8b 

tmp Page Usage 

perfview 

Oxf f 8c 

Perfview 

qscache 

Oxf f 8d 

QuerySysInfo cache 

ras 

Oxf f 8e 

RAS segment 

resource 

Oxf f 8f 

Resource BMP segment 

sysserv 

Oxff 90 

system service 

timer 

Oxff 91 

timer services segment 

traphe 

Oxff 92 

TRAP Hard Error 



File System Owners 

fsbuf 

Oxff 93 

file system buffer 

cdevtmp 

Oxff 94 

Char DEV TMP 

f sc 

Oxf f 95 

FSC segment 

dpb 

Oxf f 96 

DPB 



eatmp 

Oxff 97 

fat EA TMP 

fatsrch 

Oxff 98 

fat search segment 

gnotify 

Oxff 99 

FindNotify global segment 

pnotify 

Oxff 9a 

FindNotify private segment 

fsh 

Oxff 9b 

installable file sys helper 

if s 

Oxff 9c 

installable file system 

mf sd 

Oxff 9d 

mini file system 

mft 

Oxf f 9e 

master file table 

npipebuf 

Oxff 9f 

Named pipe I/O buffer segment 

pipe 

Oxf f aO 

pipe 

sft 

Oxf f al 

system file table 

vpb 

Oxf f a2 

volume parameter block 
Loader Owners 

ldcache 

Oxf f a3 

Loader Instance Data Cache 

ldrdld 

Oxf f a4 

LDR Dynamic Load record 

invalid 

Oxf f a5 

Cache being made 

ldrmte 

Oxf f a6 

mte 

ldrpath 

Oxf f a7 

LDR MTE path 

ldrnres 

Oxf f a8 

LDR non-resident names 

protl6 

Oxf f a9 

Protect 16 list 

Boot Loader and Kernel Owners 

os2krnl 

Oxf f aa 

os2krnl load image 

os21dr 

Oxf fab 

os21dr load image 

ripl 

Oxf f ac 

Remote IPL (remote boot) 
Page Manager Owners 

pgalias 

Oxf fad 

Temporary page manager aliases 

pgbuf 

Oxf f ae 

PG loader and swapper buffer 

pgcrpte 

Oxf f af 

PG Compat . region page table 

dbgalias 

OxffbO 

debugger alias pte 

pgdir 

Oxffbl 

PG Page directory 

pgkstack 

Oxf fb2 

kernel stack region 

pgvp 

Oxf fb3 

VP array 

pgpf 

Oxf fb4 

PF array 

pgprt 

Oxf fb5 

Page Range Table 

pgsyspte 

Oxf fb6 

PG System page tables 
Selector Manager Owners 

gdt 

Oxf fb7 

SEL GDT 

selheap 

Oxf fb8 

Selector-mapped heap block 

ldt 

Oxf fb9 

SEL LDT 

lock 

Oxf fba 

SEL Lock 



selnop 

Oxffbb 

NO-OP Locks 

seluvirt 

Oxffbc 

SEL UVIRT mapping 



Semaphore Owners 

semmisc 

Oxffbd 

SEM Miscellaneous 

semmuxq 

Oxf fbe 

SEM Mux Queue 

semopenq 

Oxffbf 

SEM Open Queue 

semrec 

Oxf f cO 

SEM SemRecord 

semstr 

Oxf f cl 

SEM string 

semstruc 

Oxf f c2 

SEM Main structure 

semtable 

Oxf f c3 

SEM Private/Shared table 



Swapper Owners 

smdfh 

Oxf f c4 

SM Disk Frame Heap 

smsfn 

Oxf f c5 

SM SFN array 

smsf 

Oxf f c6 

SM Swap Frame 



Tasking Owners 

tkextlst 

Oxf f c7 

TK Exit List record 

tkkmreg 

Oxf f c8 

TK dispatch (KM) registers 

tklibif 

Oxf f c9 

TK Liblnit Free Notification 
record 

tklibi 

Oxf f ca 

TK Liblnit record 

ptda 

Oxf f cb 

TK PTDA 

tcb 

Oxf fee 

TK TCB 

tsd 

Oxf fed 

TK TSD 



VDD, VDH, VDM Owners 

vddblkh 

Oxf fee 

VDD block header 

vddblk 

Oxf f cf 

VDD memory block 

vddcf str 

OxffdO 

VDD config.sys string 

vddctmp 

Oxffdl 

VDD creation tmp allocation 

vddep 

Oxf fd2 

VDD Entry Point 

vddheaph 

Oxf fd3 

VDD heap header 

vddheap 

Oxf fd4 

heap objects to load VDDs 

vddhook 

Oxf fd5 

VDD hook 

vddla 

Oxf fd6 

VDD Linear Arena header 

vddlr 

Oxf fd7 

VDD Linear arena Record 

vddmod 

Oxf fd8 

VDD module record 

vddopen 

Oxf fd9 

open VDD record 

vddpddep 

Oxf fda 

VDD PDD Entry Point 

vddproc 

Oxffdb 

VDD procedure record 

vddstr 

Oxffdc 

VDD string 

vdhfhook 

Oxffdd 

VDH fault hook 



vdhalloc 

Oxf fde 

VDH services resident memory 

vdhswap 

Oxffdf 

VDH services swappable memory 

vdmalias 

Oxf feO 

VDM Alias 



Virtual Memory Manager Owners 

vmah 

Oxf fel 

VM 

arena header 

vmal 

Oxf fe2 

VM 

Alias Record 

vmar 

Oxf fe3 

VM 

Arena Record 

vmbmap 

Oxf fe4 

VM 

Location Bitmap 

vmco 

Oxf fe5 

VM 

Context Record 

vmdead 

Oxf fe6 

VM 

Dead Object 

vmhsh 

Oxf fe7 

VM 

Location Hash Table 

vmkrhb 

Oxf fe8 

VM 

* UNKNOWN* busy KRHB 

vmkrhf 

Oxf fe9 

VM 

free KRHB 

vmkrhl 

Oxf fea 

VM 

end KRHB 

vmkrhro 

Oxf feb 

VM Public Kernel Resident R/O 
Heap 

vmkrhrw 

Oxf fee 

VM Public Kernel Resident R/W 
Heap 

vmkshd 

Oxf fed 

VM 

Swappable Heap Descriptor 

vmkshro 

Oxf fee 

VM Public Kernel Swappable R/O 
Heap 

vmkshrw 

Oxf fef 

VM Public Kernel Swappable R/W 
Heap 

vmllock 

Oxf f f 0 

VM 

long term lock manager 

vmob 

Oxf f f 1 

VM 

Object Record 

vmsgs 

Oxf f f 2 

VM 

Screen Group Switch record 

vmbmp 1 6 

Oxf f f 3 

VM 

Temp buf (BMP16) 

shrind 

Oxf f f 4 

reserved for shared indicator 

give 

Oxf f f 5 

giveable segment 

get 

Oxf f f 6 

gettable segment 

giveget 

Oxf f f 7 

giveable and gettable segment 

preload 

Oxf f f 8 

Loader's preload object 


DevHIp Function Cross-reference 


The following table is a cross-reference for DevHIp function names with request code. The request code is loaded into the DL register before 
calling Device_Help. 


Function Name 


Code Description 



DevHlp_SchedClock 

0x0 

DevHlp_DevDone 

0x1 

DevHlp_Yield 

0x2 

DevHlp_TC Yield 

0x3 

DevHlp_ProcBlock 

0x4 

DevHlp_ProcRun 

0x5 

DevHlp_SemRequest 

0x6 

DevHlp_SemClear 

0x7 

DevHlp_SemHandle 

0x8 

DevHlp_PushRequest 

0x9 

DevHlp_PullRequest 

OxA 

DevHlp_PullParticular 

OxB 

DevHlp_Sort Request 

OxC 

DevHlp_AllocReqPacket 

OxD 

DevHlp_FreeReqPacket 

OxE 

DevHlp_QueueInit 

OxF 

DevHlp_QueueFlush 

0x10 

DevHlp_QueueWrite 

0x11 

DevHlp_QueueRead 

0x12 

DevHlp_Lock 

0x13 

DevHlp_Unlock 

0x14 

DevHlp_PhysToVirt 

0x15 

DevHlp_VirtToPhys 

0x1 6 

DevHlp_PhysToUVirt 

0x17 

DevHlp_AllocPhys 

0x18 

DevHlp_FreePhys 

0x19 

DevHlp_SetROMVector 

OxlA 

DevHlp_SetIRQ 

OxlB 

DevHlp_UnSet IRQ 

OxlC 

DevHlp_Set Timer 

OxlD 

DevHlp_Re set Timer 

OxlE 

DevHlp_MonitorCreate 

OxlF 

DevHlp_Register 

0x20 

DevHlp_DeRegister 

0x21 

DevHlp_MonWrite 

0x22 

DevHlp_MonFlush 

0x23 

DevHlp_GetDOSVar 

0x24 

DevHlp_SendEvent 

0x25 

DevHlp_ROMCritSection 

0x26 

DevHlp_VerifyAccess 

0x27 


Called each timer tick 
Device I/O complete 
yield CPU if resched set 
yield to time critical task 
Block on event 
Unblock process 
claim a semaphore 
release a semaphore 
obtain a semaphore handle 
Push the request 
Pull next request from Q 
Pull a specific request 
Push request in sorted order 
allocate request packet 
free request packet 
Init/Clear char queue 
flush queue 

Put a char in the queue 
Get a char from the queue 
Lock seqment 
Unlock segment 

convert physical address to virtual 

convert virtual address to physical 

convert physical to LDT 

allocate physical memory 

free physical memory 

set a ROM service routine vector 

set an IRQ interrupt 

unset an IRQ interrupt 

set timer request handler 

unset timer request handler 

create a monitor 

install a monitor 

remove a monitor 

pass data records to monitor 

remove all data from stream 

Return pointer to DOS variable 

an event occurred 

ROM Critical Section 

Verify access to memory 



DevHlp_RAS 0x28 
DevHlp_ABIOSGetParms 0x29 
DevHlp_AttachDD 0x2A 
DevHlp_InternalError 0x2B 
DevHlp_ModifyPriority 0x2C 
DevHlp_AllocGDTSelector 0x2D 
DevHlp_PhysToGDTSelector 0x2E 
DevHlp_RealToProt 0x2F 
DevHlp_ProtToReal 0x30 
DevHlp_EOI 0x31 
DevHlp_UnPhysToVirt 0x32 
DevHlp_TickCount 0x33 
DevHlp_GetLIDEntry 0x34 
DevHlp_FreeLIDEntry 0x35 
DevHlp_ABIOSCall 0x36 
DevHlp_ABIOSCommonEntry 0x37 
DevHlp_GetDeviceBlock 0x38 
DevHlp_RegisterStackUsag 0x3A 
DevHlp_LogEntry 0x3B 
DevHlp_VideoPause 0x3C 
DevHlp_Save_Message 0x3D 
DevHlp_SegRealloc 0x3E 
DevHlp_PutWaitingQueue 0x3F 
DevHlp_GetWaitingQueue 0x40 
DevHlp_PhysToSys 0x41 
DevHlp_PhysToSysHook 0x42 
DevHlp_RegisterDeviceClass 0x43 
DevHlp_RegisterPDD 0x50 

DevHlp_RegisterBeep 0x51 

DevHlp_Beep 0x52 
DevHlp_FreeGDTSelector 0x53 
DevHlp_PhysToGDTSel 0x54 

DevHlp_VMLock 0x55 
DevHlp_VMUnlock 0x56 
DevHlp_VMAlloc 0x56 
DevHlp_VMFree 0x58 
DevHlp_VMProcessToGlobal 0x59 
DevHlp_VMGlobalToProcess 0x5A 


Put info in RAS trace buffer 
Get ABIOS Calling Parms 
Attach to a device driver 
Signal an internal error 
Undocumented (used by PM) 

Allocate GDT Selectors 

Convert phys addr to GDT sel 

Change from real to protected mode 

Change from protected to real mode 

Send EOI to PIC 

mark completion of PhysToVirt 

modify timer 

Obtain Logical ID 

Release Logical ID 

Call ABIOS 

Invoke Common Entry Point 

Get ABIOS Device Block 

Register for stack usage 

Place data in log buffer 

Video pause on/off - D607 

Save msg in Syslnit Message Table 

Realloc DD protect mode segment 

Put I/O request on waiting queue 

Get I/O request from waiting queue 

Address conversion for the AOX 

Address conversion for the AOX 

Register DC entry point 

Register PDD entry point with VDM 
manager for later PDD-VDD communication 

register PTD beep service entry point 
with kernel 

preempt beep service via PTD 

Free allocated GDT selector 

Convert Phys Addr to GDT sel with given 
access 

Lock linear address range 
Unlock address range 
Allocate memory 
Free memory or mapping 

Create global mapping to process memory 
Create process mapping to global memory 



DevHlp_VirtToLin Ox5B 
DevHlp_LinToGDTSe lector 0x5C 
DevHlp_GetDescInf o 0x5D 
DevHlp_LinToPageList 0x5E 
DevHlp_PageListToLin 0x5F 
DevHlp_PageListToGDTSe lector 0x60 
DevHlp_RegisterTmrDD 0x61 
DevHlp_RegisterPerfCtrs 0x62 
DevHlp_AllocateCtxHook 0x63 
DevHlp_FreeCtxHook 0x64 
DevHlp_ArmCtxHook 0x65 
DevHlp_VMSetMem 0x66 
DevHlp_OpenEventSem 0x67 
DevHlp_CloseEventSem 0x68 
DevHlp_PostEventSem 0x69 
DevHlp_ResetEventSem 0x6A 
DevHlp_RegisterFreq 0x6B 

DevHlp_DynamicAPI 0x6C 
DevHlp_ProcRun2 0x6D 
DevHlp_CreateIntl3VDM 0x6E 

DevHlp_RegisterKrnlExit 0x6F 
DevHlp_PMPostEventSem 0x70 
DevHlp_AcquireSpinLock 0x71 
DevHlp_ReleaseSpinLock 0x72 
DevHlp_InitIntMouseCursorData 0x73 
DevHlp_StartIntMouseCursor 0x74 
DevHlp_EndIntMouseCursor 0x75 
DevHlp_Port_IO 0x76 
DevHlp_SetIRQMask 0x77 
DevHlp_GetIRQMask 0x78 
DevHlp_CreateSpinLock 0x79 
DevHlp_FreeSpinLock 0x7A 
DevHlp_KillProc 0x7D 
DevHlp_QSysState 0x7E 
DevHlp_OpenFile 0x7F 
DevHlp_CloseFile 0x80 
DevHlp_ReadFile 0x81 
DevHlp_ReadFileAt 0x82 


Convert virtual address to linear 

Convert linear address to virtual 

Return descriptor information 

build pagelist array from lin addr 

map page list array to lin addr 

map page list array to GDT sel. 

Register TMR Device Driver. 

Register device driver perf. ctrs (PVW) 

Allocate a context hook 

Free a context hook 

Arm a context hook 

commit /decommit memory 

open an event semaphore 

close an event semaphore 

post an event semaphore 

reset an event semaphore 

register PTD freq service entry point 
with kernel 

add a dynamic API 

Unblock process via procrun2 

Create Intl3 VDM (Internal Only) 
OEMINT13 

Used to capture Kernel Exits F78693 
PM Post Event Semaphore 
acquire Spin Lock (SMP only) 
release Spin Lock (SMP only) 

Initialize Mouse/Cursor Data (SMP only) 
Start Int Time Mouse/Cursor (SMP only) 
End Int Time Mouse/Cursor (SMP only) 
Port I/O (SMP only) 

Set/Unset an IRQ Mask (SMP only) 
Retrieve an IRQ Mask state (SMP only) 
create Spin Lock (SMP only) 
free Spin Lock (SMP only) 

Kill Proc 

Query System State 
Ring-0 File system Write 
Ring-0 File system Seek 
Ring-0 File system Read 
File system Read at (seek) 



DevHlp_RegisterKDD 


0x83 Register Driver with kernel debugger 


Device Driver Strategy Commands Cross-reference 


The following table is a cross-reference for Device Driver strategy routine command codes. The command code is located in the PktCmd 
field of the Strategy 1 Request Packet. 


Name 

Bit Mask 

Description 

CMDInit 

0x0 

INIT command 

CMDMedChk 

0x1 

Media Check 

CMDBldBPB 

0x2 

build BPB 

CMDIOCTLR 

0x3 

reserved for 3.x compatab: 

CMDINPUT 

0x4 

read data from device 

CMDNDR 

0x5 

non-destructive read 

CMD Inputs 

0x6 

input status 

CMDInputF 

0x7 

input flush 

CMDOUTPUT 

0x8 

write data to device 

CMDOUTPUTV 

0x9 

write data and verify 

CMDOutputS 

Oxa 

output status 

CMDOutputF 

Oxb 

output flush 

CMDIOCTLW 

Oxc 

reserved for 3.x compatab: 

CMDOpen 

Oxd 

device open 

CMDClose 

Oxe 

device close 

CMDRemMed 

Oxf 

is media removable 

CMDGenlOCTL 

0x10 

Generic IOCTL 

CMDResMed 

0x11 

reset media uncertain 

CMDGetLogMap 

0x12 


CMDSetLogMap 

0x13 


CMDDe Install 

0x14 

De-Install driver 


0x15 

reserved 

CMDPartf ixeddisks 

0x1 6 

Partitionable Fixed Disks 


CMDGetfd_logunitsmap 0x17 


CMD Input Bypass 
CMDOutput Bypass 
CMDOutputBypassV 
CMDInitBase 
CMDShutdown 


0x18 

0x19 

Oxla 

Oxlb 

Oxlc 

Oxld 


Get Fixed Disk/Logical Unit Map 
cache bypass read data 
cache bypass write data 
cache bypass write data and verify 
INIT command for base DDs 

query for extended capability 


CMDGetDevSupport 



Oxle 

CMD I nit Complete 

0x1 f 

CMDSaveRestore 

0x20 


0x21 

0x60 

CMDAddOnP rep 

0x61 

CMDStar 

0x62 

CMD St op 

0x63 


reserved 

Init complete for all DD ' s 
reserved 

Prepare for add on 
start console output 
stop console output 


System Ordinal Cross-reference 


The following table is a cross-reference for System Entry points by Ordinal number. 


Ord Entry Point 

1 DOSICREATETHREAD 

2 DOSCWAIT 

3 DOSENTERCRITSEC 

4 DOSIEXECPGM 

5 DOSEXIT 

6 DOSEXITCRITSEC 

7 DOSEXITLIST 

8 DOS GET INFOS EG 

9 DOSGETPRTY 

10 DOSKILLPROCESS 

11 DOSSETPRTY 

12 DOSPTRACE 

13 DOSHOLDSIGNAL 

14 DOSSETSIGHANDLER 

15 DOSFLAGPROCESS 

16 DOSMAKEPIPE 

17 DOSISYSSEMCLEAR 

18 DOSISEMREQUEST 

19 DOSISYSSEMSET 

20 DOSSEMSETWAIT 

21 DOSISEMWAIT 

22 DOSMUXSEMWAIT 

23 DOSCLOSESEM 



24 


DOSCREATESEM 


25 DOSOPENSEM 

26 DOSRESUMETHREAD 

27 DOSSUSPENDTHREAD 

28 DOSSETDATETIME 

29 DOSTIMERASYNC 

30 DOSTIMERSTART 

31 DOSTIMERSTOP 

32 DOSSLEEP 

33 DOSGETDATETIME 

34 DOSALLOCSEG 

35 DOSALLOCSHRSEG 

36 DOS GETS HRS EG 

37 DOSGIVESEG 

38 DOSREALLOCSEG 

39 DOSFREESEG 

40 DOSALLOCHUGE 

41 DOSGETHUGESHIFT 

42 DOSREALLOCHUGE 

43 DOSCREATECSALIAS 

44 DOSLOADMODULE 

45 DOSGETPROCADDR 

46 DOSFREEMODULE 

47 DOSGETMODHANDLE 

48 DOSGETMODNAME 

49 DOSGETMACHINEMODE 

50 DOSBEEP 

51 DOSCLIACCESS 

52 DOSDEVCONFIG 

53 DOS DEVI OCTL 

54 DOSSGSWITCH 

55 DOSSGSWITCHME 

56 DOSBUFRESET 

57 DOSCHDIR 

58 DOSCHGFILEPTR 

59 DOSCLOSE 

60 DOSDELETE 

61 DOS DUP HANDLE 

62 DOSFILELOCKS 


63 DOSFINDCLOSE 



64 DOSFINDFIRST 

65 DOSFINDNEXT 

66 DOSMKDIR 

67 DOSMOVE 

68 DOSNEWSIZE 

69 DOSPORTACCESS 

70 DOSOPEN 

71 DOSQCURDIR 

72 DOSQCURDISK 

73 DOS QFHAND STATE 

74 DOSQFILEINFO 

75 DOSQFILEMODE 

76 DOSQFSINFO 

77 DOSQHANDTYPE 

78 DOSQVERIFY 

79 DOS I READ 

80 DOSRMDIR 

81 DOSSELECTDISK 

82 DOS SETFHAND STATE 

83 DOSSETFILEINFO 

84 DOSSETFILEMODE 

85 DOSSETMAXFH 

86 DOSSETVERIFY 

87 DOSIWRITE 

88 DOSSYSTEMSERVICE 

89 DOSSETVEC 

90 DOSSYSTRACE 

91 DOSGETENV 

92 DOSGETVERSION 

93 DOS QTRACE INFO 

94 DOSGETPID 

95 DOSOPEN2 

96 DOSLIBINIT 

97 DOSSETFSINFO 

98 DOS QPATH INFO 

99 DOS DEVI OCTL2 

100 DOSICANONICALIZE 

101 DOSSETFGND 

102 DOSSWAPTASKINIT 



103 DOSREADPHYS 

104 DOSSETPATHINFO 

105 DOSSGSWITCHPROC2 

106 STRUCHECK 

107 STRURESUPDATE 

108 DOSISETRELMAXFH 

109 DOS IDEVIOCTL 

110 DOS32FORCEDELETE 

111 DOS32KILLTHREAD 

112 DOS QUERYRAS INFO 

113 DOS 3 2 DUMP PROCESS 

114 DOS32SUPPRESSPOPUPS 

118 DOSOPEN2COMPT 

119 DOSGETSTDA 

120 DOSERROR 

121 DOSGETSEG 

122 DOSLOCKSEG 

123 DOS UNLOCKS EG 

124 DOSSGSWITCHPROC 

125 DOSIRAMSEMWAKE 

126 DOSS I ZESEG 

127 DOSMEMAVAIL 

128 DOSIRAMSEMREQUEST 

129 DOSPHYSICALDISK 

130 DOSGETCP 

131 DOSISETCP 

132 DOS GLOB ALS EG 

133 DOSPROFILE 

134 DOSSENDSIGNAL 

135 DOSHUGESHIFT 

136 DOSHUGEINCR 

137 DOSREAD 

138 DOSWRITE 

139 DOSERRCLASS 

140 DOSSEMREQUEST 

141 DOSSEMCLEAR 

142 DOSSEMWAIT 

143 DOSSEMSET 

144 DOSEXECPGM 

145 DOSCREATETHREAD 



146 DOSSUBSET 

147 DOSSUBALLOC 

148 DOSSUBFREE 

149 DOS RE ADAS YNC 

150 DOSWRITEASYNC 

151 DOSSEARCHPATH 

152 DOSSCANENV 

153 DOSSETCP 

154 DOS QP ROC STATUS 

155 DOSGETRESOURCE 

156 DOSGETPPID 

157 DOSCALLBACK 

158 DOSICALLBACK 

159 DOSRETFORWARD 

160 DOSR2STACKREALLOC 

161 DOSFSRAMSEMREQUEST 

162 DOS FS RAMS EMCLEAR 

163 DOSQAPPTYPE 

164 DOSSETPROCCP 

165 DOSDYNAMICTRACE 

166 DOS QSYS INFO 

167 DOSIMAKENMPIPE 

168 DOSICALLNMPIPE 

169 DOSICONNECTNMPIPE 

170 DOSIDISCONNECTNMPIPE 

171 DOSIPEEKNMPIPE 

172 DOSIQNMPIPEINFO 

173 DOSIQNMPHANDSTATE 

174 DOS I SETNMP HAND STATE 

175 DOSITRANSACTNMPIPE 

176 DOSIWAITNMPIPE 

177 DOSISETNMPIPESEM 

178 DOSIQNMPIPESEMSTATE 

179 DOS I RAWREADNMP I PE 

180 DOSIRAWWRITENMPIPE 

181 DOSFSATTACH 

182 DOS QFS ATTACH 

183 DOSFSCTL 

184 DOSFINDFIRST2 



185 D0SMKDIR2 


186 DOSFILEIO 

187 DOSFINDNOTIFYCLOSE 

188 DOSFINDNOTIFYFIRST 

189 DOSFINDNOTIFYNEXT 

190 DOSSETTRACEINFO 

191 DOSEDITNAME 

192 DOSLOGMODE 

193 DOSLOGENTRY 

194 DOSGETLOGBUFFER 

195 DOSLOGREGISTER 

196 DOSLOGREAD 

197 DOSFINDFROMNAME 

198 DOSOPLOCKRELEASE 

199 DOSOPLOCKWAIT 

200 DOSICOPY 

201 DOSCOPY 

202 DOS IQAPPTYPE 

203 DOSFORCEDELETE 

204 DOS ENUMATTRI BUTE 

205 DOSOPLOCKSHUTDOWN 

206 DOSSHUTDOWN 

207 DOS GETRE SOURCE 2 

208 DOS FREERE SOURCE 

209 DOS32SETMAXFH 

210 DOS32SETVERIFY 

211 DOS32ERRCLASS 

212 DOS32ERROR 

213 DOSCREATEVDM 

214 DOSMAXPATHLEN 

215 DOSPAGESIZE 

216 DOSLOCALINFO 

217 DOSGLOBALINFO 

218 DOS32SETFILEINFO 

219 DOS32SETPATHINFO 

220 DOS32SETDEFAULTDISK 

221 DOS32SETFHSTATE 

222 DOS32SETFSINFO 

223 DOS32QUERYPATHINFO 


224 DOS32QUERYHTYPE 



225 DOS 3 2 QUERY VERIFY 

226 DOS32DELETEDIR 

227 DOS32SCANENV 

228 DOS32SEARCHPATH 

229 DOS32SLEEP 

230 DOS32GETDATETIME 

231 DOS32DEVCONFIG 

232 DOS32ENTERCRITSEC 

233 DOS32EXITCRITSEC 

234 DOS32EXIT 

235 DOS32KILLPROCESS 

236 DOS32SETPRIORITY 

237 DOS32RESUMETHREAD 

238 DOS32SUSPENDTHREAD 

239 DOS32CREATEPIPE 

240 DOS32CALLNPIPE 

241 DOS32CONNECTNPIPE 

242 DOS32DISCONNECTNPIPE 

243 DOS32CREATENPIPE 

244 DOS32PEEKNPIPE 

245 DOS32QUERYNPHSTATE 

246 DOS 3 2 RAWREADNP I PE 

247 DOS32RAWWRITENPIPE 

248 DOS32QUERYNPIPEINFO 

249 DOS32QUERYNPIPESEMSTATE 

250 DOS32SETNPHSTATE 

251 DOS32SETNPIPESEM 

252 DOS32TRANSACTNPIPE 

253 DOS32WAITNPIPE 

254 DOS32RESETBUFFER 

255 DOS32SETCURRENTDIR 

256 DOS32SETFILEPTR 

257 DOS32CLOSE 

258 DOS32COPY 

259 DOS32DELETE 

260 DOS 3 2 DUP HANDLE 

261 DOS32EDITNAME 

263 DOS32FINDCLOSE 

264 DOS32FINDFIRST 



265 DOS32FINDNEXT 

266 DOSOPENVDD 

267 DOSREQUESTVDD 

268 DOS CLOSE VDD 

269 DOS32FSATTACH 

270 DOS 3 2 CREATED I R 

271 DOS32MOVE 

272 DOS32SETFILESIZE 

273 D0S320PEN 

274 DOS32QUERYCURRENTDIR 

275 DOS32QUERYCURRENTDISK 

276 DOS32QUERYFHSTATE 

277 DOS32QUERYFSATTACH 

278 DOS32QUERYFSINFO 

279 DOS32QUERYFILEINFO 

280 DOS32WAITCHILD 

281 DOS 3 2 READ 

282 DOS32WRITE 

283 DOS32EXECPGM 

284 DOS32DEVIOCTL 

285 DOS32FSCTL 

286 DOS32BEEP 

287 DOS32PHYSICALDISK 

288 DOS32SETCP 

289 DOS32SETPROCESSCP 

290 DOS32STOPTIMER 

291 DOS32QUERYCP 

292 DOS 3 2 SETDATETIME 

293 THK3 2 ALLOC BLOCK 

294 THK32FREEBLOCK 

295 THK32R3DS 

296 DOS32EXITLIST 

297 DOS32ALLOCPROTECTEDMEM 

298 DOS32ALIASMEM 

299 DOS32ALLOCMEM 

300 DOS32ALLOCSHAREDMEM 

301 DOS32GETNAMEDSHAREDMEM 

302 DOS32GETSHAREDMEM 

303 DOS32GIVESHAREDMEM 

304 DOS32FREEMEM 



305 DOS32SETMEM 

306 DOS32QUERYMEM 

307 DOS32QUERYMEMSTATE 

308 D0S320PENVDD 

309 DOS32REQUESTVDD 

310 DOS 3 2 CLOSE VDD 

311 DOS32CREATETHREAD 

312 DOS32GETINFOBLOCKS 

313 DOSALLOCPROTSEG 

314 DOSALLOCSHRPROTSEG 

315 DOSALLOCPROTHUGE 

316 DOS32DYNAMICTRACE 

317 DOS32DEBUG 

318 DOS 3 2 LOADMODULE 

319 DOS32QUERYMODULEHANDLE 

320 DOS32QUERYMODULENAME 

321 DOS32QUERYPROCADDR 

322 DOS32FREEMODULE 

323 DOS32QUERYAPPTYPE 

324 DOS32CREATEEVENTSEM 

325 D0S320PENEVENTSEM 

326 DOS32CLOSEEVENTSEM 

327 DOS32RESETEVENTSEM 

328 DOS32POSTEVENTSEM 

329 DOS32WAITEVENTSEM 

330 DOS32QUERYEVENTSEM 

331 DOS32CREATEMUTEXSEM 

332 D0S320PENMUTEXSEM 

333 DOS32CLOSEMUTEXSEM 

334 DOS32REQUESTMUTEXSEM 

335 DOS32RELEASEMUTEXSEM 

336 DOS32QUERYMUTEXSEM 

337 DOS32CREATEMUXWAITSEM 

338 D0S320PENMUXWAITSEM 

339 DOS32CLOSEMUXWAITSEM 

340 DOS32WAITMUXWAITSEM 

341 DOS32ADDMUXWAITSEM 

342 DOS32DELETEMUXWAITSEM 

343 DOS 3 2 QUERYMUXWAI TSEM 



344 DOS32SUBSETMEM 

345 DOS32SUBALLOCMEM 

346 DOS32SUBFREEMEM 

347 DOS32SUBUNSETMEM 

348 DOS32QUERYSYSINFO 

349 DOS 3 2 WAIT THREAD 

350 DOS32ASYNCTIMER 

351 DOS32STARTTIMER 

352 DOS32GETRESOURCE 

353 DOS32FREERESOURCE 

354 DOS32SETEXCEPTIONHANDLER 

355 DOS32UNSETEXCEPTIONHANDLER 

356 DOS32RAISEEXCEPTION 

357 DOS32UNWINDEXCEPTION 

358 DOS32QUERYPAGEUSAGE 

359 DOSQUERYMODFROMCS 

360 DOS 3 2 QUERYMODFROME I P 

361 DOSFPDATAAREA 

362 DOS32TMRQUERYFREQ 

363 DOS 3 2 TMRQUERYT IME 

364 DOS32ALIASPERFCTRS 

365 DOS32CONFIGUREPERF 

366 DOS32DECONPERF 

367 DOS32REGISTERPERFCTRS 

368 DOS32QUERYSYSSTATE 

369 DOS32FLATCS 

370 DOS32FLATDS 

371 DOS32QUERYABIOSSUPPORT 

372 DOS32ENUMATTRIBUTE 

373 DOS 3 2 QUERYDOS PROPERTY 

374 DOS32SETDOSPROPERTY 

375 DOSQUERYDOSPROPERTY 

376 DOSSETDOSPROPERTY 

377 DOS 3 2 PROFILE 

378 DOS32SETSIGNALEXCEPTIONFOC 

379 DOS32SENDSIGNALEXCEPTION 

380 DOS32ENTERMUSTCOMPLETE 

381 DOS32EXITMUSTCOMPLETE 

382 DOS32SETRELMAXFH 

383 MSGPUTMESSAGE 



384 MSGTRUEGETMESSAGE 

385 MSGINSMESSAGE 

386 MSG32 INSERTMESSAGE 

387 MSG32PUTMESSAGE 

388 MSG32TRUEGETMESSAGE 

389 MSGIQUERYMESSAGECP 

390 MSG32 IQUERYMESSAGECP 

391 NLSCASEMAP 

392 NLSGETCOLLATE 

393 NLSGETCTRYINFO 

394 NLSGETDBCSEV 

395 NLS32QUERYCTRYINFO 

396 NLS32QUERYDBCSENV 

397 NLS 3 2 MAP CASE 

398 NLS32QUERYCOLLATE 

399 NP I P EMAKENMP I P E 

400 NPIPEQNMPIPEINFO 

401 NPIPECONNECTNMPIPE 

402 NPIPEDISCONNECTNMPIPE 

403 NP I PEQNMP HAND STATE 

404 NPIPESETNMPHANDSTATE 

405 NPIPEPEEKNMPIPE 

406 NPIPEWAITNMPIPE 

407 NPIPETRANSACTNMPIPE 

408 NPIPECALLNMPIPE 

409 NP I P ERAWRE ADNMP I P E 

410 NPIPERAWWRITENMPIPE 

411 NPIPESETNMPIPESEM 

412 NPIPEQNMPIPESEMSTATE 

413 HPFSSTARTLAZYWRITER 

414 QUE INSTANCED AT A 

415 DOS 3 2 SHUTDOWN 

416 DOS32 ICACHEMODULE 

417 DOS32REPLACEMODULE 

418 DOS 3 2 ACKNOWLEDGES I GNALEXC 

419 DOS32TIB 

420 DOSTMRQUERYFREQ 

421 DOSTMRQUERYTIME 

422 DOSREGISTERPERFCTRS 



423 DOS FLAT TOS EL 

424 DOSSELTOFLAT 

425 DOS32FLATTOSEL 

426 DOS32SELTOFLAT 

427 DOSIODELAYCNT 

428 DOS32SETFILELOCKS 

429 DOS32CANCELLOCKREQUEST 

430 LOGOPEN 

431 LOGCLOSE 

432 LOGADDENTRIES 

433 LOGGETENTRIES 

434 LOGSETSTATE 

435 LOGSETNAME 

436 LOGQUERYSTATE 

437 DOSOPENCHANGENOTIFY 

438 DOSRESETCHANGENOTIFY 

439 DOSCLOSECHANGENOTIFY 

440 D0S320PENCHANGEN0TIFY 

441 DOS32RESETCHANGENOTIFY 

442 DOS32CLOSECHANGENOTIFY 

443 DOSQUERYABIOSSUPPORT 

444 DOS32FORCESYSTEMDUMP 

454 DOS32ALLOCTHREADLOCALMEMORY 

455 DOS 3 2 FREETHREADLOCALMEMORY 
460 DOS32VERIFYPIDTID 

4 64 P T D A_L ANMAN_S E C 
4 65 PTDA_P ID 
4 66 SAS_SEL 

467 TCB_OPCOOKIE 

468 TCB_OP FLAGS 

469 TCB_NEWFLAGS 

470 TCB_USER_ID 

471 TCB_PROC_ID 

472 TCB_F SHARING 

473 TCB_SRVATTRIB 

474 TCB_ALLOWED 

475 TCB_PRTCB 

476 TCB_NUMBER 

477 TCB_THISSFT 
TCB_THISCDS 


478 



479 TKOPTDA 


480 PTDA_CRITSEC 

481 PTDA_HOLDSIGCNT 

482 PTDA_PPTDAPARENT 

483 PTDA_PGDATA 

484 PTDA_HANDLE 

485 PTDA_MODULE 

486 PTDA_LDTHANDLE 

487 PTDA_CODEPAGE_TAG 
4 88 PTDA_JFN_LENGTH 
489 PTDA_JFN_P TABLE 

4 90 PTDA_JFN_FLG_PTR 

491 PTDA_EXTERR_LOCUS 

492 PTDA_EXTERR 

4 93 P T D A_E XT E RR_AC T I ON 
494 PTDA_EXTERR_CLASS 
4 95 PTDA_PP ID 

496 PTDA_PROCTYPE 

497 PTDA_CURRTCB 

498 PTDA_CURRTSD 

499 PTDA_SIGNATURE 

545 DOS32EXCEPTIONCALLBACK 

548 DOS32R3EXCEPTIONDISPATCHER 

549 DOSLIBIDISP 

550 DOSLIBIDISP16 

551 DOSLIBIDISP32 

552 DOSR3EXITADDR 

553 DOS32R3EXITADDR 

554 DOS32 IREAD 
556 DOS32IWRITE 

565 DOSISETFILEINFO 

566 DOSISETPATHINFO 
569 DOSIFINDNEXT 

572 DOS32QUERYRESOURCESIZE 

573 DOS QUERYRE SOURCES I ZE 

574 DOSPMSEMWAIT 

575 DOSPMMUXSEMWAIT 

576 THK 1 6_UN I T HUNK 


577 HT16_STARTUP 



580 DOS32 INITIALI ZEPORTHOLE 

582 DOS32QUERYHEADERINFO 

583 DOS INITIAL I ZEPORTHOLE 

584 DOSQUERYHEADERINFO 

585 MON 3 2 MONREAD 

586 DOS32QUERYPROCTYPE 

587 DOSQUERYPROCTYPE 

588 MON3 2 MONWRITE 

589 DOSISIGDISPATCH 
592 DOS32DLLTERMDISP 

594 DOS32 IRAISEEXCEPTION 

597 DOS32 IQUERYFHSTATE 

598 DOS32 ISETFHSTATE 

599 DOSLDTSEL 

600 DOS32R3FRESTOR 

601 DOSIFINDFIRST 

615 DOS32 IPROTECTWRITE 

617 DOSIPROTECTSETFILEINFO 

618 DOS32 IPROTECTSETFILEINFO 

619 DOS32 IPROTECTSETFHSTATE 

620 DOS32 IPROTECTQUERYFHSTATE 

621 DOS32PROTECTSETFILEPTR 

622 DOSPROTECTCLOSE 

623 DOSPROTECTFILEIO 

624 DOSPROTECTFILELOCKS 

625 DOSIPROTECTREAD 

626 DOSIPROTECTWRITE 

627 DOSPROTECTNEWSIZE 

628 DOSPROTECTOPEN 

629 DOS PROTECTQFHAND STATE 

630 DOS PROTECTSETFHAND STATE 

631 DOSPROTECTQFILEINFO 

632 DOSPROTECTSETFILEINFO 

634 DOSPROTECTCHGFILEPTR 

635 DOS PROTECTENUMATTRI BUTE 

636 DOS 3 2 PROTECTENUMATTRI BUTE 

637 DOS32PROTECTOPEN 

638 DOS32PROTECTCLOSE 

639 DOS32PROTECTSETFILELOCKS 

640 DOS32PROTECTSETFILESI ZE 



641 DOS32PROTECTREAD 

642 DOS32PROTECTWRITE 

643 DOS32PROTECTSETFILEINFO 

644 DOS32PROTECTSETFHSTATE 

645 DOS32PROTECTQUERYFHSTATE 

646 DOS32PROTECTQUERYFILEINFO 

647 DOS32 IPROTECTREAD 

649 MSGCLOSEMESSAGEFILE 

650 DOSLDRDIRTYWORKER 

651 DOS1 6LDRDIRTYWORKER 

661 QUEDOS32READQUEUE 

662 QUEDOS32PURGEQUEUE 

663 QUEDOS32CLOSEQUEUE 

664 QUEDOS32QUERYQUEUE 

665 QUEDOS32PEEKQUEUE 

666 QUEDOS32WRITEQUEUE 

667 QUED0S320PENQUEUE 

668 QUEDOS32CREATEQUEUE 

669 SMGDOS32STARTSESSION 

670 SMGDOS32SELECTSESSION 

671 SMGDOS32SETSESSION 

672 SMGDOS 3 2 STOP SESSION 

673 SMGREGI STERNOT I F I CAT I ON 

674 QUEDOSREADQUEUE 

675 QUEDOSPURGEQUEUE 

676 QUEDOSCLOSEQUEUE 

677 QUEDOSQUERYQUEUE 

678 QUEDOSPEEKQUEUE 

679 QUEDOSWRITEQUEUE 

680 QUEDOSOPENQUEUE 

681 QUEDOSCREATEQUEUE 

682 CHRDOSSMGETME 

683 CHRDOSSMFREEMEM 

684 CHRDOSSMGETSGCB 

685 CHRDOSSMINITSGCB 

686 SMGDOSSMSGDOPOPUP 

687 SMGDOS SMS WITCH 

688 SMGDOSSMSERVEAPPREQ 


SMGDOSGETTIMES 



690 SMGDOSSMSETTITLE 

691 SMGDOSSCRUNLOCK 

692 SMGDOSSMDOAPPREQ 

693 SMGDOS STOP SESSION 

694 SMGDOS SELECTSES SION 

695 SMGDOS SCRLOCK 

696 SMGDOS SAVREDRAWWAIT 

697 SMGDOS SAVREDRAWUNDO 

698 SMGDOSSMSGENDPOPUP 

699 SMGDOS SETSES SION 

700 SMGDOSSETMNLOCKTIME 

701 SMGDOSMODEUNDO 

702 SMGDOS STARTSES SION 

703 SMGDOS SMGETSTATUS 

704 SMGDOS SMMODEWAIT 

705 SMGDOS SMTERMI NATE 

706 SMGDOSSMGETAPPREQ 

707 SMGDOSSMINITIALIZE 

708 SMGDOS SMS TART 

709 SMGDOS SMPARENTSWITCH 

710 SMGDOSSMPAUSE 

711 SMGDOS SMHDE INI T 

712 SMGDOSSMPMPRESENT 

713 SMGDOS SMREG I STERDD 

714 SMGDOS SMNOT IF YDD 

715 SMGDOS SMNOT IF YDD 2 

716 SMGDOSSMOPENDD 

717 SMGDOS SMSETSESS I ONTYPE 

718 CHRBASEINIT 

719 MOUDOSGETPTRSHAPE 

720 MOUDOSSETPTRSHAPE 

721 MOUDOSGETNUMMICKEYS 

722 MOUDOSGETTHRESHOLD 

723 MOUDOS SHELL INI T 

724 MOUDOSGETSCALEFACT 

725 MOUDOS FLUSHQUE 

726 MOUDOSGETNUMBUTTONS 

727 MOUDOSCLOSE 

728 MOUDOSSETTHRESHOLD 

729 MOUDOSSETSCALEFACT 



730 MOUDOSGETNUMQUEEL 

731 MOUDOS DEREGISTER 

732 MOUDOSGETEVENTMASK 

733 MOUDOSSETEVENTMASK 

734 MOUDOSOPEN 

735 MOUDOS REMOVEPTR 

736 MOUDOS GE TP TRP OS 

737 MOUDOSREADEVENTQUE 

738 MOUDOS SE TP TRP OS 

739 MOUDOSGETDEVSTATUS 

740 MOUDOSSYNCH 

741 MOUDOS REG IS TER 

742 MOUDOSSETDEVSTATUS 

743 MOUDOS DRAWPTR 

744 MOUDOSINITREAL 

745 KBDDOSSETCUSTXT 

746 KBDDOS PROCESS IN IT 

747 KBDDOSGETCP 

748 KBDDOS CHARI N 

749 KBDDOSSETCP 

750 KBDDOS LOAD INSTANCE 

751 KBDDOSSYNCH 

752 KBDDOS REG IS TER 

753 KBDDOS STRING IN 

754 KBDDOSGETSTATUS 

755 KBDDOS SET STATUS 

756 KBDDOS GETFOCUS 

757 KBDDOS FLUSHBUFFER 

758 KBDDOSXLATE 

759 KBDDOS SWITCHFGND 

760 KBDDOS SHELL INI T 

761 KBDDOSCLOSE 

762 KBDDOS FREEFOCUS 

763 KBDDOSFREE 

764 KBDDOS DEREGISTER 

765 KBDDOS SETFGND 

766 KBDDOSPEEK 

767 KBDDOSOPEN 


KBDDOS GETHWID 



KBDDOSSETHWID 


770 VIODOSENDPOPUP 

771 VIODOSGETPHYSBUF 

772 VIODOSGETANSI 

773 VIODOSFREE 

774 VIODOSSETANSI 

775 VI ODOS DEREGISTER 

776 VIODOSSCROLLUP 
111 VIODOSPRTSC 

778 VIODOSGETCURPOS 

779 VIODOSWRTCELLSTR 

780 VIODOSPOPUP 

781 VIODOSSCROLLRT 

782 VIODOSWRTCHARSTR 

783 VIODOSAVS_PRTSC 

784 VIODOSSETCURPOS 

785 VIODOSSRFUNBLOCK 

786 VIODOSSRFBLOCK 

787 VIODOSSCRUNLOCK 

788 VIODOSWRTTTY 

789 VIODOSSAVE 

790 VIODOSGETMODE 

791 VIODOSSETMODE 

792 VIODOSSCRLOCK 

793 VI ODOS READCELL STR 

794 VIODOSSAVREDRAWWAIT 

795 VIODOSWRTNATTR 

796 VIODOSGETCURTYPE 

797 VIODOSSAVREDRAWUNDO 

798 VIODOSGETFONT 

799 VIODOSREADCHARSTR 

800 VIODOSGETBUF 

801 VIODOSSETCURTYPE 

802 VIODOSSETFONT 

803 VIODOSHETINIT 

804 VIODOSMODEUNDO 

805 VI ODOS SSWS WITCH 

806 VIODOSMODEWAIT 

807 VIODOSAVS_PRTSCTOGGLE 

808 VIODOSGETCP 



809 VIODOS RE STORE 

810 VIODOSSETCP 

811 VIODOSSHOWBUF 

812 VIODOSSCROLLLF 

813 VIODOS REG IS TER 

814 VIODOSGETCONFIG 

815 VIODOSSCROLLDN 

816 VIODOSWRTCHARSTRATT 

817 VIODOSGETSTATE 

818 VIODOSPRTSCTOGGLE 

819 VIODOSSETSTATE 

820 VIODOSWRTNCELL 

821 VIODOSWRTNCHAR 

822 VIODOS SHELL INI T 

823 VIODOS ASSOC I ATE 

824 VIODOSCREATEPS 

825 VIODOSDELETESETID 

826 VIODOSGETDEVICECELLSIZE 

827 VIODOSGETORG 

828 VIODOSCREATELOGFONT 

829 VIODOSDESTROYPS 

830 VIODOSQUERYSETIDS 

831 VIODOSSETORG 

832 VIODOSQUERYFONTS 

833 VIODOSSETDEVICECELLSIZE 

834 VIODOSSHOWPS 

835 VIODOSGETPSADDRESS 

836 VIODOSQUERYCONSOLE 

837 VIODOS REDRAWS I ZE 

838 VIODOSGLOBALREG 

839 XVI ODOSSETCAS TATE 

840 XVIODOSCHECKCHARTYPE 

841 XVIODOSDESTROYCA 

842 XVIODOSCREATECA 

843 VIOCDOSHECKCHARTYPE 

844 XVI ODOSGETCAS TATE 

845 BVSDOSMAIN 

846 BVS DOS REDRAWS I ZE 

847 BVSDOSGETPTRDRAWNAME 



ANSIDOSINJECT 


849 ANSI DOS KEYDEF 

850 ANSIDOSINTERP 

851 BKSDOSMAIN 

852 BMSDOSMAIN 

853 MOUDOSGETHOTKEY 

854 MOUDOSSETHOTKEY 

855 SMGDOSSMSYSINIT 

856 SMGQHKEYBDHANDLE 

857 SMGQHMOUSEHANDLE 

858 CHRQueueRamSem 

859 CHRArray 

860 CHRPIDArray 

861 CHRInitialized 

862 CHRArraySize 
8 63 CHRB VS GLOBAL 

864 CHRSMG INSTANCE 

865 CHRBVH INSTANCE 

115 THK32ALLOCMEM 

116 THK32FREEMEM 

117 THK3 2 ALLOC STACK 
262 THK3 2 FREE STACK 

546 THK32STRLEN 

547 THK32_UNITHUNK 

578 HT1 6_CLEANUP 

579 HT32_STARTUP 
581 HT32_CLEANUP 

590 DOS32PMPOSTEVENTSEM 

591 DOS32PMWAITEVENTSEM 
593 DOS32PMREQUESTMUTEXSEM 

595 DOS32PMWAITMUXWAITSEM 

596 DOS32PM1 6SEMCHK 

866 THK32ALIASMEM 

867 THK32FREEALIAS 

868 THK32ALLOCVARLEN 

869 THK3 2 HANDLEBOUNDARY 

870 THK3 2 HANDLE STRING 

871 THK32DEALLOC 

872 THK32XHNDLR 

873 DOS32SETEXTLIBPATH 



874 DOS32QUERYEXTLIBPATH 

875 DOS32PM1 6SEMRST 

876 DOS32SYSCTL 

998 DOSSETEXTLIBPATH 

999 DOSQUERYEXTLIBPATH 

1000 T32EXITLIST 

1001 T32ALLOCPROTECTEDMEM 

1002 T32ALIASMEM 

1003 T 3 2 ALLOCMEM 

1004 T32ALLOCSHAREDMEM 

1005 T32GETNAMEDSHAREDMEM 

1006 T32GETSHAREDMEM 

1007 T32GIVESHAREDMEM 

1008 T32FREEMEM 

1009 T32SETMEM 

1010 T32QUERYMEM 

1011 T32QUERYMEMSTATE 

1012 T320PENVDD 

1013 T32REQUESTVDD 

1014 T32CLOSEVDD 

1015 T32CREATETHREAD 

1016 T32DYNAMICTRACE 

1017 T32DEBUG 

1018 T32QUERYPROCADDR 

1019 T32CREATEEVENTSEM 

1020 T320PENEVENTSEM 

1021 T32CLOSEEVENTSEM 

1022 T32RESETEVENTSEM 

1023 T32POSTEVENTSEM 

1024 T32WAITEVENTSEM 

1025 T32QUERYEVENTSEM 

1026 T32CREATEMUTEXSEM 

1027 T320PENMUTEXSEM 

1028 T32CLOSEMUTEXSEM 

1029 T32REQUESTMUTEXSEM 

1030 T32RELEASEMUTEXSEM 

1031 T32QUERYMUTEXSEM 

1032 T32CREATEMUXWAITSEM 

1033 T320PENMUXWAITSEM 



1034 T32CLOSEMUXWAITSEM 

1035 T 3 2WAI TMUXWAI TSEM 

1036 T 3 2ADDMUXWAI TSEM 

1037 T32DELETEMUXWAITSEM 

1038 T32QUERYMUXWAITSEM 

1039 T32QUERYSYSINFO 

1040 T32WAITTHREAD 

1041 T32GETRESOURCE 

1042 T32FREERESOURCE 

1043 T32EXCEPTIONCALLBACK 

1044 T32QUERYPAGEUSAGE 

1045 T32FORCESYSTEMDUMP 

1046 TI32ASYNCTIMER 

1047 TI32STARTTIMER 

1048 T32QUERYAB I OS SUPPORT 
104 9 T 3 2QUERYMODFROME I P 

1050 T32ALIASPERFCTRS 

1051 T32CONFIGUREPERF 

1052 T32DECONPERF 

1053 T32REGISTERPERFCTRS 

1054 T32QUERYSYS STATE 

1055 T3 2 I READ 

1056 T32IWRITE 

1057 T32TMRQUERYFREQ 

1058 T32TMRQUERYTIME 

1059 T32IMONREAD 

1060 T32IMONWRITE 

1061 T32QUERYRESOURCESIZE 

1062 T32PROFILE 

1063 T32SETSIGNALEXCEPTIONFOC 

1064 T32SENDSIGNALEXCEPTION 

1065 T32STARTTIMER 

1066 T3 2 STOP TIMER 

1067 T32ASYNCTIMER 

1068 T32INITIALI ZEPORTHOLE 

1069 T32QUERYHEADERINFO 

1070 T32QUERYPROCTYPE 

1071 T32IEXITMUSTCOMPLETE 

1072 T32ICACHEMODULE 


1073 T32DLLTERM 



1074 T32IRAISEEXCEPTION 

1075 T32ACKNOWLEDGESIGNALEXC 

1076 T32QUERYDOSPROPERTY 

1077 T32SETDOSPROPERTY 

1078 T32SETFILELOCKS 

1079 T32CANCELLOCKREQUEST 

1080 T32KILLTHREAD 

1081 TQUERYRASINFO 

1082 T32DUMPPROCESS 

1083 T32SUPPRESSPOPUPS 

1084 T32IPROTECTWRITE 

1085 T32PROTECTSETFILELOCKS 

1086 T32IPROTECTREAD 

1087 T32PMPOSTEVENTSEM 

1088 T32PMWAITEVENTSEM 

1089 T32PMREQUESTMUTEXSEM 

1090 T32PMWAITMUXWAITSEM 

1091 T32PM1 6SEMCHK 

10 92 T 3 2 ALLOCTHREADLOCALMEMORY 

1093 T32FREETHREADLOCALMEMORY 

1094 T32SETEXTLIBPATH 

1095 T32QUERYEXTLIBPATH 

1096 T32PM1 6SEMRST 

1097 T32VERIFYPIDTID 

1098 T32SYSCTL 


OS/2 Fix Pack to Build Level Cross-reference 


The following tables cross-references some of the public fix packs and GA versions of OS/2 with their internal kernel build level. 

Notes: 

Some fix packs use the same kernel build level when updates are confined to modules other than OS2KRNL. 

The build level for a system may be determined using the command: 

VER /R 

The build level of a system module may be determined using the command: 


BLDLEVEL <file name> 



The fix pack level for a system may be determined using the SYSLEVEL command. The following example shows the system level 
information for OS/2 Warp V4.0 fix pack 6: 

C : \OS2 \ I NS TALL \ SYS LEVEL . FPK 

OS/2 Warp 4 Service Level 
Version 1.00 Component ID 566933010 

Type Fixpak 

Current CSD level: XR0M006 
Prior CSD level: XR0M006 


OS/2 V2.11 Build Level Cross-reference 
OS/2 Warp V3.0 Build Level Cross-reference 
OS/2 Warp V4.0 Build Level Cross-reference 


OS/2 V2.1 1 Build Level Cross-reference 


Version 

Build Level 

2.11 GA 

6 . 617 

XR_A07 6 

6.653 

XR_A080 

6.653 

XR_A090 

6.656 

XR_A092 

6.658 

XR_A095 

6.661 

XR_A096 

6.660 

XR_B097 

6.664 

XR_B 0 98 

6.665 

XR_B 0 99 

6.667 

XR_B 100 

6.668 

XR_B 101 

6.669 

XR_B 102 

6 . 670 

XR_B 103 

6 . 671 

XR_B 104 

6 . 672 

XR_B 105 

6.673 

XR_B 10 6 

6 . 674 

XR_B 107 

6.675 

XR_B 108 

6.676 

XR_B 109 

6 . 677 


OS/2 Warp V3.0 Build Level Cross-reference 


Version 

Build Level 

Warp GA 

8.162 

Warp Full Pack 

8.200 

Warp Connect 

8.209 

XR_W 005 

8.213B 

XR_W007 

8.230 

XR_W008 

8.230 

XR_W009 

8.234 

XR_W 010 

8.234 

XR_W0 1 1 

8.235 

XR_W012 

8.236 

XR_W013 

8.237 

XR_W014 

8.238 

XR_W016 

8.240 

XR_W017 

8.241 

XR_W 018 

8.242 

XR_W 019 

8.243 

XR_W02 0 

8.244 

XR_W021 

8.245 

XR_W022 

8.246 

XR_W023 

8.247 

XR_W024 

8.248 

XR_W025 

8.249 

XR_W02 6 

8.250 

XR_W027 

8.251 

XR_W028 

8.252 

XR_W02 9 

8.253 

XR_W032U 

8 . 256_uni 

XR_W033U 

8 . 257_uni 

XR_W034U 

8 . 258_uni 

XR_W035U 

8 . 259_uni 

XR_W036U 

8 . 260_uni 



OS/2 Warp V4.0 Build Level Cross-reference 


Version 


Build Level 


4 . 0 GA 


9.023 


XR_M000 


9.024 


XR_M001 


9.025 


XR_M002 


9.026 


XR_M003 


9.027 


XR_M004 


9.028 


XR_M005 


9.029 


XR_M006 


9.030 


Glossary 


The following terms and acronyms have been referenced in this document. 


AAB 

Absolute symbol 
Block Id 
BMP 
BPB 

Breakpoint 

cbargs 

CBIOS 

CDA 

CDIB 

CDS 

CRI 

Compatibility Region Mapping Algorithm (CRMA) 
Command Subtree (Csid) 

Context 

DEM 

DosHIp 

DPB 

FAT 

FSC 

Gate 

GDT 

Global Info Segment 

hal 

har 

hco 

hmte 

hob 

hptda 

HWND 

IDT 

Interrupt Vector 

IPE 

JFN 


JFN Table 

KSEM 

LDT 

Local Info Segment 

Maps 

MFT 

MQ 

MTE 

OTE 

PAI 

paragraph 

PDB 

PF 

PIB 

Pid 

Process 

Pseudo-Object 

PSP 

PTDA 

PTE 

PTree 

PWND 

QMSG 

RIP 

RAS 

RLR 

RMP 

SAS 

SFN 

SFT 

SMS 

STDA 

Scheduler 

Session 

Screen Group 

SGCB 

Slot 

SMTE 

SQMSG 

STE 

Symbols 
Symbol Groups 
Task 
TCB 

Thrashing 

Thread 

Thunk 

TIB 

Tid 

TLB 

TLMA 

Tracepoint 

TSD 

TSS 

UVIRT 

VMAH 

VMAL 

VMAR 

VMCO 

VMKH 

VMOB 

VDM 

VP 

VPB 

WND 

Zombie 


(No title) 


The term loader applies to two distinct components under OS/2: 


OS2LDR 


This is the OS2KRNL loader. One of its functions is to load the OS2KRNL module at boot 
time. After the system has booted OS2LDR provides the CBIOS layer for the kernel. 


System Loader 


This is a component of the kernel. It is responsible for loading program modules, DLLs, 
Device Drivers and File System Drivers. 


The logging facility discussed in this section applies to the System Loader. 


(No title) 


Throughout this chapter the term debugger is used loosely to mean any of the following where ambiguity is not a problem: 


Debug Kernel (HSTRICT or ALLSTRICT). 


The debugger component within the debug kernel. 


The debugging console. 


(No title) 


A simple numeric expression is one that resolves to a single integer value, for example: 

-4 

55c7 

Compare this with an address expression that has in addition an address operator (&, %, %%, #) and possibly involves more than one 
integer value, for example: 

Slfc: 45 
#lf :445 
%30045 


%%15c 



Feature 8281 8 introduces the Kernel Debugger .MK command. 8281 8 is supplied as an APAR fix to: 


OS/2 Warp V3.0: 


as PJ 18364 in fix pack 7 


OS/2 V2.11: 


as PJ1 6805 in fix pack 90 



The control block formatting conventions have been chosen to aid the user of the Kernel Debugger and Dump Formatter. 


Each control block is presented in tabular form with 5 columns used as follows: 


name 


Off 


Leng 


Type 


Field name, usually taken from the C header or MASM include file definition. 

Offset from the beginning of the structure. The offset is of the form x.y where x is the signed hexadecimal byte 
offset from the beginning of the structure and y is the bit offset from the high-order bit of the byte. 

Flexadecimal length of the field. 


The field type, for the purposes of displaying storage using the D command. The following values are used: 

S Complex structure. Choose display command to best suit your needs. 

D Double word. Use DD to format the field correctly. 

W Word. Use DW to format the field correctly. 

B Byte. Use DB to format the field correctly. 

A ASCII byte string. Use DA to format the field correctly. 

b/ank A blank value appears when a field does not begin or end on a byte boundary. In 

this case format the field from the previous field for which a type value is given. 
Such bit fields are presented in an order assuming this instruction is followed. 

Attempts to display bit fields in other ways may lead to a great deal of confusion! 


Description 

field description taken usually from the header or include file. 

A null row is used to indicate an overlay definition of the same control block. 

Flag fields are separately formatted in tabular form. 

Where a flag field represents a bit mask, the mask is given in hexadecimal and is assumed to indicated that corresponding bits 
are set to be in effect. Exceptions are specifically notes in the description. 

When the flag field take numerical values then they will be shown in either hexadecimal (prefixed with Ox) or decimal depending 
on the C or MASM definitions. 


(No title) 


A PM Send Message Structure (SMS) is used by WinSendMessage to enqueue a synchronously sent message. SMSs are chained from 
the MQ of both the sender and receiver. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


A PM Message Queue Header (MQ) is used as an anchor for message processing for a given PM Application's message thread. The MQ 
is created when a threads calls WinCreateMsgQueue. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


A PM Queue Message (QMSG) is used by WinPostMsg to enqueue an asynchronously sent message to a thread's message queue. 
QMSGs are chained from the MQ of the receiver in a circular array. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


A PM System Queue Message (SQMSG) is used by the PMDD.SYS device driver to enqueue messages, which represent system input 
activity, to the system input queue. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 

A pwnd is a 32-bit pointer to a WND structure. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


An hwnd is the handle to a WND structure. This is returned to an application when it uses WinCreateWindow and is used for subsequent 
PM API calls that affect the window. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


A PM Application Anchor Block is allocated in the Thread Local Memory Area when a PM application thread creates a message queue. 
The AAB contains a pointer to the MQ which allows PM to find the MQ in any context. This is particularly useful to the debugger since it also 
allows the MQ of any PM thread in the system since the TLMA is saved in a thread's TCB. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


The Thread Local Memory Area (TLMA) a an area of private arena memory that is instanciated at a thread level. This is achieved by 
copying the contents of the TLMA to dfff:0024 when a thread switch occurs. The TLMA contents are saved in the TCB at TCBTLMA. 

Storage is allocated from the TLMA by using the DosAllocThreadLocalMemory API. 

See Context Switching for more information. 


(No title) 


A PM Window Structure (WND) is used by PM to represent a window. When an application uses WinCreateWindow the WND is created 
and the hwnd is returned to the user. The WND contains information about a window's hierarchy, and associated MQ. 

See Exploring 32-bit Presentation Manager Under WARP for more information. 


(No title) 


A tracepoint is designated location in system or application code where the System Trace Facility will gather data for logging by the STDA. 
Tracepoints may be implemented statically by use of the DosSysTrace API or dynamically through use of the Dynamic Trace Customiser. 
System defined tracepoints are documented in the System Tracepoints Reference. 


(No title) 


The term Zombie is used to describe a terminal condition of a thread or process. There is a strict operating system definition and two 
colloquial uses: 

• The strict system definition refers to a process that has terminated but whose PTDA has been retained on the zombie queue 
(_pPTDAFirstZombie) because the process status byte (LISEG+Oxa) indicates that its parent wishes to collect termination 
information through DosWaitChild. The dead child is retained on the zombie queue until either the parent dies or issues 

DosWaitChild. 

• Zombie is also commonly used to refer to a terminating thread or process that has blocked after the application has returned to 
the operating system. Usually this implies a problem freeing memory because one or more pages have been long-term locked by 
a device driver. 

• The third use of zombie refers to any process that is anonymous. Internal thread, VDMs, and terminating threads can be 
anonymous. 


(No title) 


The Compatibility BIOS (CBIOS) is a layer of code in the OS2LDR that presents a hardware independent interface to the BIOS for the 
OS2KRNL. The interface to the OS2KRNL is provided through a set of entry points called Dos Helper Functions. 


(No title) 

A BIOS Parameter Block is used for low level Disk I/O calls to the BIOS. 

For further inforation see: 

The ,D BPB Command in the Kernel Debugger and Dump Formatter Command Reference. 
The BPB Structure in the System Reference. 


(No title) 


Kernel Semaphores are a form of semaphore, similar to the application 32-bit semaphore, used by kernel routines for longer term blocking. 
Kernel Semaphores provide addition funtion over the simple blocking mechanism, which includes: 

Priority inversion protection. 

Ownership auditability. 

For additional information see the following: 

The .D KSEM command. 

The .PB command. 

The KSEM strutures in the System Reference. 


(No title) 


Fixed Allocation Table (FAT) file system is the defaut filing system supported by OS/2. Support for FAT is always present, regardless of any 
installed tile systems. 


(No title) 


Internal Processing Errors (IPEs) are unrecoverable error conditions detected by the system while running in ring 0. The may arise from 
inconsistencies detected by the OS/2 Kernel or from traps occuring in any ring 0 code (Kernel, Installable File System Drivers and Device 
Drivers). 

When the system detects an IPE it enters a routine called panic where an error message is formatted and displayed and the system is 
halted. 


(No title) 


Reliability, Availability and Serviceability (RAS) is an acronym that refers to diagnostic and service support within OS/2. Frequently it is used 
as a synonym for the adjective diagnostic. 


(No title) 


A task is hardware architected thread of execution. The INTEL architecture allows for multiple independent tasks to co-exit and provides the 
task gate mechanism as a means of switching between tasks. Tasks are represented to the hardware by the TSS. 

The characteristics of a task are very similar to that ot the OS/2 process. Protect-mode processes however, tend to run under a single task 
in OS/2 and implement switching through the more efficient software managed context switching mechanism. 


Only VDMs and error recovery processes run as independent tasks. 


See the INTEL486 Programmer's Reference for more information. 


(No title) 


A gate descriptor is one that defines to the hardware a means of entering code that executes at a more privileged level of authority. Four 
types of gate are defined: 


Call Gate The subject of a CALL instruction. Typically used to implement operating system and device driver 

application programming interfaces (APIs). Device drivers may create Caff, gates dynamically 
using the DosDynamicAPI facility. 

Task Gate The subject of a call or exception where a (hardware assisted) task switch is required. 


Interrupt Gate 


The subject of a hardware or software generated interrupt. Typically an Interrupt gate will switch 
execution to an interrupt handler when a device presents an interrupt. 


Trap Gate 


The subject of a trap exception. Used to handle programming errors. 


(No title) 

A Virtual Dos Machine (VDM) is a type of process that runs in an emulated DOS environment using the DEM component of OS/2. 


(No title) 


The Thread Information Block (TIB) is a supplemental thread related control block made accessible to ring 3 programs. It contains thread 
information obtained from the thread's TCB and acts as an anchor for exception-handlers registered for the thread. 

The TIB may be located from TCBptib (TCB + 0x10) using the Dump Formatter or Kernel Debugger. 

A program gains access to the TIB along with the PIB by calling the DosGetlnfoBlocks API. 


(No title) 


The Process Information Block (PIB) is a supplemental process related control block made accessible to ring 3 programs. It contains 
process status information obtained from the process' PTDA. 

The PIB may be located from ptda_avatib (PTDA + 0x28) using the Dump Formatter or Kernel Debugger 
A program gains access to the PIB along with the TIB by calling the DosGetlnfoBlocks API. 


(No title) 


The Task State Segment (TSS) is a hardware architected control block that is used for two purposes: 


1 . To implement the privileged level transition mechanism initiated with a Call Gate instruction. 

2. To provide a register save area for hardware task switching initiated with a call to a Task Gate. 

In general OS/2 does not use the hardware task switching mechanism, so TSSs are few. It does however use the TSS for implementing 
Application Programming Interfaces (APIs) in the system. 

A TSS may be formatted using the Kernel Debugger and Dump Formatter DT command. 


(No title) 


The System Trace Data Area (STDA) is a circular buffer used to record trace events. The STDA may be located from the SAS. 


(No title) 


The Physical Arena Information structure (PAI) describes ranges of physical memory to memory management. 

Physical memory ranges mapped by RAM is described by the PAI pointed to by the SAS. 

There are two PAIs located at the following symbols: 

pgPageablePAI. 

This described ranges of physical memory available for pageable memory allocations. Normally two ranges are 
described: 

Below 1Mb 
16Mb and above 

_pgResidentPAI. 

This described ranges of physical memory available for backing resident memory allocations. Normally three ranges 
are described: 

Below 1Mb 

Below 16Mb 

16Mb and above 


(No title) 


The Interrupt descriptor table (IDT) is a hardware architected structure that comprises a table of gate descriptors, one for each interrupt 
vector. The low numbered entries are defined by the hardware architecture and dedicated to exception management. 

Under OS/2 one IDT is allocated for the entire system except for VDMs in which multiple IDTs per VDM are possible. A VDM will allocate 
one IDT per DPMI client, but if it does not use DPMI then the common system IDT is used. When multiple IDTs are used in a VDM then only 
the entries not reserved for Fl/W exceptions and interrupts are allowed to differ. 

The Kernel Debugger's V command may be used to intercept system exception handlers. 


(No title) 


An interrupt vector is presented to the processor when an interrupt is generated either externally by the Programmed Interrupt Controller or 
internally within the processor chip itself. It is used by the processor as an index into the IDT to determine which interrupt routine should be 
dispatched. 

The processor reserves vectors 0 - 31 to correspond to hardware architected exceptions 0 through 31 . Vectors 32 - 255 are reserved for 
I/O interrupts, which are presented to the processor by the Programmed Interrupt Controller when the one of its IRQ lines is triggered. The 
correspondence between vectors and IRQs is defined during system initialisation as follows: 

IRQs 0 - 7 vectors 0x50 - 0x57 

IRQs 8-15 vectors 0x70 - 0x77 

Thus a keyboard interrupt, which is assigned to IRQ 1 under the IBM PC architecture will be handled by the interrupted handler whose 
interrupt gate is assigned to IDT descriptor 0x51. 

See the Dump Formatter and Kernel Debugger Dl command for information on displaying IDT entries. 


The Local Information Segment is a per-process control block that records the current status of the process. It is imbedded in the PTDA and 
is also mapped by LDT descriptor Oxdfff. 


The Global Information Segment (GISEG) is a single instance control block that records the current session status, date and time, trace 
status and version of the system. 

The system maintains two copies of the Global Information Segment to fence against system damage. 

The selector for the GISEG may be located from the SAS. See the Dump Formatter and Kernel Debugger .A command. 

The GISEG is also mapped locally per-process by LDT descriptor 0xdff4. 


A Register Information Packet (RIP) is an entity used to describe the size and offset of a register in a system stack frame. RIPs are 
located in a CRI. 


The Client Register Information (CRI) is a table of Register Information Packets (RIPs) that describe the offset and length of each 
register that is stored in a ring 0 stack frame on entry to the kernel. This level of indirection allows kernel routines to access entry registers 
regardless of the stack frame type, of which there are a number, for example: 






System Entry Frames from API calls 


Trap Frames from traps and exceptions 


Interrupt Frames from the interrupt manager 


VDM Stack Frames 


Kernel Stack Frames 


Each TCB points to a CRI and the associated stack frame from TCB_pcriFrameType (TCB + 0x38) and TCB_pFrameBase (TCB + 0x3c) 
respectively. 


(No title) 


Context (or thread context) refers the view of the system any given thread has. Only one thread context may be current at any time. 

Switching contexts refers to the process of preparing the system for another thread to run. From an application program's perspective this 
implies restoring its registers and ring 2 and 3 stacks when it is given the opportunity to run again. From the system's perspective, 
restoration of an application's registers and stacks is done after the context switch, by the dispatcher, on exiting kernel mode. Not every 
context switch is followed by exiting kernel mode. For example, if another thread in the same process is in critical section (but blocked) then 
the new thread enters crt state and the scheduler is called to select yet another thread. 

Context switching includes the following system actions: 

• Updating GDT descriptor entries 28, 30, 38 and 1 50b, which point to 

the current process' LDT, 

the current threads ring 0 stack, 

the current thread's floating point emulator work area, 

the current thread's TIB. (By default the FS selector is loaded with 150b). 

Note: The LDT selector is only updated when the process changes with a context switch, that is, for a process context switch. 

• Updating page directory and tables for a process context switch. 

• Updating the TR register if the process switch involves a task switch (normally only VDMs). 

• Updating the current TSS ring 0 and ring 2 stack addresses. 

• Updating system copies of the Global and Local Information Segments. 

• Copying the Local Information Segment from the incoming PTDA and the Thread Local Memory Area from the incoming TCB to 
the segment mapped by LDT selector dfff. 


Note: 


Besides addressing the current ring 0 stack, selector 30 also addresses the current thread's scheduling control blocks. In particular: 
the PTDA, TCB and TSD. This is done by aliasing selected address ranges from selector 30 to those of the true PTDA, TCB and 
TSD in the system arena global memory for the current context. The system defines a dummy module containing a hard-coded 
PTDA. The symbols of this module have the same name as those of the fields in the PTDA. The system arranges for this to map the 
PTDA addressed by selector 30. This trick allows the system to refer to PTDA fields for the current context without regard for which 
process is current, simply by using the field names as public symbols. The user may use the same symbols for referencing the 
PTDA but these are only valid for the current system context. To access PTDA fields in other contexts the following technique can be 
used: 


Note that the current PTDA is located at PTDA_Start 
##.p * 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

*0025 0004 0002 0004 0001 blk 0300 7b7c8000 7bbc4080 7bbe8a90 lfc4 16 someprog 

The current thread slot is 25 

We wish to know the thread that has entered critical section in process of 
thread slot 40. The address of the critical section TCB is 
saved in ptda_pTCBCritSec and the thread ordinal and slot number 
are the first two words of the TCB. 

##.p 40 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0040 0012 0002 0012 0001 blk 0500 7b7d6000 7b9e4020 7b9c8a70 leb8 10 userprog 

##dw % (DW (%7b9e4020+ptda_ptcbcritsec-ptda_start ) ) 12 
%7b9c8de0 0002 0041 

Thread 2 of 12 or thread slot 41 is in critical section 


##.p 41 

Slot Pid Ppid Csid Ord Sta Pri pTSD pPTDA pTCB Disp SG Name 

0041 0012 0002 0012 0002 blk 0800 7b7da000 7b9e4020 7b9c8de0 led4 10 userprog 


Refer to the Kernel Debugger and Dump Formatter .P and .S commands for more information. 


(No title) 

DosHIp services comprise a set of hardware dependent service routines established during system initialisation for use by the OS2KRNL 
and user programs via the OEMHLP$ device driver. Many of the DosHIp services deal with device dependent BIOS behaviour and 
therefore provide a device independent interface to the BIOS. 


(No title) 


A breakpoint is a location in a program where execution is suspended and control is given to a debugging tool. 

The INTEL architecture supports two implementations of breakpoints for debugging purposes: 

The software generated breakpoint using the INT 3 instruction: 

The hardware generated breakpoint using the Debugging Registers. 

The use of software breakpoints require code modification, whereas the use of debugging registers does not. Flowever, the number of 
predefined software breakpoints is potentially unlimited whereas there are only 4 breakpoints specifiable using Debugging Registers. 

A further distinction between the two types is that software breakpoints only intercept the execution of a particular instruction path, whereas 
Debugging Registers may be used, in addition, to intercept data fetches and stores from a particular location in virtual memory. 

The Kernel Debugger supports both implementations of breakpoints through the use of the: 

BR command, which uses Debugging Registers, and 

BP command, which uses INT 3 instructions. 

The Kernel Debugger limits the predefinition of BP breakpoints to 10, however the programmer may code as may additional INT 3 
instructions into his/her program as desired. 

The Kernel Debugger refers to breakpoints explicitly set by the BP and BR commands as sticky (implying a certain permanence about 
them). The G command may have one or more temporary breakpoints established when one or more stop addresses are specified. These 
are referred to as go breakpoints. Once the Kernel Debugger breaks in go breakpoints are removed. The internal operation of the Kernel 
Debugger may also necessitate the use of the occasional temporary breakpoints when instruction tracing (see the T and P commands). 
These are set implicitly and discarded without the user being aware of their existence. Go and temporary breakpoints are created using 
the INT 3 instruction. Go and sticky BP breakpoints count towards the Kernel Debugger imposed limit of 10, but temporary breakpoints 
only ever exist singly so do not. 


(No title) 


A symbol map is created from symbolic name information generated by a program compiler and converted for used by the Dump Formatter 
and Kernel Debugger by the linkage editor and MAPSYM utilities. This allows program code and data locations to be referred to by name as 
well as by address. 


(No title) 


A symbol group is the set of symbols that are defined within a program segment. Frequently a program segment is given its own selector at 
load time. 


(No title) 


An symbol is the name given to a program code or data location that has been made public by the programmer. Such symbolic definitions 
appear in the map file output from the linkage editor. They may be referenced in the Dump Formatter and Kernel Debugger using the L 
command when the map file is converted to a symbol file using the MAPSYM utility. 


(No title) 


An Absolute symbol is a symbolised constant value that has been made public by the programmer. Such symbolic definitions appear in the 
map file output from the linkage editor and may be referenced in the Dump Formatter and Kernel Debugger using the LA command when 
the map file is converted to a symbol file using the MAPSYM utility. 


(No title) 


A System File Number (SFN) is the system-wide unique handle by which an open file system object is known. It is the offset into the SFT 
segment that locates the corresponding SFT entry. 

Refer to the following for more related information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 


(No title) 


A Job File Number (JFN) is a handle for open file system objects, unique within the process that opened the file system object. The JFN is 
returned by DosOpen. It is used and an index into the JFN Table to locate the corresponding SFT handle. 


(No title) 


A Patricia Tree (PTREE) is a form of tree structure designed to offer a fast look-up facility for generically specified keys. In OS/2 a modified 
form of the PTREE is use to manage MFTs for fast path-name look-up. 


(No title) 


The System Anchor Segment (SAS) is a central system control block use to anchor control blocks for major system components such as: 
File systems 
Device Drivers 
Scheduler 

Memory management 

The SAS is built at the beginning of the segment addressable from selector 70 and 78. 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 


(No title) 


A Master File Table (MFT) entry is used to associate path names with open files (SFTs) and lock records (RLRs). The MFTs are managed 
in a PTREE structure, which is locatable from the SAS. 

See also related structures: 

CDS 

DPB 

SFT 

FSC 

VPB 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 

MFT control block format 


(No title) 


A Record Lock Record (RLR) describes a locked region of a file system record. RLRs are chained from the related and point to the 
associated SFT. They record the owner of the record lock. 

See also related structures: 

CDS 

DPB 

SFT 

FSC 


VPB 


Refer to the following for more detailed information 


RLR control block format 


(No title) 


A System File Table (SFT) entry is used to describe the attributes of each instance of an open file system object. SFTs are stored in a 
segment directly locatable from the SAS. SFTs are indirectly locatable from the JFN Table imbedded in the PTDA of each process that 
opens a file system object. 

See also related structures: 

CDS 

DPB 

MFT 

FSC 

VPB 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 

SFT control block format 


(No title) 


A Job File Number Table (JFT) entry is assigned to each open file system object within a process. The JFT provides a cross-reference to 
the handle for the corresponding SFT. The JFT is locatable from the PTDAfield JFN_pTable (PTDA +0x5b8 (H/R: +0x5b0)) for each 
process. 

The JFT is initially allocated within the PTDA at label JFN_Table (PTDA +0x35e) with 20 entries. If this is expanded by use of the 
DosSetMaxFFI then JFN_pTable is updated to point to the new table. 

See also related structures: 

CDS 

DPB 

MFT 

FSC 

VPB 


(No title) 


A Volume Parameter Block (VPB) is used to store volume information associated with a file system object. All VPBs are contained within a 


single segment locatable from the SAS. Most file system structures contain a VPB handle for an associated volume. The handle is used as 
an offset into the VPB segment. 

See also related structures: 

CDS 

MFT 

SFT 

DBP 

FSC 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 

VPB control block format 


(No title) 


A Current Directory Structure (CDS) is used to store file system information about the current directory per drive of each process. 

Each CDS is managed in an RMP segment. The PTDA for each process contains an imbedded array of 26 CDS handles, one for each 
drive. The CDS RMP segment may be located from the SAS. 

See also related structures: 

MFT 

SFT 

DPB 

FSC 

VPB 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 

CDS control block format 


(No title) 


The Codepage Data Information Block (CDIB) contains country-specific constant information relating to screen, keyboard and printer 
devices. The CDIB is built from information derived directly from CONFIG.SYS statements. 

The CDIB may be located from the SAS. 


(No title) 


A File System Control Block (FSC) represents an installed file system (IFS). The FSC contains a table of entry points implemented by the 
file system driver (FSD). All FSCs are located in a single segment whose selector may be obtained from the the SAS. see .A command 

See also related structures: 

CDS 

MFT 

SFT 

DPB 

VPB 

Refer to the following for more detailed information 
FSC control block format 


(No title) 


A File System Driver (FDS) is a special load module that implements an installed file system (IFS). FSDs are loaded during system 
initialisation when IFS= statement of CONFIG.SYS is encountered. 

Examples of FSDs are: 

HPFS.IFS 

HPFS386.IFS 

CDROM.IFS 


(No title) 


A Driver Parameter Block (DPB) contains vital information about the state and format of a disk drive. The DPBs are chained together and 
located in a single segment whose selector may be obtained from the SAS. See .A command 

See also related structures: 

CDS 

MFT 

SFT 

FSC 

VPB 

Refer to the following for more detailed information 

.A Kernel Debugger and Dump Formatter command. 

.D Kernel Debugger and Dump Formatter command. 


(No title) 


Thrashing refers to the state of a system where most of the CPU time is spent paging in and out memory from the swap file. This happens 
when real storage is heavily over committed and storage references encompass a wide range of virtual pages over a short processing time. 

Such a condition can indicate a poorly tuned application where paging is caused by the process of accessing data the application needs. A 
typical scenario is where work data is chained in a single, very extended, queue and no mechanism exits to access the required data without 
scanning the entire chain. Use of hashing techniques greatly reduce this problem. 


(No title) 


The Compatibility Region Mapping Algorithm (also referred to as the thunking algorithm) is used by thunking code to convert 16:16 
addresses to 0:32 addresses and v/ce versa. 

This is achieved by ensuring LDT selectors have their limits set to 64K so that they ti/e the compatibility region (0M to 448M). This gives an 
easy conversion algorithm from the selector:offset address to the 32-bit linear address. In C language syntax this is expressed as follows: 

linear_address=((selector » 3) « 16) + offset 

selector:offset=((linear_address. » 1 3) | 7):(linear_address & OxOOOOffff) 


(No title) 


Thunking is the process of calling 16-bit code from 32-bit code and vice versa . Thunking consists of applying the CRMA to convert from 
one form of address to the other and making any stack parameter adjustments either by padding 1 6-bit operands to 32-bit with leading zeros 
(1 6- to 31 -bit conversion) or truncating the padded 32-bit value to 1 6 bits (32- to 1 6-bit conversion). 


(No title) 


The Translation Lookaside Buffer (TLB) is a hardware implemented buffer used for caching linear to physical address mappings. 
The lntel486(TM) processor provides test registers for manipulating the TLB. 


(No title) 


cbargs is the argument count associated with the hardware defined call gate mechanism. The count is the number of words or 
double-words (as defined by the gate descriptor) that are inserted into a ring 0 stack when ring 2 or ring 3 code executes a call gate 
instruction. 


(No title) 


A paragraph is a unit of memory allocation of 16 bytes. Paragraph aligned allocations lie on a 16-byte boundary. 


(No title) 


The Program Data Block is the name given to the DOS PSP by the DEM component of OS/2. 


(No title) 


The Program Segment Prefix (PSP) is a DOS control block that forms the header of a loaded program. Under OS/2 the DEM component 
refers to this as the PDB or Program Data Block. 


(No title) 


The Loader Cache is used for saving discardable pages of instance data segments from DLLs loaded from mountable media. The caches is 
allocated from the kernel heap and has a system object owner ID of cache 


(No title) 


The Scheduler component of OS/2 is responsible for managing threads on queues according to priority and status. 
Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 

.PB Kernel Debugger and Dump Formatter command. 

.PU Kernel Debugger and Dump Formatter command. 

.PQ Kernel Debugger command. 


(No title) 


A Screen Group is a logical full screen buffer and keyboard. A number of processes may be assigned to run in a given screen group. The 
workplace shell is one such screen group. Each screen group is assigned an ID. The screen group assigned to a process is recorded in its 
Local Information Segment. The currently active screen group is recorded in the Global Information Segment. 

Screen Groups are represented by SGCB structures. 

Under version 2 of OS/2 the screen group concept has been extended to that of a session. 

Refer to the following for information on displaying screen group ids. 

.P Kernel Debugger and Dump Formatter command. 


(No title) 


The Screen Group Control Block (SGCB) is used by the session manager component of the system to represent a Screen Group. It 
contains status information for the screen group and acts as a cross reference between the Pid currently associated with a given screen 
group and v/ce versa. 


(No title) 


Sessions are groups of related processes initiated using DosStartSession API. Each session is assigned a logical screen buffer or 
presentation space. Sessions are identified by a unique ID that corresponds with their Screen Group Id (though the range of numbers is 
extended to included PM sessions, which all share then same screen group). 

The following session ID/Screen Group ID ranges are defined: 

SG Usage 

0 Hard Error Popups 

1 Shell Screen Group 

2 Real Mode Screen Group 

3 VioPopUp Screen Group 

4 First Full Screen Application Session 

15 Last Full Screen Application Session 

16 First Windowable VIO-Session 

31 Last Windowable VIO-Session 

32 First PM session 

255 Last PM session 


(No title) 


A process is a collection of threads that share a common address space. 

Each process is primarily represented by a PTDA structure, and is assigned a unique identifier, the Pid. 
Processes are organised in hierarchical tree structures known as process or Command Subtrees.. 


(No title) 


A thread is a independently scheduleable entity that competes for processor resource with other threads. 

Each thread is represented by a TCB and TSD structure.. 

Threads are organised within processes and assigned a unique identifier within the owning process known as the Tid. 


All threads within the system are assigned a system wide unique identifier known as the Thread Slot Number 
Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 


(No title) 


The Thread Slot Number is a system wide unique identifier assigned to each thread in the system. 

Threads are located from the thread slot table whose linear address is at global symbol: 

_papTCBSlots 

Each slot is a double-word linear address of the corresponding thread's TCB. The first slot (slot=0) is reserved. 

Under the Kernel Debugger and Dump Formatter the following symbols may be used to represent particular threads in many of the 
commands that accept a slot number as a parameter: 

* The current or last dispatched thread as recorded in word global variable _TaskNumber 

# The default thread slot used by the Dump Formatter and Kernel Debugger. 

Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 
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The Thread Identifier (tid) is a value, unique within the owning processes, used to identify the thread. It is not the same as the Thread Slot 
Number, which uniquely identifies a thread, system-wide. 

The Tid is used in thread related APIs such as DosKillThread and DosSetPriority. 


(No title) 


The Process Identifier (pid) is a unique system wide value used to identify a given process. 

Note: It is not the same as the hptda which 
also uniquely identifies a process. 

The Pid is used as a handle in process related APIs such as DosKillProcess and DosWaitChild. 
Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 
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The Command Subtree Identifier is used to represent a part of a process (or command) tree headed by a particular parent process. The ID 
used is the Pid of the process that heads the subtree. 

Normally a process has a CSID equal to it's own Pid. However, when processes become orphaned they acquire the subtree Id of their 
original parent and become adopted by their grand-parents by acquiring their grand-parents’s Pid as their new parent Pid. 

Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 
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A Block Management Package (BMP) is a generalised facility for managing tables of fixed length records. The BMP manages the 
commitment and decommitment of table storage and maintains a free a record list. ;p.The table is prefixed with a header structure (the 
VMBH) which facilitates the management of the BMP. 

Typical examples of BMPs are: 

The VMOB table. 

The VMAL table. 

The VMAR table. 


(No title) 


A Record Management Package (RMP) is a data structure designed for tabulating variable length records. Typically OS/2 uses RMPs to 
manage: 

Named Storage names 
Open File names 
Directory names 
System Semaphore names 


(No title) 


DEM is the DOS Emmulation component of OS/2. 


(No title) 


A Page Table Entry (PTE) is a hardware architected structure that is used to map virtual addresses to physical storage addresses. 
Refer to the following for more detailed information 

DP Kernel Debugger and Dump Formatter command. 
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The User Virtual (UVIRT) attribute signifies a virtual storage mapping to physical storage made without the full set memory management 
structures. 

The UVIRT attribute may be associated with a number of structures, for example: 

PTE 

LDT and GDT descriptors. 

VMAL 

In general UVIRT allocations are 'convenience' mappings, which map memory to selector allocation. The attribute is used by Memory 
Management to signal minimal processsing requirements. Typically they are created by device drivers using the DevHlp_PhysToUvirt 
facility. They are also created by the system where a 'quick' form of aliasing is required without the alias being associated with any memory 
object. Examples of this are: 

VDM private arena memory 

Selectors 5b and 53, 32-bit Code and Data selectors which are used by most 32-bit application programs. 

Selector 30, the TASKAREA selector, which aliases the current process' TSD, TCB and PTDA. 


(No title) 


A Virtual Page Structure (VP) is used by memory management to track the status of a virtual storage frame, whether backed by physical 
storage, cached by the loader or paged out to the swapper. The Virtual Page Structures are allocated in contiguous storage, anchored from 
the address specified in global variable: 

_pgpVPBase 


Refer to the following for more detailed information 

.MV Kernel Debugger and Dump Formatter command. 
VP control block format 


(No title) 


A Page Frame Structure (PF) is used by page frame management to track the status of a physical storage frame. The Page Frame 
Structures are allocated in contiguous storage, anchored from the address specified in global variable: 

_pft 

Each PF corresponds one to one with a frame of physical storage and provides links to Virtual Page Structures (VPs). 

Zero or more PTEs may be pinned to a physical frame, this is reflected in a reference count maintained in the associated PF. 

UVIRT mappings have their corresponding PFs reserved unless aliased by non-UVIRT storage. 

Refer to the following for more detailed information 

.MP Kernel Debugger and Dump Formatter command. 


PF control block format 


(No title) 


The Global Descriptor Table (GDT) is a hardware architected control block. The GDT is common to all protect mode processes. It contains 
descriptors for memory segments common to all protect mode processes. 

Refer to the following for more detailed information 

DG Kernel Debugger and Dump Formatter command. 
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The Local Descriptor Table (LDT) is a hardware architected table of memory descriptors. 

Under OS/2 one LDT is allocated per process except for VDMs in which multiple LDTs are possible. A VDM will allocate one LDT per DPMI 
client, but if it does not use DPMI then the LDT is not initialised. When multiple LDTs are used in a VDM then the LDTR descriptor contents 
are updated to make an LDT current. This allows the same LDTR selector may be use regardless of current client. 

Refer to the following for more detailed information: 

Kernel Debugger and Dump Formatter DL command. 
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A Virtual Memory Context Record (VMCO) is used to record the association of shared arena, shared data objects with processes that are 
using. 

Each VMCO is identified by a unique handle referred to as the hco. 

Refer to the following for more detailed information 

.MC Kernel Debugger and Dump Formatter command. 

VMCO control block format 


(No title) 


The Virtual Memory Object Record (VMOB) are used to represent memory objects, that is the instance data associated with a particular 
virtual address. VMOBs contain pointers to the the owning and requesting objects as well as the corresponding arena record (VMAH). 

Each VMOB is identified by a unique handle referred to as the hob. 

Refer to the following for more detailed information 

.MO Kernel Debugger and Dump Formatter command. 


VMOB control block format 


(No title) 


The Per-Task Data Area (PTDA) is the anchor point for all process (task) related control information. One PTDA exists per process and 
from it is located the LDT, TCB chain, Page tables and Arena Headers for a process. 

All active PTDAs are addressable, whatever the current process, from a global address in the system arena. However, for the current 
process an alias address is created using selector 30 and in addition the many of the PTDA field names are declared as public symbols. 
This allows the fields names in the PTDA for the current process to be referred to directly under the Kernel Debugger and Dump Formatter. 

PTDA_Start is the symbol assigned to the beginning of the current PTDA. Using the ? command against this and other PTDA field names 
allows relative offsets for PTDA fields to be calculated and used in other contexts as offsets from the global PTDA address. 

Refer to the following for more detailed information 

.P Kernel Debugger and Dump Formatter command. 

PTDA control block format 
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One Virtual Memory Arena Fleader Record (VMAH) is allocated per arena to record information about the address range of an arena. The 
VMAH points to its sentinel arena record (VMAR). 

Each VMAH chained in a double linked list. 

The system arena VMAH is located at global symbol: 

ahvmSys 

The shared arena VMAH is located at global symbol: _ahvmShr 

For each private arena the VMAH is imbedded in the PTDA at label ptda_ah (PTDA+0x40). 

Under OS/2 2.1 the system and shared arena VMAHs are assigned to objects 4 and 5 respectively. 

Refer to the following for more detailed information 
VMAH control block format 


(No title) 


The Virtual Memory Alias Record (VMAL) is used to represent aliased regions of virtual memory. These are either: 

regions of physical storage that may be addressed by more than one virtual, or 

linear address that are not associated with a memory object, such as VDM UVIRT allocations. 

When two memory objects are aliases of each other then they need not have co-incident sizes or origins within the aliased arena record. 
Aliases are designed to provide alternative attributes for accessing the same piece of data within or across processes. Compare this with 
shared instance data within the shared arena, where multiple object records share a common arena record. In this case each object is 
associated with a unique process and is not considered an alias. 


Each VMAL is identified by a unique handle referred to as the hal. 


Refer to the following for more detailed information 


.ML Kernel Debugger command. 


VMAL control block format 


(No title) 


The Virtual Memory Kernel Heap (VMKH) structures are used to describe system heap memory. Many objects allocated out of the kernel 
heap are assigned a System Object identifier. 

Refer to the following for formats of the kernel heap structures: 


The Virtual Memory Arena Record (VMAR) is used to represent a contiguous region of virtual memory allocated in page quantities. Such 
storage may or may not be committed or resident. 

Arena records are chained in a doubly linked lists, one for each arena type. That is, the chain chain exists separately for each private arena, 
the shared arena and system arena. 

Special arena records, known as Sentinels head each chain. They describe the entire arena which they head. 

All virtual memory is described by by at least one arena record. 

Each VMAR is identified by a unique handle referred to as the har. 

Arena also records point to the following related memory structures: 

VMOB 

VMAL 

VMCO 

Refer to the following for more detailed information 

.MA Kernel Debugger and Dump Formatter command. 

VMAR control block format 


VMKH - Kernel Heap Header 


VMRKH - Resident Kernel Heap Structures 


VMSKH - Swappable Kernel Heap Structures 




An Object Table Entry (OTE) describes the address, size and attributes an object within a loaded 32-bit load module. 
The corresponding control block for a 1 6-bit load module is the STE. 


Refer to the following for more detailed information 


.LM Kernel Debugger and Dump Formatter command. 


(No title) 


A Segment Table Entry (STE) describes the address, size and attributes of a segment (object) within a loaded 16-bit load module. 
The corresponding control block for a 32-bit load module is the OTE. 

Refer to the following for more detailed information 

.LM Kernel Debugger and Dump Formatter command. 
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The (non-swappable) Module Table Entry (MTE) for a loaded module is use to record information about loaded modules. Since the MTE 
is allocated in non-swappable only information that must be resident at all times is recorded here. Related information that may be paged out 
is recorded in its sister control, the Swappable Module Table Entry (SMTE). 

The MTE contains the following information: 

pointers to related control blocks such as: SMTE, resource and fix-up tables; 

attributes of the load module; 

Use count for .EXE modules. 

Each MTE is identified by a unique handle referred to as the hmte. 

Refer to the following for more detailed information 

.LM Kernel Debugger and Dump Formatter command. 
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The Swappable Module Table Entry (SMTE) contains characteristics of a loaded module that may be page out of memory. The SMTE is 
the sister control block to the MTE, which records those characteristics that must be resident at all times. 

The SMTE principally contains: 

A pointer to OTE or STE. 

A pointer to the fully qualified module name. 

The entry point and initial stack pointers. 

Refer to the following for more detailed information 

.LM Kernel Debugger and Dump Formatter command. 
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The CDA is the Common ABIOS Data Area. 

Refer to the following for more detailed information 

.C Kernel Debugger and Dump Formatter command. 
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The Tread Control Block (TCB) contains per-thread control and status information that must be resident at all times. The swappable 
counterpart to the TCB is the TSD 

Refer to the following for related information 

.P Kernel Debugger and Dump Formatter command. 

TCB control block format 


(No title) 


The Thread Swappable Data (TSD) control block contains per-thread status and control information that resides in swappable memory and 
therefore is not required for reference out of context of the related thread. The resident memory counterpart to the TSD is the TCB (Thread 
Control Block). 

The vast majority of the TSD is used as the ring 0 stack when a thread makes a privilege level transition to ring 0 via a call gate descriptor. 
The base of the ring 0 stack will therefore include the ring 3 call gate stack frame on entry to ring 0 (which is usually kernel or device driver 
code). 

In the debug kernel a dummy page prefixes the used part of the TSD in order to catch ring 0 stack faults. 

Other information contained in the TSD includes GTD instance data for the corresponding thread's context. This comprises descriptors for: 
28: The LDT descriptor. 

30: Base selector for ring 0 process instance data, which includes the ring 0 stack, TCBs and PTDA. 

38: Floating point emulator instance data 
40: FS mapping to the TIB 

When an an inter-process thread context switches, descriptors 30 - 40 are loaded into the GDT from the TSD. When an intra-process thread 
context switches, descriptors 28 - 40 are loaded into the GDT from the TSD. 

Refer to the following for related information 

.P Kernel Debugger and Dump Formatter command. 

TSD control block format 
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The memory alias record handle (hal) is an index into the table of memory alias records (VMALs) whose address is located at 

parVMAIiases. 

Refer to the following for more detailed information 
.ML Kernel Debugger command. 
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A hco is a handle for a memory context record. This is an index into the table of memory arena records (VMCOs) whose address is located 

at _pcovmOne. 

Refer to the following for more detailed information 

.MC Kernel Debugger and Dump Formatter command. 
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The memory arena record handle (har) is an index into the table of memory arena records (VMARs) whose address is located at 

parvmOne. 

Refer to the following for more detailed information 

.MA Kernel Debugger and Dump Formatter command. 
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The memory object record handle (hob) is an index into the table of memory objects records (VMOBs) whose address is located at 

_pobvmOne 

Refer to the following for more detailed information 

.MO Kernel Debugger and Dump Formatter command. 
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Block-Ids are conventional tokens used to represent the reason for a thread blocking. This occurs as the result of the kernel entering 
TKSIeep (either directly or via ProcBlock). The address of the block-id is passed to TKSIeep and stored in TCBSIeepID. A thread wakes 
when the kernel calls TKWakeup (or ProcRun) with a corresponding block-id. All, zero or the highest priority thread blocked on the block-id 
will be woken depending on parameter flags. This mechanism is used by most functions and APIs that cause thread execution to be 
suspended, either for an event or serialisation. 

Examples are: 


DosSleep 


DosSemWait 


DosWaitChild 


DosRead 


DevHlp_ProcBlock 


Refer to the following for more detailed information 

.PB Kernel Debugger and Dump Formatter command. 


The PTDA control block handle hptda is the hob of the memory object that contains the PTDA. 
PTDAs are allocated as pseudo-objects, so do not have Arena Records associated with them. 
Refer to the following for more detailed information 


.MO Kernel Debugger and Dump Formatter command. 


The MTE control block handle (hmte) is the hob of the memory object that contains the MTE. 
MTEs are allocated as pseudo-objects, so do not have Arena Records associated with them. 
Refer to the following for more detailed information: 


.MO Kernel Debugger and Dump Formatter command. 
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Pseudo-Objects are small system objects that comprise control blocks and other system areas, which for reasons of virtual memory 
conservation are not represented by a corresponding Arena Records. They are allocated out of the kernel resident heaps and comprise the 
following types of object: 


MTE 

VMAH 

PTDA 

Loader Cache 

Refer to the following for more detailed information 
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